Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/4F6HunzioGK1x8XpJCdSMni43Wc.roa
File:                     4F6HunzioGK1x8XpJCdSMni43Wc.roa (raw, json)
Hash identifier:          Zb570RjvpvKI8sW3RHaXDHyfoxSPkJHY/K4ss2UP75s=
Subject key identifier:   E0:5E:87:BA:7C:E2:A0:62:B5:C7:C5:E9:24:27:52:32:78:B8:DD:67
Certificate issuer:       /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial:       0188DA4A0401B9D40504649A6F5674C746CF
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/4F6HunzioGK1x8XpJCdSMni43Wc.roa
Signing time:             Tue 20 Jun 2023 19:31:03 +0000
ROA not before:           Tue 20 Jun 2023 19:31:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        2a13:7c40:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 12 Jul 2023 12:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:da:4a:04:01:b9:d4:05:04:64:9a:6f:56:74:c7:46:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
        Validity
            Not Before: Jun 20 19:31:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e05e87ba7ce2a062b5c7c5e92427523278b8dd67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f4:b2:2e:75:3e:41:95:cc:69:5c:22:9b:89:
                    57:a6:ca:65:84:b8:89:f3:7f:2d:6a:3a:96:ff:55:
                    84:23:a4:86:24:e1:7d:b8:64:4c:2c:e6:7d:87:12:
                    78:f9:9b:eb:b1:3a:eb:80:9c:b6:2b:02:03:68:8f:
                    3c:79:33:ee:8b:00:a2:bd:af:2f:ff:83:ce:c5:23:
                    af:23:91:29:3d:34:88:3d:94:2c:5e:45:8c:1e:2c:
                    48:88:fc:a3:9b:68:d0:75:da:25:95:20:77:47:e1:
                    f4:20:04:de:5f:15:e9:bc:cb:47:5f:ed:2c:9e:c5:
                    a9:98:9f:1b:8c:f8:28:50:87:c0:78:a9:05:53:bc:
                    81:c0:0c:fa:e5:0a:62:2a:37:32:b7:97:31:20:52:
                    8b:2f:c9:b1:c6:24:1d:96:8e:35:b7:c3:44:e8:0e:
                    dc:71:f8:00:06:33:07:ad:9d:81:13:47:b3:1f:0f:
                    74:7c:ff:d3:74:20:f7:b0:dc:ec:4b:46:13:29:d7:
                    47:b2:f9:53:7a:f6:34:3c:cc:16:70:3b:b1:8e:a0:
                    e1:97:c6:40:35:00:ec:3e:b9:ac:45:57:25:3b:b2:
                    cf:ac:11:06:06:da:31:77:a4:0d:25:50:b7:2e:71:
                    bc:57:a4:c5:bc:5f:e7:16:cd:a1:bb:6b:1a:1b:11:
                    63:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5E:87:BA:7C:E2:A0:62:B5:C7:C5:E9:24:27:52:32:78:B8:DD:67
            X509v3 Authority Key Identifier:
                keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/4F6HunzioGK1x8XpJCdSMni43Wc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:7c40:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:03:1d:3b:d6:96:98:e5:c5:26:23:cc:9d:19:22:7b:fe:59:
         51:72:74:22:26:91:f6:f5:77:67:09:96:5f:87:7f:44:dd:b4:
         89:60:11:11:48:e8:bf:a1:7b:0c:2a:58:c4:13:b0:dc:46:85:
         3c:e9:64:64:a3:25:50:d1:4f:b4:e8:33:f9:29:a1:48:9e:dd:
         6d:a6:13:33:6b:ff:54:34:d1:50:20:f3:b3:dc:d3:fd:b8:40:
         c3:d1:d2:60:23:ca:2f:fc:5b:62:ac:d4:dd:e1:f8:e5:0f:cf:
         ee:90:63:86:58:65:d2:27:d3:86:06:03:e6:1c:8c:05:81:57:
         9c:d0:98:8e:e3:4a:a6:b7:5b:69:84:0b:1e:03:2a:71:ae:21:
         ac:ac:dc:dd:f6:d5:f6:24:d3:f9:c7:44:d7:60:d6:27:dd:93:
         e7:49:ed:8b:5a:03:2b:d7:5f:a3:17:75:f4:ed:ac:62:1a:bc:
         e7:74:b2:e5:11:be:e2:a6:f8:27:2e:90:45:e2:99:52:78:8c:
         ca:01:13:49:ed:40:cb:65:2e:db:46:57:06:56:3a:51:d8:83:
         d9:94:5b:9f:94:1b:3f:92:3d:41:d4:8a:84:80:a7:4f:94:8c:
         ee:f1:63:86:4e:2b:9b:18:61:34:77:f9:6b:ca:d2:f8:f4:e5:
         7f:24:65:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:57 2024 by rpki-client on console-ams.rpki-client.org