Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/svmSDKAfptenuQ5tFCGhZ7BTjVQ.roa
File:                     svmSDKAfptenuQ5tFCGhZ7BTjVQ.roa (raw, json)
Hash identifier:          TURN9Iid6tbOH2cuGnsTNqVt8KnaZp+zge8unR4+FHk=
Subject key identifier:   B2:F9:92:0C:A0:1F:A6:D7:A7:B9:0E:6D:14:21:A1:67:B0:53:8D:54
Certificate issuer:       /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial:       01856B8A39D5BAF1E694CFD638893428FB6A
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/svmSDKAfptenuQ5tFCGhZ7BTjVQ.roa
Signing time:             Sun 01 Jan 2023 04:14:58 +0000
ROA not before:           Sun 01 Jan 2023 04:14:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8966
IP address blocks:        2a03:2887:ff0c::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:8a:39:d5:ba:f1:e6:94:cf:d6:38:89:34:28:fb:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
        Validity
            Not Before: Jan  1 04:14:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b2f9920ca01fa6d7a7b90e6d1421a167b0538d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dd:15:54:50:d1:91:ea:b2:54:92:56:ba:18:
                    da:81:89:7f:53:c3:61:d2:14:78:08:d8:95:0e:ff:
                    85:ed:d6:ca:ac:03:39:e1:95:b1:41:75:84:93:50:
                    79:70:c5:63:4d:cb:a1:93:9e:34:d8:d8:a4:ab:94:
                    ee:81:d9:ed:0b:88:a9:8d:49:04:a8:83:24:1e:fd:
                    d3:af:42:e4:5c:6f:49:4b:96:c8:3a:34:55:2c:5c:
                    45:c3:4b:31:a2:a1:47:7e:c3:b0:7e:a9:71:15:d7:
                    a1:e4:d1:9c:19:93:86:31:e5:64:0c:6f:f8:61:9a:
                    f5:1e:5a:40:1e:08:a6:b7:04:5f:a5:1d:52:09:2e:
                    96:86:ae:94:df:87:d7:f6:6c:f6:fa:4f:e7:52:78:
                    6a:39:dd:4e:75:2c:30:96:26:23:5a:ce:79:24:d9:
                    9f:56:56:20:e6:45:ef:c8:6e:92:36:5b:27:7d:c9:
                    40:c0:85:73:6c:cd:90:23:40:43:3d:15:89:50:4a:
                    6c:34:d2:bb:49:49:e5:37:6a:2f:ed:2a:32:08:ce:
                    17:49:be:57:9e:61:6a:81:7f:4f:eb:35:2b:86:c9:
                    57:e3:c7:16:90:e1:af:8c:2a:d3:92:4b:0e:30:9e:
                    5d:da:91:5e:51:56:dc:8e:70:69:9b:a1:3b:3c:64:
                    f8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F9:92:0C:A0:1F:A6:D7:A7:B9:0E:6D:14:21:A1:67:B0:53:8D:54
            X509v3 Authority Key Identifier:
                keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/svmSDKAfptenuQ5tFCGhZ7BTjVQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:2887:ff0c::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:ba:5c:84:b5:93:67:9d:f7:e6:cd:1f:f7:0d:1f:9f:f4:05:
         8a:ba:30:0e:a9:01:11:1b:45:82:b8:eb:ba:4a:80:f3:6b:57:
         fa:f4:b9:7c:c2:d5:65:db:16:1b:11:ef:9d:0e:eb:cf:42:7a:
         71:84:73:a7:18:70:40:bd:09:e8:50:a2:b2:89:fa:c3:a7:77:
         d5:48:c0:a9:97:c3:e2:f6:9a:0d:35:c4:65:9d:93:a2:09:b7:
         f2:2c:8e:2f:57:02:99:35:f3:cb:80:3f:0e:e8:b9:c5:5e:d6:
         3a:bf:eb:2b:2a:30:61:22:8a:5d:8c:b6:fe:c4:c7:fd:37:06:
         65:19:4c:fe:49:a0:0f:ed:b3:19:ea:5e:71:a7:5e:5b:fe:e7:
         62:90:01:8d:fe:34:d3:92:d1:6f:25:61:ad:97:b9:90:8b:7d:
         cf:d1:cb:ec:b5:8b:f0:74:03:dc:5b:02:9c:cd:1b:79:8e:ee:
         5d:9e:26:df:e7:17:81:41:59:52:a9:59:25:8b:9f:a7:2a:15:
         35:59:4e:75:83:d2:ce:e6:b0:97:ff:66:16:dd:b0:dc:da:0d:
         27:b4:43:6b:e3:4f:38:a0:bf:70:e6:76:54:c8:96:09:e0:0b:
         4d:77:23:5e:09:b6:5f:b2:21:9a:dd:aa:c2:ef:93:9c:ad:1d:
         b7:5f:d1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:09 2024 by rpki-client on console-ams.rpki-client.org