Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/eukzPqmEIGIJFPtW0mtqtVkxKU0.roa
File:                     eukzPqmEIGIJFPtW0mtqtVkxKU0.roa (raw, json)
Hash identifier:          5zmmlMkCm3hgINYdUvz++59j/51DjJ7Rx4Al1x3jlSU=
Subject key identifier:   7A:E9:33:3E:A9:84:20:62:09:14:FB:56:D2:6B:6A:B5:59:31:29:4D
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       0186D75F9DE6D7D409955D63BC82228C6D23
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/eukzPqmEIGIJFPtW0mtqtVkxKU0.roa
Signing time:             Sun 12 Mar 2023 19:50:13 +0000
ROA not before:           Sun 12 Mar 2023 19:50:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199689
IP address blocks:        2a0c:9a40:81f9::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:d7:5f:9d:e6:d7:d4:09:95:5d:63:bc:82:22:8c:6d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Mar 12 19:50:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ae9333ea98420620914fb56d26b6ab55931294d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a5:ed:c1:e8:06:91:f6:5b:ce:14:b2:b5:2a:
                    4e:62:6c:b6:69:68:52:bc:c4:91:ef:34:c7:0b:b9:
                    41:eb:7c:c0:0b:a3:5a:88:3a:27:06:c5:fb:97:0f:
                    89:86:39:b5:15:26:bc:b2:ab:96:66:a3:a5:ca:71:
                    77:e1:7f:8a:fb:15:4f:2c:75:b3:46:bc:97:3a:fc:
                    02:4b:92:67:fa:12:32:65:38:82:53:e4:1d:94:c4:
                    29:3d:67:f6:cf:d1:02:38:33:1e:6b:f6:c6:8b:b1:
                    49:16:be:d5:f9:95:0a:f1:25:47:0a:98:9c:ab:9d:
                    64:d5:ba:14:31:41:73:59:fe:02:8d:a2:7c:ca:09:
                    53:4b:8b:ad:eb:25:51:b0:11:75:4b:bd:98:71:89:
                    b4:a1:c4:78:45:e4:08:68:29:98:1c:6a:2f:ad:d1:
                    fd:c9:3f:7c:98:20:a2:a5:21:79:cd:b7:37:c5:ce:
                    29:12:d7:91:55:71:05:4b:3b:ba:99:c0:27:bf:25:
                    d9:50:0c:f5:91:b8:04:20:70:81:b8:ec:ca:f2:89:
                    1b:45:18:f9:d4:ea:fc:68:11:62:02:16:7c:d7:87:
                    e8:5c:ec:f4:f5:54:81:71:33:7b:84:47:cd:7e:c4:
                    84:c9:4e:40:41:30:70:42:85:4a:73:85:f9:bf:9b:
                    c5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E9:33:3E:A9:84:20:62:09:14:FB:56:D2:6B:6A:B5:59:31:29:4D
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/eukzPqmEIGIJFPtW0mtqtVkxKU0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:81f9::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:41:69:51:e8:b7:d0:87:86:ad:8a:bc:67:df:da:ca:6a:01:
         a9:15:62:ac:84:44:be:81:9b:8d:28:88:a6:ff:be:16:ea:48:
         56:33:27:47:3b:20:17:6d:b8:2c:5e:12:c7:46:c2:e3:b2:38:
         a7:bb:e1:19:d5:8d:ea:4b:97:ba:13:c3:11:c0:bc:bb:d3:61:
         2b:74:b9:e4:60:db:e7:38:2d:4b:fd:6f:9c:45:bc:47:53:41:
         a9:ad:c2:c9:cf:41:85:05:dc:f8:04:a4:66:65:ac:49:a7:67:
         35:45:ed:5f:05:57:91:04:71:17:5f:6a:9c:f6:a2:c2:3e:62:
         f2:f5:54:d0:10:6b:a9:94:77:00:47:9e:0a:0b:ee:d6:5d:b4:
         a2:55:3c:46:6e:27:f2:0f:83:4d:61:2c:d6:26:69:7a:48:5f:
         61:77:c8:15:f8:a2:06:01:be:6a:28:db:32:7b:ed:5c:5f:c3:
         40:ff:63:b6:59:e0:34:ff:9d:ce:ff:5c:93:17:10:e5:af:c0:
         c8:1d:54:38:55:76:d1:b0:28:6f:28:27:d2:0d:e7:ff:3d:3b:
         7b:4c:1f:db:83:f9:eb:50:94:04:87:20:4b:63:71:de:d6:11:
         36:df:e2:b2:06:8e:d8:f2:f0:62:24:5d:c4:73:ba:7a:55:87:
         82:45:8b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:15 2024 by rpki-client on console-ams.rpki-client.org