Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/d43E9j3EN35FxsrYDaMoUwwAEAE.roa
File:                     d43E9j3EN35FxsrYDaMoUwwAEAE.roa (raw, json)
Hash identifier:          WvwdlHsTZFoq6n/xxFr8sh/daz060921dhmgIBJDRus=
Subject key identifier:   77:8D:C4:F6:3D:C4:37:7E:45:C6:CA:D8:0D:A3:28:53:0C:00:10:01
Certificate issuer:       /CN=1ff1ce9ae2563102bf8ea72a89e06152ef7058b2
Certificate serial:       0186B797239CCC57475FE1B11F24109B5C83
Authority key identifier: 1F:F1:CE:9A:E2:56:31:02:BF:8E:A7:2A:89:E0:61:52:EF:70:58:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/d43E9j3EN35FxsrYDaMoUwwAEAE.roa
Signing time:             Mon 06 Mar 2023 15:43:00 +0000
ROA not before:           Mon 06 Mar 2023 15:43:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199540
IP address blocks:        2a13:ae80::/32 maxlen: 40

Validation:               Failed, certificate revoked on Thu 06 Apr 2023 14:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:b7:97:23:9c:cc:57:47:5f:e1:b1:1f:24:10:9b:5c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff1ce9ae2563102bf8ea72a89e06152ef7058b2
        Validity
            Not Before: Mar  6 15:43:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=778dc4f63dc4377e45c6cad80da328530c001001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:56:a7:4d:5e:ef:44:be:91:e5:ab:79:2e:6e:
                    ab:2c:51:d5:a0:ef:07:3b:df:4a:79:dd:f3:ba:bc:
                    29:ee:93:d5:ab:c6:af:70:86:63:b8:fc:7e:98:65:
                    0a:b3:d0:85:76:7e:0f:37:63:a3:21:57:d9:09:00:
                    06:91:b1:ab:9c:0f:2d:e3:03:a6:23:bb:62:15:d1:
                    b2:1f:4b:4d:03:c2:c5:82:18:d2:a6:de:33:69:61:
                    18:71:3a:22:f1:3a:dc:01:8d:48:d2:05:f8:73:bb:
                    f9:2b:82:9e:0c:40:7b:3d:1b:7e:0d:92:ab:5d:29:
                    43:8e:4f:d9:48:89:54:13:02:61:cb:67:e2:d4:cf:
                    62:cd:e4:03:99:4a:24:75:d7:46:1c:09:ed:29:52:
                    08:9e:a9:57:22:b1:dc:32:9a:2d:bb:9f:bb:1b:a3:
                    ed:91:25:fb:87:2d:a4:b0:76:b1:24:fe:54:1a:c4:
                    ea:e4:05:82:56:4f:c9:fb:76:a5:4c:2e:24:f8:9a:
                    6e:9a:78:34:55:1e:16:c9:8c:a6:e8:2e:a1:ba:cd:
                    7f:e3:05:4c:b1:7f:0b:9d:92:de:93:bd:3d:9a:d2:
                    ee:cb:6e:7d:e5:df:98:e5:a3:d8:94:fe:f7:4a:29:
                    92:8f:88:24:00:28:55:19:b0:47:3f:50:c0:1d:7f:
                    cc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8D:C4:F6:3D:C4:37:7E:45:C6:CA:D8:0D:A3:28:53:0C:00:10:01
            X509v3 Authority Key Identifier:
                keyid:1F:F1:CE:9A:E2:56:31:02:BF:8E:A7:2A:89:E0:61:52:EF:70:58:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/d43E9j3EN35FxsrYDaMoUwwAEAE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ae80::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:f9:91:9b:bc:f4:29:5b:b0:3d:ca:8c:8a:01:c7:61:e1:c7:
         fd:7c:1c:a3:e8:63:2d:98:eb:09:f7:bf:21:55:5b:b2:72:fb:
         91:86:9b:10:a0:4a:5b:dd:c5:d4:0c:fe:26:8a:f0:66:5e:75:
         76:97:82:12:79:48:75:a3:bf:19:b2:a1:7d:21:4c:be:5f:2d:
         e2:36:46:0e:13:ef:06:74:8f:f4:69:8e:ad:a7:7c:11:23:66:
         a0:18:f3:fb:ee:6a:45:a7:1b:8c:f7:26:0c:0b:a1:03:72:cf:
         ef:bf:ce:74:86:86:11:98:48:d5:31:17:b8:d9:6d:8a:30:25:
         13:6a:60:14:ca:ca:35:7f:09:f0:87:a5:f9:6f:b4:a4:5f:fa:
         52:bf:33:eb:7f:ed:55:f9:f2:40:ea:5b:df:40:f0:4b:b0:14:
         14:9d:da:e3:86:b9:d4:33:27:4b:c9:35:04:95:23:80:48:51:
         63:68:ca:72:6f:fd:3c:78:5e:e9:79:09:5c:28:2b:a2:ac:b9:
         e8:dc:bc:88:8c:7e:21:41:2d:d6:20:22:70:66:05:b6:ae:f0:
         aa:75:1f:3c:0a:1f:c9:46:38:4f:3c:1d:b6:ba:ca:b5:88:bf:
         5d:34:55:ef:fc:87:d6:d9:88:cf:7c:c2:bc:d5:d8:00:7c:38:
         38:a3:1e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:17 2024 by rpki-client on console-fra.rpki-client.org