Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/5l1O97Aw5sEpvlrJcmgHZgQ1AUg.roa
File:                     5l1O97Aw5sEpvlrJcmgHZgQ1AUg.roa (raw, json)
Hash identifier:          98fTiP0SRYfQjvTEGL+NKbFE61auWCX6GqxpRZc8lxo=
Subject key identifier:   E6:5D:4E:F7:B0:30:E6:C1:29:BE:5A:C9:72:68:07:66:04:35:01:48
Certificate issuer:       /CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
Certificate serial:       0188A78D8F154E168232F5F66032F067C9DA
Authority key identifier: 9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/5l1O97Aw5sEpvlrJcmgHZgQ1AUg.roa
Signing time:             Sat 10 Jun 2023 23:04:12 +0000
ROA not before:           Sat 10 Jun 2023 23:04:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198453
IP address blocks:        2001:67c:13e0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:a7:8d:8f:15:4e:16:82:32:f5:f6:60:32:f0:67:c9:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
        Validity
            Not Before: Jun 10 23:04:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e65d4ef7b030e6c129be5ac97268076604350148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:db:a6:d9:06:00:af:3a:9c:bd:40:b6:b6:0f:
                    65:a2:81:3c:63:d6:07:7b:71:63:69:6b:fc:76:62:
                    80:13:a9:3b:0e:b4:e9:28:53:5b:0c:7b:1c:e2:b5:
                    b3:3a:29:a6:e9:b9:ae:c2:f9:cd:27:86:0f:f7:b2:
                    9e:bf:7f:88:44:02:e5:a9:e9:cf:21:46:78:2b:21:
                    5a:2f:b3:3b:da:52:1d:3c:3c:be:ec:61:1d:a3:89:
                    5a:a9:e6:90:17:51:c2:de:fe:4a:ed:bc:43:b1:fa:
                    8e:6c:5a:2b:8b:f3:8c:82:a8:89:a5:22:62:2e:a9:
                    4e:a9:cd:3c:af:41:7f:a4:4b:5a:70:04:5c:68:8a:
                    fe:d0:a0:1d:e0:bb:71:7f:79:65:2d:3b:be:ae:4d:
                    9a:a4:ed:5a:cf:32:53:9c:29:61:5d:0c:c8:21:60:
                    58:5e:18:d5:bf:e6:19:cc:50:23:c4:47:d0:95:1a:
                    72:84:42:c4:48:89:e0:3b:a2:f9:64:7e:ad:60:29:
                    34:a0:7d:ea:b2:d6:a0:17:5e:7e:45:84:dc:d0:47:
                    19:22:f6:10:63:ca:7c:6e:d0:ed:1c:2f:9f:d1:ba:
                    d6:42:38:a0:59:df:ac:2e:80:ab:f3:3a:de:4d:fd:
                    68:11:3b:98:f0:86:87:cb:d2:d6:47:43:1f:27:03:
                    a6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:5D:4E:F7:B0:30:E6:C1:29:BE:5A:C9:72:68:07:66:04:35:01:48
            X509v3 Authority Key Identifier:
                keyid:9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/5l1O97Aw5sEpvlrJcmgHZgQ1AUg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:13e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:1f:fb:00:51:ea:ed:50:5b:2c:d6:5f:c2:8c:5f:85:f2:50:
         8e:07:aa:01:42:45:47:93:30:aa:37:76:11:6e:3a:ed:9c:d8:
         76:64:e5:25:de:24:17:e3:51:f5:8b:7c:c5:a1:a6:56:21:8a:
         d9:8e:f6:f6:0d:43:d2:cc:b4:41:d2:8e:91:d6:26:07:c5:73:
         60:50:40:a4:82:05:79:6f:0f:6d:2d:2e:da:fb:18:0f:4a:71:
         ac:39:ca:ff:a0:cf:f7:58:ad:ce:9f:5d:3e:f3:ba:c2:b8:8f:
         ef:f5:92:e0:98:1e:9c:74:77:27:6a:f6:2c:30:e8:a6:45:96:
         1d:cc:14:0a:f2:9d:7b:46:ce:47:47:be:af:16:f7:39:7c:aa:
         09:08:f1:4e:b1:66:68:c0:eb:b5:0e:00:b5:98:03:ac:5a:d3:
         16:26:c3:c4:25:12:04:a9:0a:ad:6b:80:a3:91:c8:5b:18:06:
         ce:a0:8a:93:4a:38:ba:09:44:f5:99:10:9d:81:d9:9e:5c:32:
         06:f8:e5:db:80:69:9a:a1:6d:c2:73:b3:9d:bb:60:fc:72:3d:
         11:cf:e0:b1:a7:00:25:56:91:cc:33:09:d0:ad:53:bb:79:5f:
         ff:3e:0e:87:5c:6b:8b:52:60:69:9a:b9:a1:f1:78:d5:36:a6:
         05:14:35:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:44 2024 by rpki-client on console-ams.rpki-client.org