Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/PPEVuNUTlHgyIDWLGdMgU7WURI0.roa
File:                     PPEVuNUTlHgyIDWLGdMgU7WURI0.roa (raw, json)
Hash identifier:          5pcNfi5X0CX4oB8qCnyw80N9g3E7mdmD5KlYpm8KNMA=
Subject key identifier:   3C:F1:15:B8:D5:13:94:78:32:20:35:8B:19:D3:20:53:B5:94:44:8D
Certificate issuer:       /CN=572bc93f1580fc95274d983940f3efaede304ae5
Certificate serial:       01864A836717F398E0B5064C05A65F30DD01
Authority key identifier: 57:2B:C9:3F:15:80:FC:95:27:4D:98:39:40:F3:EF:AE:DE:30:4A:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/PPEVuNUTlHgyIDWLGdMgU7WURI0.roa
Signing time:             Mon 13 Feb 2023 11:22:50 +0000
ROA not before:           Mon 13 Feb 2023 11:22:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44092
IP address blocks:        2a13:1580::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 26 Sep 2023 22:14:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:4a:83:67:17:f3:98:e0:b5:06:4c:05:a6:5f:30:dd:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572bc93f1580fc95274d983940f3efaede304ae5
        Validity
            Not Before: Feb 13 11:22:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3cf115b8d51394783220358b19d32053b594448d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9b:11:63:7e:c4:12:70:89:53:de:d9:eb:7f:
                    f0:a2:f8:ea:98:79:d7:ab:36:1b:71:de:ad:3a:17:
                    36:95:72:46:91:46:96:5b:e3:09:bf:44:33:c0:e4:
                    98:b2:d9:33:75:7d:a7:79:04:42:86:33:0c:f0:34:
                    18:78:da:b7:3b:63:70:f8:89:0e:ff:0b:d0:66:fe:
                    9c:96:d3:95:ed:fc:0d:de:4b:2e:e4:ce:cd:6e:0c:
                    50:9c:9e:1a:be:d1:a3:db:ac:70:bf:a0:0a:a9:f2:
                    61:ae:6c:e1:59:5e:2d:95:96:78:ec:b1:b6:77:f2:
                    9f:a8:35:95:94:05:77:21:a0:bf:63:d1:56:58:f0:
                    4a:b3:ba:1a:e9:fe:9e:43:ce:b7:88:9d:e7:39:5a:
                    8d:e0:40:7b:be:8e:cd:7d:4d:e0:0e:9e:65:dc:40:
                    2e:cf:04:29:11:cd:87:d3:a8:ab:5c:fd:a6:21:00:
                    25:39:12:10:62:3f:96:d6:56:19:34:3c:4c:30:70:
                    db:1a:83:f6:a2:48:69:cc:8f:29:25:cf:ed:49:1b:
                    fa:a9:49:f9:60:99:55:69:83:da:29:9f:94:ab:8f:
                    a0:35:f2:4a:8e:66:fe:7b:88:97:c7:ea:3e:62:d6:
                    74:3a:f6:4e:53:6c:fc:ce:a9:96:38:a2:ce:d6:ff:
                    ae:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F1:15:B8:D5:13:94:78:32:20:35:8B:19:D3:20:53:B5:94:44:8D
            X509v3 Authority Key Identifier:
                keyid:57:2B:C9:3F:15:80:FC:95:27:4D:98:39:40:F3:EF:AE:DE:30:4A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/PPEVuNUTlHgyIDWLGdMgU7WURI0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:1580::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:a9:52:68:af:e0:6e:26:13:d0:ce:6d:14:4a:73:df:e2:ad:
         b3:76:c0:9a:e3:4c:71:26:c9:c8:4e:39:95:d9:33:9f:cc:53:
         b0:69:88:d9:f5:e4:3a:a5:fb:da:ab:42:19:12:14:fc:33:c9:
         e1:64:b4:29:9d:00:87:63:fd:fe:96:17:76:10:99:87:2a:47:
         34:c4:57:45:61:f3:bf:32:53:e4:70:27:f7:49:a9:98:d6:b9:
         cd:b3:5e:c3:82:2a:52:52:e8:cf:fe:c2:6f:bb:8b:11:39:7c:
         d1:73:79:72:a3:c8:04:ce:c0:4f:d6:57:b1:fe:73:da:f7:6e:
         8f:c2:32:9b:38:ae:fc:f8:77:ac:65:44:c1:2e:1e:a7:72:83:
         f6:ea:5d:42:f6:da:82:46:1a:6a:69:ba:20:a0:c0:5d:ea:e8:
         2d:07:64:5c:6a:d1:4d:a6:16:75:ae:9e:6b:ec:31:dc:86:a1:
         e2:eb:7d:4c:bc:f1:75:38:41:d2:0e:b3:5d:f6:09:92:97:f1:
         00:84:92:ee:bf:2d:28:8a:f7:06:ce:fd:b1:65:03:25:82:3b:
         4e:70:09:5a:95:24:fe:71:af:d3:aa:67:f3:52:55:91:a9:30:
         13:72:de:08:c9:db:36:a8:85:ad:cc:57:ee:d2:21:f2:da:b6:
         13:de:a6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:12 2024 by rpki-client on console-fra.rpki-client.org