Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215225.roa
File:                     AS215225.roa (raw, json)
Hash identifier:          1WADDgCR4JM/M5G6a0A+O+Ubj3PTPAPcuOcYO9ptVwU=
Subject key identifier:   93:5B:EA:64:BB:6D:6A:F9:C1:69:46:91:40:91:E3:B9:F3:A7:AE:5A
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       51B41D2CCE0957BCC25E50E885238A3CDC0738B3
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215225.roa
Signing time:             Tue 10 Jun 2025 12:09:15 +0000
ROA not before:           Tue 10 Jun 2025 12:04:15 +0000
ROA not after:            Tue 09 Jun 2026 12:09:15 +0000
asID:                     215225
IP address blocks:        206.53.1.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 11 Jun 2025 03:36:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b4:1d:2c:ce:09:57:bc:c2:5e:50:e8:85:23:8a:3c:dc:07:38:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jun 10 12:04:15 2025 GMT
            Not After : Jun  9 12:09:15 2026 GMT
        Subject: CN=935BEA64BB6D6AF9C16946914091E3B9F3A7AE5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e6:e5:bc:91:9c:8f:be:94:8b:3b:51:23:c4:
                    70:d6:b3:7b:44:f7:d0:3c:d5:6a:36:87:14:57:3b:
                    88:9b:f0:84:03:ff:71:9d:7b:53:0a:ec:b3:d2:0b:
                    de:4d:c5:14:b4:1a:b4:c3:09:c9:ae:52:c3:9b:da:
                    61:a6:8f:e7:91:66:10:b8:b9:3a:cb:95:4b:73:88:
                    44:31:ab:af:23:58:b0:e9:ac:7f:34:03:06:9f:89:
                    e7:0e:b9:49:0f:f9:4e:4b:8b:e7:0b:20:79:60:86:
                    db:58:92:f1:2a:4e:00:85:1c:13:fc:30:4c:da:f8:
                    c3:c9:e7:1b:83:54:b2:39:a9:2b:62:63:79:44:f9:
                    9c:d4:a0:61:89:1f:d5:1e:dd:50:3c:69:7a:97:29:
                    46:88:5e:09:da:9b:0f:56:4a:9f:b9:4d:65:fe:a7:
                    68:cb:1f:e0:9e:06:69:bd:07:3e:8b:65:97:1d:84:
                    0f:72:8e:04:70:f6:f1:9f:b5:cb:e3:cc:fd:56:23:
                    70:c0:0a:28:c3:2c:04:46:94:49:37:ab:94:8a:3d:
                    be:4c:21:c1:18:3c:9b:52:99:a1:df:bd:80:76:af:
                    ba:08:e3:9b:00:f4:97:4c:c4:a0:7c:3b:ff:01:6f:
                    ed:b7:a1:f7:f8:a0:3b:00:7f:2a:53:17:57:2e:a0:
                    4d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5B:EA:64:BB:6D:6A:F9:C1:69:46:91:40:91:E3:B9:F3:A7:AE:5A
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215225.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:7f:ed:68:48:1f:46:b0:fe:ac:9e:17:f1:64:63:78:12:87:
         3f:f8:4e:12:27:ef:3c:3a:1b:4e:a6:b8:f0:5a:74:08:9e:4d:
         1b:cb:21:1d:1a:16:2b:3e:7e:11:9b:dc:db:5e:40:6e:14:93:
         9a:a0:89:d8:8f:1d:34:26:6e:e9:40:82:04:89:94:75:15:5f:
         ba:25:c5:61:d3:0b:be:6a:83:3a:eb:c9:bc:35:94:7e:24:3d:
         b7:89:6b:15:17:df:a3:29:92:03:0f:4b:49:7a:cc:e8:25:a1:
         dd:b7:a2:5b:9d:58:9c:6e:a9:fb:f6:5b:f9:bc:37:e4:eb:7d:
         33:ff:f3:60:43:ae:d5:85:a1:e5:16:88:36:5f:0d:f8:da:dd:
         b9:91:2f:3a:2e:3e:60:29:92:ee:51:f3:27:0a:5e:08:42:2c:
         02:d3:ef:ca:61:85:12:e7:96:f4:0b:c4:38:d9:d9:4d:ef:c8:
         b1:ad:14:b4:b0:ef:2c:96:03:51:a7:f1:b4:84:08:e9:64:15:
         d2:66:27:5d:c1:22:85:0f:5e:b4:55:ab:1d:11:20:f8:98:b8:
         e3:85:9b:31:0c:79:6f:a6:40:3d:da:fd:29:59:45:98:da:7d:
         f8:03:ce:fb:91:c7:1d:e8:89:3c:d7:4a:4f:39:e2:52:8a:43:
         f4:56:78:1a
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUUbQdLM4JV7zCXlDohSOKPNwHOLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNTA2MTAxMjA0MTVaFw0yNjA2MDkxMjA5MTVaMDMxMTAvBgNV
BAMTKDkzNUJFQTY0QkI2RDZBRjlDMTY5NDY5MTQwOTFFM0I5RjNBN0FFNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5uW8kZyPvpSLO1EjxHDWs3tE
99A81Wo2hxRXO4ib8IQD/3Gde1MK7LPSC95NxRS0GrTDCcmuUsOb2mGmj+eRZhC4
uTrLlUtziEQxq68jWLDprH80AwafiecOuUkP+U5Li+cLIHlghttYkvEqTgCFHBP8
MEza+MPJ5xuDVLI5qStiY3lE+ZzUoGGJH9Ue3VA8aXqXKUaIXgnamw9WSp+5TWX+
p2jLH+CeBmm9Bz6LZZcdhA9yjgRw9vGftcvjzP1WI3DACijDLARGlEk3q5SKPb5M
IcEYPJtSmaHfvYB2r7oI45sA9JdMxKB8O/8Bb+23off4oDsAfypTF1cuoE1ZAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUk1vqZLttavnBaUaRQJHjufOnrlowHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjE1MjI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAzjUBMA0GCSqGSIb3DQEBCwUAA4IBAQBaf+1oSB9G
sP6snhfxZGN4Eoc/+E4SJ+88OhtOprjwWnQInk0byyEdGhYrPn4Rm9zbXkBuFJOa
oInYjx00Jm7pQIIEiZR1FV+6JcVh0wu+aoM668m8NZR+JD23iWsVF9+jKZIDD0tJ
eszoJaHdt6JbnVicbqn79lv5vDfk630z//NgQ67VhaHlFog2Xw342t25kS86Lj5g
KZLuUfMnCl4IQiwC0+/KYYUS55b0C8Q42dlN78ixrRS0sO8slgNRp/G0hAjpZBXS
ZiddwSKFD160VasdESD4mLjjhZsxDHlvpkA92v0pWUWY2n34A877kccd6Ik810pP
OeJSikP0Vnga
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:48:56 2025 by rpki-client