Route Origin Authorization

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a3a2f34382d3438203d3e20323035383438.roa
File:                     326130363a313238323a3a2f34382d3438203d3e20323035383438.roa (raw, json)
Hash identifier:          jLZa1cScjXOuwZibe3JD2orKDZp0FyCAXzaw1InDG+8=
Subject key identifier:   31:D6:C6:CB:D4:3C:F5:F2:EE:E4:B1:C1:88:81:BD:40:79:88:BD:89
Certificate issuer:       /CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
Certificate serial:       6A34339C7A3E25B21CEDEF6A10F7D177CCFC3762
Authority key identifier: 3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a3a2f34382d3438203d3e20323035383438.roa
Signing time:             Fri 02 Feb 2024 23:10:09 +0000
ROA not before:           Fri 02 Feb 2024 23:05:09 +0000
ROA not after:            Fri 31 Jan 2025 23:10:09 +0000
asID:                     205848
IP address blocks:        2a06:1282::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 04 Mar 2024 13:28:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:34:33:9c:7a:3e:25:b2:1c:ed:ef:6a:10:f7:d1:77:cc:fc:37:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
        Validity
            Not Before: Feb  2 23:05:09 2024 GMT
            Not After : Jan 31 23:10:09 2025 GMT
        Subject: CN=31D6C6CBD43CF5F2EEE4B1C18881BD407988BD89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:28:d0:86:68:30:d5:6f:37:28:5f:6a:01:78:
                    af:e8:c5:19:03:9d:27:94:02:e8:f2:f6:47:63:7c:
                    e2:12:4f:f3:71:3b:cc:ba:74:1a:61:26:56:7d:e7:
                    dc:fb:45:45:6d:8a:8f:2e:a7:26:d8:99:09:0e:df:
                    fd:22:53:d1:04:22:89:75:e7:01:2c:55:be:5b:b2:
                    ad:54:70:50:b2:c0:43:8f:aa:7d:dc:8d:a6:9d:47:
                    35:f5:89:c2:2e:bb:6a:f8:ae:43:51:40:b5:f2:d7:
                    3b:a5:b8:88:e0:71:8e:f1:9c:f7:8c:a4:3e:b5:ec:
                    46:52:fe:64:dc:d2:4e:5f:34:0c:f3:09:f4:fe:1a:
                    b9:11:ea:89:cc:6b:3a:95:fe:1f:40:0f:43:a6:36:
                    38:30:e4:9c:59:b6:f2:dc:ed:55:a6:13:1e:4c:74:
                    3a:c7:ed:f9:98:40:ce:3f:a7:6c:4b:62:7e:dc:67:
                    38:18:e6:61:da:7d:ed:2d:7a:dd:e1:65:17:05:81:
                    53:ce:03:a5:cf:b1:2e:7c:64:ee:a0:90:dc:4d:93:
                    e5:d3:00:0c:3d:77:c3:a9:6c:5d:82:b9:be:8b:7e:
                    d9:03:ae:57:6c:27:f0:01:5a:01:0a:0e:b7:fc:e2:
                    56:fb:51:ba:5f:f3:ae:28:f9:3e:9d:25:9c:26:c5:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D6:C6:CB:D4:3C:F5:F2:EE:E4:B1:C1:88:81:BD:40:79:88:BD:89
            X509v3 Authority Key Identifier:
                keyid:3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a3a2f34382d3438203d3e20323035383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1282::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:f0:10:8a:d1:71:82:36:e1:0c:51:61:e4:71:7d:fc:e1:29:
         34:3b:89:f3:4a:3e:64:cc:8d:b9:8d:5c:df:81:3a:22:c8:ab:
         a8:dc:a7:21:57:41:a3:65:ff:ad:be:7a:5d:a8:5f:16:b1:da:
         c0:1f:86:f0:53:12:fa:ce:4b:59:79:7f:b1:c9:1d:ad:3b:ec:
         49:95:ca:a6:1b:b8:98:65:ba:da:04:45:f0:4e:bc:99:db:b2:
         08:9a:91:78:fd:4a:f2:5f:1a:79:2f:50:66:56:67:9f:bd:41:
         a9:ae:7f:1d:9f:0f:c4:87:d7:4a:77:2f:77:d6:6e:d1:85:bf:
         ef:70:6f:bd:36:af:ae:1d:da:7e:ba:d4:14:6d:ed:11:4f:54:
         d3:16:29:2d:03:93:08:85:71:3a:30:cd:c8:16:9e:e6:d8:a1:
         bf:b5:e7:9f:ef:6f:60:48:7c:08:5d:b0:ff:bf:b4:ea:b0:36:
         5a:e9:b4:a4:a6:3b:30:35:f8:ef:e4:73:ff:7f:48:02:99:18:
         16:3b:9d:45:a1:bc:3a:c4:6f:82:86:32:06:25:71:1e:ac:e3:
         fb:19:f0:c3:36:8d:c7:d2:58:1c:5c:43:cc:6a:90:f6:b6:84:
         b4:06:7c:c2:e5:6d:9e:76:9d:f2:27:0b:36:47:99:bd:4f:a8:
         17:33:67:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:49 2024 by rpki-client on console-ams.rpki-client.org