Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS49581.roa
File:                     AS49581.roa (raw, json)
Hash identifier:          3rSMLci0gLcTrVEX/KQ34WxKMr/G+tPiRKltulQltkU=
Subject key identifier:   08:71:3C:8E:CC:AA:C2:7F:95:45:2E:A3:D5:2C:E6:B0:F9:57:1A:09
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       51EDA4B0DA39007CF7C790EAA731D5F1249BFAE2
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS49581.roa
Signing time:             Tue 23 Jan 2024 01:04:33 +0000
ROA not before:           Tue 23 Jan 2024 00:59:33 +0000
ROA not after:            Tue 21 Jan 2025 01:04:33 +0000
asID:                     49581
IP address blocks:        2a06:9f42::/32 maxlen: 48

Validation:               Failed, certificate revoked on Thu 25 Apr 2024 04:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ed:a4:b0:da:39:00:7c:f7:c7:90:ea:a7:31:d5:f1:24:9b:fa:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan 23 00:59:33 2024 GMT
            Not After : Jan 21 01:04:33 2025 GMT
        Subject: CN=08713C8ECCAAC27F95452EA3D52CE6B0F9571A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d9:e9:fc:28:9c:89:1c:09:a4:70:b4:8c:d0:
                    2b:63:fc:62:86:12:5e:d3:f9:9c:07:8c:e6:50:af:
                    10:33:59:05:14:4f:be:12:aa:09:b6:8e:dd:5b:23:
                    86:86:fa:3b:8f:f0:e8:37:c9:9e:8f:70:cd:af:a1:
                    e7:6f:c9:d9:26:8a:a5:d6:64:da:d8:0e:de:63:44:
                    18:1c:7c:72:db:a5:09:c5:7a:dd:dd:8a:de:d4:13:
                    55:b4:75:53:f2:18:8d:e9:b2:91:2a:a6:eb:42:45:
                    fc:c0:a5:17:f7:77:5a:46:2c:32:02:5f:89:4b:c8:
                    1a:99:4e:2e:23:7a:b6:89:26:c6:8c:25:14:55:f3:
                    be:60:10:a2:1b:af:58:29:33:37:b7:37:99:35:18:
                    72:cb:1d:a9:b2:f1:47:ab:48:1b:35:b1:3a:59:c3:
                    5b:91:7f:ff:16:dd:c8:bc:81:64:c3:4f:6f:b3:2b:
                    b9:b4:ee:f1:5d:78:47:13:63:7b:99:89:a9:77:1a:
                    66:43:27:1f:5c:c5:de:af:36:d7:d2:b0:c7:da:2a:
                    86:4b:56:91:c3:44:56:5a:75:28:42:26:71:a3:9f:
                    51:13:e7:6b:1b:fd:49:0c:1b:8b:7e:2d:a6:76:23:
                    f4:f4:8e:27:a3:22:88:44:08:4b:5c:06:ff:77:d1:
                    e8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:71:3C:8E:CC:AA:C2:7F:95:45:2E:A3:D5:2C:E6:B0:F9:57:1A:09
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS49581.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f42::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:b5:b2:fc:7c:94:d1:db:69:80:7b:42:8d:81:5f:c6:67:f8:
         a6:4d:77:fa:b1:d4:c6:73:10:df:53:a7:35:9e:13:e3:81:31:
         b1:43:fb:81:7e:b7:99:90:2d:3d:26:7f:5b:69:d0:35:10:d2:
         e2:bd:08:02:87:63:f4:ad:75:35:78:46:54:6b:0f:55:94:83:
         e3:b6:c2:c9:e7:20:49:c9:16:61:6a:0f:53:63:5b:35:8a:ba:
         40:89:e0:9b:5e:fb:9d:43:3f:33:b3:c5:4c:75:19:cb:05:c7:
         4d:d6:5d:c5:c0:11:44:0d:d7:0e:12:18:81:9e:d8:26:7b:b8:
         f8:7c:8b:f8:56:bc:d4:5a:62:97:80:61:0d:1f:1c:59:da:45:
         0b:aa:bc:73:bc:06:54:0d:2b:0e:4b:08:27:6f:4e:e5:59:3d:
         0e:ea:a5:3a:a7:63:05:35:36:48:b9:57:ef:88:db:f3:80:c6:
         85:84:54:b7:fc:fd:fc:80:6e:f6:33:ca:c4:da:82:7e:3d:8c:
         58:03:2b:4a:02:e9:5a:2f:c4:e3:58:89:af:3b:60:cd:58:d7:
         91:a0:a4:72:8a:64:14:a6:f1:0b:b6:51:8a:0c:61:50:e2:87:
         8d:44:be:a1:73:6f:da:53:86:9d:8f:96:2e:af:1d:7d:69:b0:
         33:7a:0a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:03:50 2024 by rpki-client on console-fra.rpki-client.org