Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/BerryByte/1/326130613a363034303a623031303a3a2f34382d3438203d3e20323034383537.roa
File:                     326130613a363034303a623031303a3a2f34382d3438203d3e20323034383537.roa (raw, json)
Hash identifier:          6GIaP/VTN1WUpEY25U+yvrR8QVGOiRg4PDU5N6EG2P8=
Subject key identifier:   A8:A3:23:79:3A:6C:01:8A:EE:06:61:0C:E2:39:51:89:F3:0D:E0:6E
Certificate issuer:       /CN=10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1
Certificate serial:       4DD38A8730935708983950966A1A9574ED2FBADE
Authority key identifier: 10:85:8A:E8:15:A7:DD:CA:83:BE:CC:17:C1:F7:AC:0E:B7:C1:CE:B1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.cer
Subject info access:      rsync://rpki.cc/repo/BerryByte/1/326130613a363034303a623031303a3a2f34382d3438203d3e20323034383537.roa
Signing time:             Sat 11 May 2024 12:55:49 +0000
ROA not before:           Sat 11 May 2024 12:50:49 +0000
ROA not after:            Sat 10 May 2025 12:55:49 +0000
asID:                     204857
IP address blocks:        2a0a:6040:b010::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 15:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d3:8a:87:30:93:57:08:98:39:50:96:6a:1a:95:74:ed:2f:ba:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1
        Validity
            Not Before: May 11 12:50:49 2024 GMT
            Not After : May 10 12:55:49 2025 GMT
        Subject: CN=A8A323793A6C018AEE06610CE2395189F30DE06E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e7:92:c4:6f:9a:a5:d3:dc:1c:50:78:9d:32:
                    9d:84:8d:7c:cd:96:e9:5a:ee:d7:b2:11:5e:5e:35:
                    9a:41:99:92:0c:23:82:f4:e6:f7:cb:d3:96:75:4f:
                    e3:00:5c:ef:54:73:ee:28:2a:4b:ec:b3:0d:75:03:
                    2a:50:aa:6b:95:d2:0d:29:64:63:ed:92:a9:9e:25:
                    46:be:de:8f:0f:ac:a8:de:85:28:d2:0b:d5:d7:df:
                    fe:09:45:20:ff:33:00:44:66:c3:16:2b:9b:ee:2a:
                    e1:4b:fe:9a:60:aa:78:44:5d:e8:44:0b:d3:c2:23:
                    b7:74:87:f7:c0:23:28:84:4b:b0:52:d4:25:ce:9b:
                    51:56:29:1b:4e:80:46:bb:b9:d4:d2:e7:d6:cc:ec:
                    5e:f0:09:5e:3c:5b:9c:70:90:a0:fd:56:84:ec:b2:
                    8b:17:80:17:a1:3e:31:76:9a:bb:ea:ac:1c:89:4a:
                    a7:59:9b:7d:ab:ee:24:00:71:e3:4a:81:30:81:54:
                    3e:68:42:d3:04:bf:4b:a3:87:48:7e:52:c4:e3:b9:
                    0f:fe:5e:f8:d3:2b:bf:a6:ef:79:05:3a:76:55:fc:
                    91:db:e6:4e:9d:f8:d1:52:37:d6:4b:75:88:70:3a:
                    7f:3b:bc:2f:65:f7:7e:dd:4d:cc:3f:fa:a7:3d:43:
                    6d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A3:23:79:3A:6C:01:8A:EE:06:61:0C:E2:39:51:89:F3:0D:E0:6E
            X509v3 Authority Key Identifier:
                keyid:10:85:8A:E8:15:A7:DD:CA:83:BE:CC:17:C1:F7:AC:0E:B7:C1:CE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/BerryByte/1/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/BerryByte/1/326130613a363034303a623031303a3a2f34382d3438203d3e20323034383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b010::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:55:97:d7:75:62:e4:d4:a0:02:db:46:e6:4e:0d:58:32:ef:
         1c:bf:65:a7:fe:5c:62:89:e7:c9:cd:13:4e:56:e3:86:17:13:
         c4:b0:3f:b7:a8:74:2b:2a:79:96:fa:a6:41:10:a1:57:0b:15:
         2a:db:e6:54:31:c7:da:03:48:78:de:d4:f8:ac:ab:d0:f8:b1:
         7a:96:a8:e1:cd:ee:dc:47:e3:da:39:91:2b:07:1a:a3:46:f2:
         36:64:0e:59:f3:08:90:79:e6:82:61:c5:64:35:3f:77:5d:10:
         31:66:28:bc:49:30:45:c3:00:f0:a6:31:52:07:ca:9c:05:86:
         16:e7:f6:63:70:55:a3:77:e2:a3:ec:54:b0:1d:3a:e4:8d:03:
         f8:53:64:4a:cd:d4:b0:d7:05:bb:86:3a:70:0e:fa:5b:0d:ad:
         00:e5:3b:e0:29:66:25:e0:8c:1a:57:cb:f7:de:e6:ca:55:10:
         39:6c:d9:bc:cf:79:a4:2f:cd:e0:91:3a:74:e7:88:10:16:60:
         54:ce:ad:e4:64:ce:d9:d2:c6:51:46:a5:a4:34:95:c5:96:d3:
         e5:e5:ab:fa:f5:4f:ab:40:1b:c7:69:27:f2:72:0e:0e:25:94:
         c2:eb:b4:76:53:1a:6f:16:39:6f:01:5a:6c:c1:9e:3b:bd:25:
         9a:e4:5c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 20:23:53 2024 by rpki-client on console-ams.rpki-client.org