Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/FtgMmcAmp4IiAlkjpTT7y7rlQ0Q.roa
File:                     FtgMmcAmp4IiAlkjpTT7y7rlQ0Q.roa (raw, json)
Hash identifier:          BwEuOKWB4w5t2H5W/RsPrdjL9S9onWpR434ef0LLXUo=
Subject key identifier:   16:D8:0C:99:C0:26:A7:82:22:02:59:23:A5:34:FB:CB:BA:E5:43:44
Certificate issuer:       /CN=e1a323546484220cb402063380f4016369262acf
Certificate serial:       018CC2DB3DBA7A4BBB766788C25ADA44AE94
Authority key identifier: E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/FtgMmcAmp4IiAlkjpTT7y7rlQ0Q.roa
Signing time:             Mon 01 Jan 2024 02:29:57 +0000
ROA not before:           Mon 01 Jan 2024 02:29:57 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202361
IP address blocks:        2a13:40::/32 maxlen: 48

Validation:               Failed, certificate revoked on Thu 11 Jan 2024 13:12:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:3d:ba:7a:4b:bb:76:67:88:c2:5a:da:44:ae:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a323546484220cb402063380f4016369262acf
        Validity
            Not Before: Jan  1 02:29:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=16d80c99c026a78222025923a534fbcbbae54344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2d:e0:7c:b8:f6:d5:e6:64:df:c4:11:ec:f1:
                    84:d2:5a:03:b5:71:61:d6:a3:cf:b2:34:02:cb:50:
                    8f:56:ab:9b:26:c5:09:85:91:09:d9:0d:66:55:b1:
                    ed:2c:60:18:0c:0e:f7:ee:10:67:89:a5:8c:34:b3:
                    ed:eb:3c:d3:0d:e2:03:8c:3a:64:f3:05:31:94:3e:
                    7b:7c:cf:88:0b:84:4e:f0:3b:b2:8e:46:26:a9:82:
                    8a:db:41:9d:df:25:db:4b:55:05:73:8d:84:ae:cf:
                    48:71:fc:ab:35:00:24:87:74:f5:ef:e5:f2:5b:db:
                    57:3a:c4:bc:ff:76:fa:31:46:f7:2c:a5:27:ab:ad:
                    ae:a4:88:3a:40:df:20:e4:fc:26:d0:43:1c:78:4b:
                    2a:c0:f1:c8:cc:68:a6:dc:d9:06:37:a8:3f:9b:eb:
                    d5:e2:1e:d3:05:be:98:68:3d:96:3c:60:d8:18:75:
                    b8:24:71:16:a2:a1:d3:e3:b7:ef:7e:d2:28:7e:17:
                    cd:e4:d5:a8:72:cc:a3:a2:d5:e0:2c:9c:0d:24:72:
                    64:e7:9f:d3:1e:ca:d1:39:42:03:6c:73:4b:99:59:
                    b8:7b:80:c0:4a:4c:e2:5f:12:15:20:33:34:33:0b:
                    3c:df:fd:78:6b:eb:a9:8c:d0:11:9d:93:cc:02:e8:
                    04:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D8:0C:99:C0:26:A7:82:22:02:59:23:A5:34:FB:CB:BA:E5:43:44
            X509v3 Authority Key Identifier:
                keyid:E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/FtgMmcAmp4IiAlkjpTT7y7rlQ0Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:40::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:f4:1a:d7:ec:9c:d7:f1:b1:7f:1c:1f:59:94:74:27:90:ea:
