Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/FxquqTjBx-1WcA2OBb3eclvYUPw.roa
File:                     FxquqTjBx-1WcA2OBb3eclvYUPw.roa (raw, json)
Hash identifier:          QiFJ5kq9CFgtMDfJp9d0SCHirlRnosHCUM7Fo8qA0kA=
Subject key identifier:   17:1A:AE:A9:38:C1:C7:ED:56:70:0D:8E:05:BD:DE:72:5B:D8:50:FC
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       01857246C588EABB01EECA3121646A2F155E
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/FxquqTjBx-1WcA2OBb3eclvYUPw.roa
Signing time:             Mon 02 Jan 2023 11:38:38 +0000
ROA not before:           Mon 02 Jan 2023 11:38:38 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61138
IP address blocks:        2a0c:9a40:8082::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:c5:88:ea:bb:01:ee:ca:31:21:64:6a:2f:15:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  2 11:38:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=171aaea938c1c7ed56700d8e05bdde725bd850fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:69:51:ad:00:8c:fa:65:b9:16:c8:f8:88:5e:
                    ee:cf:6e:68:c1:92:91:c6:33:c8:17:f4:ac:16:e0:
                    b4:27:15:c4:da:bc:fe:42:8f:ef:a8:e9:92:04:15:
                    be:7d:97:db:6d:ef:c1:2c:08:6c:63:f3:8a:1e:3f:
                    56:1a:d0:ad:96:07:74:55:5b:2a:e1:58:54:7f:de:
                    7a:3c:d5:06:f1:05:b6:57:b2:b9:b8:3e:04:28:d9:
                    17:09:d9:65:0e:c8:42:55:6d:3c:ba:22:45:7b:01:
                    c1:ad:02:2a:6c:92:45:7d:ab:d5:7d:3a:d3:79:f0:
                    4d:83:5e:34:5e:80:7d:2d:4a:9d:a3:50:f5:7d:cd:
                    c5:e7:6f:26:55:58:74:6b:0a:9c:79:37:1e:4e:94:
                    b2:0b:90:b5:aa:36:28:cb:e8:d1:cf:b5:9b:39:f0:
                    bc:c5:4a:29:72:c8:72:1c:7a:21:88:d0:8d:06:06:
                    87:b3:70:43:12:a4:d3:5d:47:da:46:71:b1:0e:22:
                    45:49:1e:9e:a7:e9:08:ea:f5:47:f5:7b:31:e7:ea:
                    9b:49:8a:5b:0f:e4:bd:6e:1e:f9:c4:ca:34:75:6e:
                    d1:e7:cc:e4:33:c5:a5:14:c2:75:9b:47:a3:1c:55:
                    49:a1:f5:9f:d4:cf:f4:e9:39:35:06:6a:e1:c4:1b:
                    81:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1A:AE:A9:38:C1:C7:ED:56:70:0D:8E:05:BD:DE:72:5B:D8:50:FC
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/FxquqTjBx-1WcA2OBb3eclvYUPw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:8082::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:b5:48:f2:59:97:ac:5c:c2:2a:b3:15:35:e8:bf:25:93:67:
         6d:a8:78:d1:d0:48:4f:d1:e1:40:ae:f1:87:d1:c4:4c:97:96:
         fb:31:b6:4f:08:58:86:d0:9e:a3:53:b6:9c:53:d7:ed:f6:09:
         06:ff:be:09:e0:1c:f2:33:90:e2:dc:ed:24:83:e5:05:8d:b8:
         87:65:f7:29:9a:e3:67:e6:4b:48:c4:1c:64:72:2b:0c:49:8d:
         06:1c:bd:59:8e:60:25:76:fe:3e:12:90:82:0d:12:ed:db:f7:
         63:00:09:31:7c:5e:78:45:01:d4:78:1b:c1:49:d7:e9:a2:dd:
         da:2d:fc:a7:ca:94:1e:fd:68:66:67:c6:31:10:ec:4c:37:34:
         a7:e9:8e:d5:c2:59:0f:c1:f4:3d:ec:d3:0f:74:da:8e:4d:97:
         6d:ec:a5:f0:09:45:dc:50:a3:6c:a2:0e:3b:0f:d5:33:19:e1:
         d0:81:e1:f4:9b:24:23:ba:39:05:69:0c:7b:dd:57:e9:40:ba:
         ff:eb:cd:1f:0e:8e:b4:13:81:3b:aa:1e:52:b2:3a:71:fd:f4:
         47:03:02:29:49:9a:61:43:96:38:33:8f:5b:a2:11:65:71:e1:
         41:44:1d:95:4b:d3:c6:e8:61:e9:21:4d:0b:91:b3:63:65:8c:
         f0:8e:24:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:19 2024 by rpki-client on console-ams.rpki-client.org