Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/MDEQUdbQ5Q02z_sAhuaij-Lr6Pg.roa
File:                     MDEQUdbQ5Q02z_sAhuaij-Lr6Pg.roa (raw, json)
Hash identifier:          eBUW4MmtvBXvjzxTte9/AMajCadw7hMZ37NMkU2KpbE=
Subject key identifier:   30:31:10:51:D6:D0:E5:0D:36:CF:FB:00:86:E6:A2:8F:E2:EB:E8:F8
Certificate issuer:       /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial:       01926FEBB86454D1043B00710015EADA456B
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/MDEQUdbQ5Q02z_sAhuaij-Lr6Pg.roa
Signing time:             Wed 09 Oct 2024 06:16:11 +0000
ROA not before:           Wed 09 Oct 2024 06:16:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     61400
IP address blocks:        2a0a:e2c0::/29 maxlen: 29

Validation:               Failed, certificate revoked on Tue 12 Nov 2024 17:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:6f:eb:b8:64:54:d1:04:3b:00:71:00:15:ea:da:45:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
        Validity
            Not Before: Oct  9 06:16:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=30311051d6d0e50d36cffb0086e6a28fe2ebe8f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:47:17:dc:c1:a3:f6:c2:33:08:30:cd:e8:
                    3a:74:fc:c7:c6:ae:74:e8:f1:70:c9:9e:41:3d:82:
                    8e:87:79:d5:47:9a:c2:33:23:07:59:f1:ee:c6:63:
                    ca:d2:64:30:19:95:1a:40:5f:70:66:4a:2c:ca:96:
                    15:ab:a3:dd:f1:a0:a5:6a:48:84:d5:b9:1a:19:a4:
                    43:00:78:28:24:48:55:de:7f:cc:b4:80:1a:a1:42:
                    22:9c:e8:f9:3d:1f:95:98:21:29:b4:96:3c:be:93:
                    08:e4:32:75:60:00:72:d9:74:06:7f:a4:6b:c2:bf:
                    02:5c:2e:c2:9b:a9:69:b4:54:cb:ca:74:e1:cf:a3:
                    f4:5d:17:6a:4e:fe:85:d3:ad:a4:1e:d5:17:86:85:
                    ff:3c:76:57:31:7a:5e:39:07:cf:52:27:b5:d3:c1:
                    41:46:b0:34:0b:df:cc:b7:74:30:a5:39:d4:3a:35:
                    c1:73:50:b4:5e:ba:5c:2b:d7:99:28:d8:2a:ae:c8:
                    fd:e8:89:4c:95:56:48:74:4f:6d:3b:6c:96:3e:da:
                    6a:af:b5:c5:0b:d9:9c:37:41:0a:27:e2:1d:d4:6e:
                    82:94:ff:21:99:0d:0c:9a:fc:2d:02:15:ba:c7:e8:
                    80:5b:4c:dc:75:5d:7c:55:c0:6b:3b:4d:63:e6:a2:
                    5d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:31:10:51:D6:D0:E5:0D:36:CF:FB:00:86:E6:A2:8F:E2:EB:E8:F8
            X509v3 Authority Key Identifier:
                keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/MDEQUdbQ5Q02z_sAhuaij-Lr6Pg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:e2c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         88:8e:f6:93:73:b3:4a:40:47:07:05:a3:cf:50:83:9f:1f:2c:
         c1:b2:d1:75:98:72:86:a8:7a:5a:8b:77:0f:32:83:54:8d:3e:
         89:de:56:08:0a:ca:6f:0e:46:b8:9c:24:a7:1f:de:41:3e:71:
         88:18:34:5d:7a:b4:5f:ee:11:cd:d4:cd:f6:61:a0:93:0c:19:
         d0:63:e2:40:28:30:4f:9b:1e:1e:0b:7b:f4:d3:a0:43:c5:30:
         80:d1:d1:91:9e:18:3f:3d:a9:a0:95:2b:2c:d8:d2:1c:8b:89:
         a0:27:e9:41:26:6b:47:f6:a8:ea:e8:16:54:6d:e8:e3:5b:c2:
         62:8f:06:92:ee:f8:ac:fe:42:e6:b9:8b:8c:1c:d9:5d:1a:d1:
         3d:35:35:96:10:17:cd:13:f5:1e:9a:40:b3:1f:fc:c2:d4:d7:
         85:6f:bb:c6:a3:67:f5:45:cf:9d:82:a9:3c:b8:6b:a0:10:c6:
         5e:22:fe:aa:5b:76:15:67:01:63:36:14:5b:64:85:e4:75:6a:
         bd:cd:63:03:61:02:81:63:e7:1e:6f:2b:a0:ae:80:4d:bf:36:
         b7:f2:bd:13:34:65:0f:54:3b:40:0c:49:c0:6c:a9:c7:a1:15:
         0e:69:7d:4b:dc:0f:d8:e8:d3:68:63:02:57:fd:ce:6e:9e:9e:
         f4:db:00:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 21:17:14 2024 by rpki-client on console-ams.rpki-client.org