Route Origin Authorization

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a313a3a2f34382d3438203d3e20323035383438.roa
File:                     326130363a313238323a313a3a2f34382d3438203d3e20323035383438.roa (raw, json)
Hash identifier:          iJozaCmt+cufEe1lVjQFVdEZiKZRxdFTD+CHMkKede8=
Subject key identifier:   91:34:C8:BC:9D:59:F7:8F:3D:AF:C7:F7:D4:F4:5A:9A:57:A1:75:ED
Certificate issuer:       /CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
Certificate serial:       60F46A0F34826FC9D9C33EE5FE9D18216CDA9907
Authority key identifier: 3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a313a3a2f34382d3438203d3e20323035383438.roa
Signing time:             Fri 02 Feb 2024 23:10:37 +0000
ROA not before:           Fri 02 Feb 2024 23:05:37 +0000
ROA not after:            Fri 31 Jan 2025 23:10:37 +0000
asID:                     205848
IP address blocks:        2a06:1282:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 04 Mar 2024 13:28:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f4:6a:0f:34:82:6f:c9:d9:c3:3e:e5:fe:9d:18:21:6c:da:99:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
        Validity
            Not Before: Feb  2 23:05:37 2024 GMT
            Not After : Jan 31 23:10:37 2025 GMT
        Subject: CN=9134C8BC9D59F78F3DAFC7F7D4F45A9A57A175ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ee:2d:47:f4:e6:bf:cd:9f:bb:c4:9f:f9:8b:
                    d4:da:b8:20:e1:6d:e4:72:74:16:96:dc:79:ef:e2:
                    9d:aa:52:d9:00:54:66:d1:fe:0b:9d:71:38:bf:89:
                    3b:66:1b:3c:6e:ea:9c:a6:2c:05:f0:2e:6e:4a:94:
                    93:40:b7:8d:42:08:83:aa:12:ac:86:b1:10:a4:d2:
                    a7:bf:7c:ca:27:ec:96:d6:0d:9e:14:5f:ae:38:07:
                    1d:df:dd:9e:19:b4:be:66:db:5c:9d:05:6e:9e:e1:
                    ef:84:e7:9e:f9:e0:6e:a7:39:97:85:71:b0:24:71:
                    59:e8:c6:04:26:54:7e:61:4d:fd:b3:06:48:3b:e7:
                    b0:2d:b5:e4:27:86:19:b7:59:55:da:ad:09:66:22:
                    70:b0:50:ec:bd:72:27:3f:09:c8:c1:41:b8:7e:55:
                    9d:80:a0:e7:bb:48:e4:d1:ec:41:b7:6f:51:b6:59:
                    94:4f:c5:f7:44:49:53:61:bb:63:af:e6:83:ab:4f:
                    8a:c6:0e:21:3f:fa:44:35:d0:9a:97:f9:bc:bf:c3:
                    67:ec:d8:28:51:88:7d:70:c6:88:58:25:03:2c:dc:
                    e4:d9:52:7a:b9:a0:8a:69:5a:67:65:11:d2:89:53:
                    7c:35:b0:88:3c:1a:a6:6f:13:75:25:e0:61:46:58:
                    6f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:34:C8:BC:9D:59:F7:8F:3D:AF:C7:F7:D4:F4:5A:9A:57:A1:75:ED
            X509v3 Authority Key Identifier:
                keyid:3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a313a3a2f34382d3438203d3e20323035383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1282:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:84:61:12:3a:df:c9:56:ff:f2:5e:19:e1:22:48:96:9d:1c:
         44:bc:27:b3:39:49:f1:8d:5b:cc:c8:4b:92:87:88:9f:71:1b:
         7c:44:ed:38:8a:bd:5e:5f:bb:23:62:61:90:a5:43:fc:c7:c5:
         c9:90:d0:29:35:1d:97:c2:b4:3e:21:cf:1e:26:c8:bb:dc:87:
         51:aa:d4:ad:d1:1c:07:d9:2b:91:02:7a:ea:90:64:d7:82:8b:
         de:f2:5e:d8:22:0d:5a:08:02:f2:43:f2:cc:a1:e7:d8:9f:42:
         a6:9a:b7:ee:f5:08:8a:1f:dc:d0:79:d7:bf:b4:8f:e1:b0:c1:
         3e:9f:54:db:0a:61:07:3d:d7:80:46:39:e6:8e:35:20:bc:4c:
         eb:fa:b4:54:dc:71:b7:45:21:47:6e:69:d5:3f:df:d2:6f:b6:
         da:a3:9f:b4:24:8e:13:64:1e:6c:e6:1a:b4:ff:7c:47:93:ec:
         82:ab:44:bb:25:6c:49:41:a7:91:f4:ec:29:ca:a8:4a:89:4a:
         8e:2f:14:40:1d:a9:bd:1a:31:e6:4e:2e:3f:3e:00:d6:2c:f2:
         a6:8f:d5:11:b6:66:36:f1:08:9a:07:15:6a:3c:f6:49:fb:fc:
         f5:77:6e:86:2a:f4:b7:5b:58:cf:13:91:c0:94:90:b2:23:cb:
         66:6d:03:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org