Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS998.roa
File:                     AS998.roa (raw, json)
Hash identifier:          ScfOYWL6ChXzXfoIpCpX0WgmkbKvEEA68GlJQska7FY=
Subject key identifier:   BF:7D:E9:7D:D4:D2:CA:51:66:9F:92:B1:C4:CA:AE:B6:06:42:8A:55
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       5BCD492CE338740E097EC27AE631D87687A0A89D
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS998.roa
Signing time:             Fri 12 Jul 2024 20:50:03 +0000
ROA not before:           Fri 12 Jul 2024 20:45:03 +0000
ROA not after:            Fri 11 Jul 2025 20:50:03 +0000
asID:                     998
IP address blocks:        2a0a:6047::/32 maxlen: 48

Validation:               Failed, certificate revoked on Wed 24 Jul 2024 20:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:cd:49:2c:e3:38:74:0e:09:7e:c2:7a:e6:31:d8:76:87:a0:a8:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jul 12 20:45:03 2024 GMT
            Not After : Jul 11 20:50:03 2025 GMT
        Subject: CN=BF7DE97DD4D2CA51669F92B1C4CAAEB606428A55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:15:77:31:14:5d:4d:cf:56:77:8b:0d:19:f2:
                    c1:07:b4:94:d0:a4:2d:5d:10:24:fc:d8:0c:b5:63:
                    10:99:11:c6:b8:8f:6d:23:d4:70:cb:04:ad:b2:39:
                    b7:1e:07:fa:73:ce:70:b7:5b:f4:06:78:64:a9:ac:
                    1f:53:3b:77:f2:00:97:a5:d1:35:fb:53:f5:1d:d0:
                    1c:86:dd:54:e0:8a:20:ef:08:b5:0c:c9:20:47:28:
                    ef:61:39:f3:a2:26:b1:fb:e3:c9:4c:c5:cf:8e:d2:
                    31:c9:6e:3a:e0:7d:7a:8b:95:84:ad:2f:43:a8:ec:
                    93:8c:0a:4b:0b:1c:4b:6e:f0:7d:e0:51:98:fe:61:
                    67:fb:f1:70:62:96:17:2a:b6:dc:77:d7:e0:b9:20:
                    56:67:c3:a3:0e:16:02:91:53:bc:1c:2c:07:4b:10:
                    19:71:fc:ca:5e:e5:37:3a:b3:a3:cc:91:1e:71:3e:
                    c7:e8:67:e1:7f:71:fb:bf:94:78:6a:4e:56:79:4f:
                    34:26:05:5f:da:37:ea:9a:5a:6b:74:6d:41:02:2b:
                    ca:e2:1d:4f:b6:4f:e8:a1:19:f3:52:35:f7:3b:59:
                    5a:98:af:ca:6e:c8:b8:1c:83:3e:3b:03:92:5a:16:
                    7c:5d:61:02:4c:7a:91:60:1c:f6:5c:38:09:aa:43:
                    fa:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7D:E9:7D:D4:D2:CA:51:66:9F:92:B1:C4:CA:AE:B6:06:42:8A:55
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS998.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6047::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:e7:fa:de:d1:0a:ac:16:3b:32:72:9b:25:41:71:0e:99:05:
         9b:7b:46:ec:ef:b1:95:9e:64:85:0a:78:0a:1d:9a:eb:d0:c9:
         ce:91:2f:3e:1c:92:83:11:c3:a6:7d:70:12:16:7c:20:56:b4:
         71:5c:48:53:21:8d:09:83:04:fe:76:6c:83:4c:d6:a4:38:ff:
         42:b9:09:f3:a2:d4:72:e8:ed:db:b6:bd:ac:f5:7a:43:02:6f:
         8a:d9:d2:c3:74:df:0a:3a:5e:dd:d6:16:8e:01:2e:0b:de:80:
         3b:76:72:2c:3c:8d:11:b5:83:8a:51:65:be:9d:9a:92:9d:6e:
         f2:1a:f7:cf:15:82:f4:92:a8:83:d0:f2:00:6e:8d:12:79:8f:
         56:63:88:5a:26:75:5a:92:92:d0:10:21:a8:57:7f:4d:9c:56:
         2f:ca:b1:c7:4c:e6:1f:ac:29:a6:52:62:04:61:75:4e:fa:cd:
         36:26:17:47:14:be:cf:07:64:0b:81:1b:09:89:68:31:94:b3:
         19:e1:1e:c8:92:01:06:ad:5f:4a:9f:62:22:f9:f3:69:3c:46:
         16:1b:a8:fa:a7:7e:70:1b:8d:b8:48:2b:c7:92:ae:16:2a:d7:
         a8:ac:2b:78:fd:c3:f9:39:88:87:8b:c2:1c:2c:81:c8:22:1b:
         ea:86:4b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----