         47:26:c9:8b:33:4e:68:8d:4c:02:16:79:df:7b:b9:b1:f4:7c:
         c6:37:fd:62:c1:d3:fb:78:e6:27:8c:29:3e:f0:cc:87:c2:a6:
         92:10:63:a4:b9:b4:b1:41:dd:94:65:fe:a0:c8:97:97:10:8f:
         c2:00:00:0b:bc:43:1a:c5:21:dd:13:0b:42:46:93:52:53:3d:
         a8:d0:6b:76:1b:40:be:d6:3e:7b:3e:f5:ca:a1:8d:6c:aa:64:
         5b:4b:ae:7a:b8:e4:07:0e:e0:34:11:a6:d0:fc:e5:1d:b1:cc:
         c7:24:01:32:96:78:ae:bf:d3:e1:f9:da:f1:53:bb:ad:8c:35:
         3a:e9:f2:dd:2d:f4:b6:b8:1c:ef:ac:dc:43:5b:0e:39:d9:21:
         c0:98:17:32:e3:a2:37:41:4b:78:49:21:82:69:9f:37:59:d4:
         23:cc:2a:e3:5b:53:59:a4:95:22:ab:e8:0e:90:2c:25:11:b8:
         71:23:09:55:8c:16:86:de:26:1d:a7:42:f1:39:8e:59:65:4e:
         8a:c5:47:b3:ec:15:89:aa:af:0e:be:ef:ae:7e:40:49:a6:8c:
         33:39:d3:e5:9a:48:17:fa:b0:01:18:d9:3b:5e:7f:eb:52:8b:
         fc:37:7e:dc
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzC2z26eku7dmeIwlraRK6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYTMyMzU0NjQ4NDIyMGNiNDAyMDYzMzgwZjQwMTYzNjky
NjJhY2YwHhcNMjQwMTAxMDIyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmQ4MGM5OWMwMjZhNzgyMjIwMjU5MjNhNTM0ZmJjYmJhZTU0MzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC3gfLj21eZk38QR7PGE0loDtXFh
1qPPsjQCy1CPVqubJsUJhZEJ2Q1mVbHtLGAYDA737hBniaWMNLPt6zzTDeIDjDpk
8wUxlD57fM+IC4RO8DuyjkYmqYKK20Gd3yXbS1UFc42Ers9IcfyrNQAkh3T17+Xy
W9tXOsS8/3b6MUb3LKUnq62upIg6QN8g5Pwm0EMceEsqwPHIzGim3NkGN6g/m+vV
4h7TBb6YaD2WPGDYGHW4JHEWoqHT47fvftIofhfN5NWocsyjotXgLJwNJHJk55/T
HsrROUIDbHNLmVm4e4DASkziXxIVIDM0Mws83/14a+upjNARnZPMAugEFQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBbYDJnAJqeCIgJZI6U0+8u65UNEMB8GA1UdIwQY
MBaAFOGjI1RkhCIMtAIGM4D0AWNpJirPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGFNalZHU0VJZ3kwQWdZemdQUUJZMmttS3M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kMjFkYTQtZjY1Yi00NTMxLTk3NmEt
OGVjMDYwNGU2OTI5LzEvRnRnTW1jQW1wNElpQWxranBUVDd5N3JsUTBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kMjFkYTQtZjY1Yi00NTMxLTk3NmEtOGVjMDYwNGU2OTI5
LzEvNGFNalZHU0VJZ3kwQWdZemdQUUJZMmttS3M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhMAQDAN
BgkqhkiG9w0BAQsFAAOCAQEAT/Qa1+yc1/GxfxwfWZR0J5DqRybJizNOaI1MAhZ5
33u5sfR8xjf9YsHT+3jmJ4wpPvDMh8KmkhBjpLm0sUHdlGX+oMiXlxCPwgAAC7xD
GsUh3RMLQkaTUlM9qNBrdhtAvtY+ez71yqGNbKpkW0uuerjkBw7gNBGm0PzlHbHM
xyQBMpZ4rr/T4fna8VO7rYw1Ouny3S30trgc76zcQ1sOOdkhwJgXMuOiN0FLeEkh
gmmfN1nUI8wq41tTWaSVIqvoDpAsJRG4cSMJVYwWht4mHadC8TmOWWVOisVHs+wV
iaqvDr7vrn5ASaaMMznT5ZpIF/qwARjZO15/61KL/Dd+3A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:33 2024 by rpki-client on console-ams.rpki-client.org