Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/ebJUhKW9nqPAa6umZx_zGmdg_xI.roa
File:                     ebJUhKW9nqPAa6umZx_zGmdg_xI.roa (raw, json)
Hash identifier:          d3QOKcpqva1r4sc1zXckd8vhYtfOwLFnOs7DhWpvcd0=
Subject key identifier:   79:B2:54:84:A5:BD:9E:A3:C0:6B:AB:A6:67:1F:F3:1A:67:60:FF:12
Certificate issuer:       /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial:       0186E520F21A0AC87F9DFCD9449BCC1CE07B
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/ebJUhKW9nqPAa6umZx_zGmdg_xI.roa
Signing time:             Wed 15 Mar 2023 11:56:27 +0000
ROA not before:           Wed 15 Mar 2023 11:56:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199460
IP address blocks:        2a13:b487:1a00::/40 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e5:20:f2:1a:0a:c8:7f:9d:fc:d9:44:9b:cc:1c:e0:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
        Validity
            Not Before: Mar 15 11:56:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=79b25484a5bd9ea3c06baba6671ff31a6760ff12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:30:e0:91:b3:68:a3:40:b7:ce:c5:00:01:4d:
                    22:31:4c:a5:7b:1b:0b:ea:52:fd:78:b6:0a:3f:a1:
                    ee:86:01:47:1a:1f:33:06:ee:74:23:3f:5c:a0:c3:
                    e0:5c:24:5f:df:26:78:ad:f7:f1:64:6e:44:a0:c6:
                    ae:7e:5b:7e:35:17:96:d3:bb:0c:10:bb:5b:d3:22:
                    53:af:a3:03:f6:e7:92:5a:12:0e:a4:09:ef:7b:57:
                    00:f4:98:8e:f3:89:f9:6d:96:42:44:91:bf:ba:d5:
                    88:2c:12:43:87:2e:29:99:21:29:5d:e0:55:da:7d:
                    1c:6c:6e:0f:e8:4a:52:d8:4b:a4:02:83:bd:ef:c0:
                    5a:4c:74:0c:aa:f7:77:ac:71:5e:ad:5f:e3:cb:88:
                    7b:b7:c9:a5:91:d8:94:3e:2c:f7:db:6b:9c:6d:c3:
                    38:1d:78:d9:72:70:ee:1e:fa:d0:ed:35:44:a9:1d:
                    6d:7c:b4:06:2a:91:ed:63:34:87:6e:90:3f:a0:c5:
                    76:0c:54:d3:94:bd:d2:11:c1:7c:ac:02:72:aa:64:
                    59:02:bb:18:7b:75:13:95:14:08:82:05:3b:1c:4e:
                    b8:65:2d:e8:ae:6f:71:d7:e4:fa:c0:28:ad:57:6d:
                    76:70:76:23:db:48:f7:a1:cc:7d:88:81:37:eb:70:
                    78:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B2:54:84:A5:BD:9E:A3:C0:6B:AB:A6:67:1F:F3:1A:67:60:FF:12
            X509v3 Authority Key Identifier:
                keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/ebJUhKW9nqPAa6umZx_zGmdg_xI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:b487:1a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:d1:2a:5e:c9:41:0e:f9:ef:70:a1:cc:dc:4b:cb:17:e7:94:
         b5:6c:15:a4:f4:1e:a0:7b:0d:9e:9f:85:1f:ef:e9:e9:8a:40:
         e5:61:d2:39:4c:d6:1f:8b:db:c0:35:47:45:13:fd:e8:6a:2f:
         47:87:13:dc:73:35:93:6f:bc:cc:00:b5:bd:7a:25:81:f0:1f:
         23:16:33:c2:81:24:cf:d5:f5:04:f7:11:21:6b:ef:da:0d:3e:
         91:d0:c3:1f:9e:af:03:65:04:e0:3e:7e:59:73:73:84:a5:b0:
         f7:05:92:f0:da:55:08:0f:b2:aa:28:de:1c:86:4b:80:11:16:
         d4:19:4d:6a:eb:62:80:67:60:74:b5:4b:35:f9:18:f0:81:02:
         43:a9:c6:34:f0:da:df:99:35:b7:10:35:31:4e:a8:8c:09:8b:
         b2:ef:dd:46:99:a6:78:1e:cd:fe:25:b7:a3:fb:ac:9f:f4:5a:
         a9:c6:de:f7:d2:67:98:d6:53:63:2e:d4:7f:18:e5:96:b4:dd:
         6f:ab:ba:f9:03:f4:33:ab:95:39:6f:0b:1b:d4:ce:f5:c7:f5:
         8c:e6:0a:6c:c8:f1:96:57:e5:59:8f:ff:b1:ca:eb:9c:dd:0d:
         34:d6:75:0c:93:87:56:14:3b:6c:71:a5:d0:ac:8d:b1:1b:ad:
         7d:b1:c1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:58 2024 by rpki-client on console-fra.rpki-client.org