Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a336430303a3a2f34382d3438203d3e20323136343732.roa
File:                     326131323a646434373a336430303a3a2f34382d3438203d3e20323136343732.roa (raw, json)
Hash identifier:          espgsL3myjCanqE+KOEd/73S4IbMBdKae05WFWqG+II=
Subject key identifier:   B5:18:7F:DA:3E:08:C0:1C:00:77:C4:3A:A0:80:31:14:AE:EB:C7:A5
Certificate issuer:       /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial:       3FC4A55D9D56AA1C1DC088726FA79EC0B204484C
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access:    rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access:      rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430303a3a2f34382d3438203d3e20323136343732.roa
Signing time:             Sat 01 Jun 2024 16:57:32 +0000
ROA not before:           Sat 01 Jun 2024 16:52:32 +0000
ROA not after:            Sat 31 May 2025 16:57:32 +0000
asID:                     216472
IP address blocks:        2a12:dd47:3d00::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 01 Jun 2024 23:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c4:a5:5d:9d:56:aa:1c:1d:c0:88:72:6f:a7:9e:c0:b2:04:48:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
        Validity
            Not Before: Jun  1 16:52:32 2024 GMT
            Not After : May 31 16:57:32 2025 GMT
        Subject: CN=B5187FDA3E08C01C0077C43AA0803114AEEBC7A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:83:e9:9f:84:ac:1f:86:f1:36:6d:57:7a:02:
                    1b:62:40:85:ae:21:0f:bf:ef:e5:53:fb:2b:f5:84:
                    3c:33:8b:3a:eb:cf:fa:14:8e:a4:e5:48:73:c3:01:
                    9b:39:25:96:d0:c4:1b:01:44:0c:51:bc:b8:d5:c8:
                    fc:45:8c:2b:14:b2:ac:62:63:3b:c2:36:06:e4:1f:
                    3d:e8:1b:57:68:a7:97:47:d2:d2:ba:78:4e:d6:66:
                    a9:e4:d9:62:26:b9:71:43:65:d1:3b:67:bc:72:6b:
                    6e:25:ac:7a:a0:46:a9:0e:02:75:b9:1a:39:86:4b:
                    0a:b7:88:85:c2:4c:87:72:7f:78:41:42:f0:02:15:
                    6d:a8:ff:28:db:b8:59:09:56:77:44:2f:4c:25:71:
                    2a:19:dc:f0:cf:36:d6:19:be:93:9f:7c:ab:e9:64:
                    1c:23:95:d0:a6:d2:05:e2:49:d9:23:07:2f:95:d4:
                    fe:44:ea:fa:b3:6d:f5:13:b8:a1:68:03:bf:75:ad:
                    8a:68:90:0d:7d:90:f0:51:06:e0:f2:f8:fa:34:80:
                    f6:b2:ef:e5:4b:45:90:1e:a7:cc:eb:07:76:c9:40:
                    75:df:0c:21:bf:4f:67:a9:12:6b:1f:c2:83:21:24:
                    07:bb:6c:d4:05:40:de:4e:cd:7f:08:3a:0d:19:dc:
                    f5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:18:7F:DA:3E:08:C0:1C:00:77:C4:3A:A0:80:31:14:AE:EB:C7:A5
            X509v3 Authority Key Identifier:
                keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430303a3a2f34382d3438203d3e20323136343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:4b:96:cc:c6:87:40:49:ac:44:e8:81:a9:04:2b:6a:3f:0f:
         89:f1:7f:4d:e5:8a:02:4b:a0:03:b4:52:3a:b2:c0:73:31:bc:
         bb:70:3a:b1:23:de:15:a7:73:98:2c:d3:9f:c5:d2:ec:80:58:
         ab:e6:54:18:e8:54:a5:0a:ac:c5:e4:f7:cf:9e:3c:f3:c3:d8:
         a0:35:53:46:c5:94:2f:83:c8:ca:a5:88:e4:a7:a5:4c:c0:61:
         00:de:84:e3:56:a8:9c:c5:10:e4:7b:94:74:0f:e8:85:d3:f4:
         e1:c2:e5:5b:0e:3b:6a:54:e6:76:af:67:f5:8b:5a:0e:3e:1c:
         65:37:69:95:dc:5a:4f:29:68:e3:88:99:5b:3f:c9:06:b2:e9:
         9c:66:2a:b3:2d:a9:bc:ac:ed:b9:ba:a9:d8:ab:2f:1f:f9:73:
         85:8a:fc:95:fb:c3:d0:a8:3f:7c:f9:77:72:59:ed:db:f5:57:
         f6:19:09:96:87:4a:1a:9e:14:78:ed:4d:4b:df:01:f9:71:94:
         e3:4c:86:e8:d1:a8:0b:07:6f:59:a5:ed:47:a9:15:08:ae:3b:
         af:b6:13:1b:19:33:6b:08:af:a4:44:3b:2d:27:87:b2:91:25:
         47:c9:1d:64:9c:bc:c2:4e:e3:8a:87:12:51:39:4b:60:9f:7c:
         95:a9:d4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:32:18 2024 by rpki-client on console-ams.rpki-client.org