Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/LmPFnspTLGepa5suepzG2QeWKvE.roa
File:                     LmPFnspTLGepa5suepzG2QeWKvE.roa (raw, json)
Hash identifier:          5u8+S1TjpbRzkX6PsEuH2/kES9lw/TjqYTnA6xmrKZY=
Subject key identifier:   2E:63:C5:9E:CA:53:2C:67:A9:6B:9B:2E:7A:9C:C6:D9:07:96:2A:F1
Certificate issuer:       /CN=e1a323546484220cb402063380f4016369262acf
Certificate serial:       0186CB04BE54DE78171D6FE9A255A7E1B5CD
Authority key identifier: E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/LmPFnspTLGepa5suepzG2QeWKvE.roa
Signing time:             Fri 10 Mar 2023 10:15:31 +0000
ROA not before:           Fri 10 Mar 2023 10:15:31 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        2a13:40:4ff9::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 11 Mar 2023 18:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:cb:04:be:54:de:78:17:1d:6f:e9:a2:55:a7:e1:b5:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a323546484220cb402063380f4016369262acf
        Validity
            Not Before: Mar 10 10:15:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2e63c59eca532c67a96b9b2e7a9cc6d907962af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:81:2e:69:d8:e7:e4:fa:a6:80:ff:cf:f3:b5:
                    d0:07:f8:a5:67:f0:ed:7e:60:90:7f:a1:31:77:36:
                    8f:d3:42:46:ce:f1:c5:c3:ab:5a:a6:07:e0:b8:6c:
                    93:b0:9e:c5:aa:59:29:24:dd:42:bb:a9:06:8e:6f:
                    e5:3b:00:01:64:7d:61:05:a8:5a:b6:c7:da:18:ab:
                    44:1a:0e:f3:b0:82:e1:cd:03:e1:ee:06:45:c5:81:
                    e1:94:60:a5:be:82:ca:b0:5b:56:82:93:b8:46:2f:
                    21:a3:ff:64:6b:e6:ca:14:34:e7:4a:bf:26:8a:34:
                    6d:bc:a9:90:2c:e5:1b:b2:01:75:5f:73:48:28:b9:
                    ff:a6:ab:7d:5f:7f:f2:13:0b:b1:5d:cb:13:3d:0f:
                    7b:78:9d:bc:30:2c:f9:1d:72:75:b8:5e:92:24:05:
                    f0:49:dd:4f:7c:9d:7f:6f:42:0b:77:4d:c0:c8:e5:
                    8b:d6:10:fb:2c:d1:66:69:a9:2b:13:09:5b:18:7e:
                    c5:93:9a:5c:5f:5b:1d:02:19:94:0d:aa:88:f4:40:
                    f9:65:aa:f1:82:03:da:81:8d:a6:a8:6b:ed:d9:bd:
                    e4:91:15:86:da:ae:38:e8:df:ab:1d:0e:60:88:e0:
                    8f:21:24:13:8e:77:ea:29:b5:aa:41:37:0d:9e:86:
                    24:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:63:C5:9E:CA:53:2C:67:A9:6B:9B:2E:7A:9C:C6:D9:07:96:2A:F1
            X509v3 Authority Key Identifier:
                keyid:E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/LmPFnspTLGepa5suepzG2QeWKvE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:40:4ff9::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:6b:0f:92:11:88:c5:b6:57:5f:cd:23:bb:ac:c6:fe:ea:36:
         a7:f0:1e:de:35:56:22:e6:e9:d1:5c:a9:51:23:1e:f0:c8:69:
         49:b2:e5:de:a3:ba:12:77:b2:90:de:bc:98:3c:c2:8a:ef:4d:
         32:8c:eb:5d:00:9c:a2:25:be:54:d4:7f:35:ef:32:8e:2b:58:
         e7:aa:bd:57:a5:26:34:d2:0f:c0:e8:18:6c:9a:f4:3c:d4:3e:
         4c:72:89:75:7a:73:1b:45:6d:38:c1:b7:14:45:9a:59:64:98:
         e3:cc:77:81:7c:33:bf:61:8c:3a:10:6d:96:6b:73:76:0d:21:
         3e:47:07:b9:a3:7e:24:fa:c3:04:34:b4:81:81:d3:ff:53:ce:
         58:c3:0f:8d:ba:2a:77:a2:8d:38:ff:77:b5:69:09:e8:71:43:
         db:47:f1:b4:84:58:b8:2d:5c:3a:44:44:e5:9c:22:26:a9:15:
         28:4e:67:04:9d:9f:07:0e:f6:e3:76:b1:2e:e1:c7:94:3a:08:
         e6:1f:a1:5b:91:4d:a4:f3:e7:4a:df:eb:9d:d5:b1:d2:66:88:
         05:f0:93:78:4b:7e:fe:18:b1:9c:19:5a:1b:67:dd:ee:ca:b3:
         59:84:cc:3f:a3:14:b5:3d:e8:e1:4d:1c:96:1d:ce:5b:03:65:
         33:09:2c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:33 2024 by rpki-client on console-ams.rpki-client.org