Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/920bb6-09bb-441a-9061-15520cd0ff6b/1/XAvSpa6b_8-EGMnNiRsFOxMFB64.roa
File:                     XAvSpa6b_8-EGMnNiRsFOxMFB64.roa (raw, json)
Hash identifier:          SMQnu5lcTt0BDVw9OQSoUkOa6zcU3YSp5R2QWaaXgII=
Subject key identifier:   5C:0B:D2:A5:AE:9B:FF:CF:84:18:C9:CD:89:1B:05:3B:13:05:07:AE
Certificate issuer:       /CN=f6398c302d0d16da81983e78ff4c1a96f384943c
Certificate serial:       01889F453516B777955D7170C4FB600FEFD0
Authority key identifier: F6:39:8C:30:2D:0D:16:DA:81:98:3E:78:FF:4C:1A:96:F3:84:94:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9jmMMC0NFtqBmD54_0walvOElDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/920bb6-09bb-441a-9061-15520cd0ff6b/1/XAvSpa6b_8-EGMnNiRsFOxMFB64.roa
Signing time:             Fri 09 Jun 2023 08:28:12 +0000
ROA not before:           Fri 09 Jun 2023 08:28:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198186
IP address blocks:        2001:67c:1244::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:9f:45:35:16:b7:77:95:5d:71:70:c4:fb:60:0f:ef:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6398c302d0d16da81983e78ff4c1a96f384943c
        Validity
            Not Before: Jun  9 08:28:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5c0bd2a5ae9bffcf8418c9cd891b053b130507ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:21:c4:d1:7f:aa:e5:ad:e0:10:d5:0e:2d:ac:
                    d7:2c:9e:2d:db:62:f3:a6:68:57:1d:e6:08:bf:6a:
                    cc:5b:6a:c9:25:03:c6:e3:0e:04:f9:0c:ed:18:2c:
                    cf:0d:a6:62:39:6b:54:d8:5b:34:46:04:c4:22:3d:
                    c3:7e:0d:8f:e1:4e:64:6e:d5:00:c8:03:36:73:99:
                    60:f0:a7:7f:8a:ac:42:51:56:04:55:86:d4:0e:e4:
                    2e:d9:ce:c5:de:5f:14:af:64:8b:b2:52:ea:7d:13:
                    55:ab:ed:93:b1:b3:a7:62:f6:11:a1:67:50:7e:e8:
                    06:2b:4e:cf:23:81:de:de:1f:09:6a:96:eb:41:ea:
                    9e:9c:9b:b5:eb:28:c7:b8:9a:77:b8:16:3b:9f:66:
                    c7:25:64:80:ad:21:2e:4a:e1:52:ef:af:43:11:28:
                    4e:1c:33:97:54:0b:b3:c3:25:a5:e7:f4:57:af:2b:
                    00:1a:94:a8:11:0a:c7:71:54:6d:18:39:a9:af:c7:
                    7a:42:2d:a0:17:fb:20:df:8b:a4:6e:ab:ad:c0:4b:
                    7c:58:72:6c:ae:35:d3:aa:77:29:b6:ed:de:90:dd:
                    2c:c1:cd:54:cd:a4:4e:66:fb:bc:4b:b2:07:c3:17:
                    e0:9f:ce:c1:4e:a1:d7:a0:30:b3:22:74:41:16:6d:
                    98:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0B:D2:A5:AE:9B:FF:CF:84:18:C9:CD:89:1B:05:3B:13:05:07:AE
            X509v3 Authority Key Identifier:
                keyid:F6:39:8C:30:2D:0D:16:DA:81:98:3E:78:FF:4C:1A:96:F3:84:94:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jmMMC0NFtqBmD54_0walvOElDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/920bb6-09bb-441a-9061-15520cd0ff6b/1/XAvSpa6b_8-EGMnNiRsFOxMFB64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/920bb6-09bb-441a-9061-15520cd0ff6b/1/9jmMMC0NFtqBmD54_0walvOElDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1244::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:9f:8b:ea:0d:6d:c4:c1:03:ec:be:bf:45:09:7a:fe:0b:b0:
         9d:81:55:27:53:dd:fc:2d:cb:e8:e6:a0:c5:c5:95:e2:62:f7:
         02:3d:26:5d:81:1a:ec:8c:7a:c9:5d:f9:b6:dc:a9:09:82:c7:
         e0:6f:47:95:ab:0e:d2:33:3b:c1:68:d5:22:09:eb:62:6e:28:
         11:83:0d:fa:3a:c8:13:de:01:5b:6d:00:8f:54:80:64:74:1f:
         0a:3e:c6:6c:c3:68:bc:79:5f:db:39:9f:ab:59:c7:a0:44:f8:
         d7:58:d7:c3:a6:24:36:e5:82:79:85:60:32:35:e3:4d:21:35:
         af:80:22:14:c4:d7:d9:72:22:bb:3e:5b:dd:88:26:7e:69:3b:
         79:bf:66:3f:d9:39:92:79:e3:2d:e9:6f:14:5f:7d:d9:2b:89:
         6c:03:23:e9:e7:17:8b:cc:c8:17:22:b2:08:70:ac:0c:82:6a:
         73:65:b0:76:dd:aa:96:ca:59:e5:af:fd:b8:52:11:06:02:d0:
         5e:e9:4c:11:57:94:ce:8f:fb:b9:4f:9f:c7:3e:96:ca:e5:b2:
         df:16:27:37:2a:44:bc:be:64:69:1a:53:02:74:89:bd:2d:a0:
         bf:ca:51:fb:8e:3c:81:bf:2b:5f:4a:59:2f:5c:06:31:99:35:
         78:69:b7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:45 2024 by rpki-client on console-fra.rpki-client.org