Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/x-w-p-GYt5v3HqX6cj97WLnEeQI.roa
File:                     x-w-p-GYt5v3HqX6cj97WLnEeQI.roa (raw, json)
Hash identifier:          o0CkJerS5uC/FZDW/3hLO49q1ODsOQ90zw32cvErQlY=
Subject key identifier:   C7:EC:3E:A7:E1:98:B7:9B:F7:1E:A5:FA:72:3F:7B:58:B9:C4:79:02
Certificate issuer:       /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial:       0186BFBBCA746E5D675EEC862E3123357F25
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/x-w-p-GYt5v3HqX6cj97WLnEeQI.roa
Signing time:             Wed 08 Mar 2023 05:40:00 +0000
ROA not before:           Wed 08 Mar 2023 05:40:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200078
IP address blocks:        2a13:b487:1100::/40 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:bf:bb:ca:74:6e:5d:67:5e:ec:86:2e:31:23:35:7f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
        Validity
            Not Before: Mar  8 05:40:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c7ec3ea7e198b79bf71ea5fa723f7b58b9c47902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:ee:fc:84:d0:f2:e1:51:0a:57:10:da:d6:
                    ba:a7:71:5e:65:c2:05:6b:82:19:b1:79:63:6c:48:
                    ca:29:bd:6a:6e:99:b9:11:49:ab:1b:61:c3:6f:9c:
                    bb:d6:fd:40:3c:94:23:f3:2e:70:a2:43:55:d3:2a:
                    02:68:1a:b0:26:c0:98:ba:9a:9a:f8:36:60:9d:43:
                    ff:3c:3d:52:d1:4a:ef:8b:4b:dc:9b:31:55:c3:ff:
                    c2:cc:74:29:f2:cb:5a:a8:5b:ff:6a:e4:b3:1d:47:
                    f6:65:76:20:45:b9:5b:db:21:f2:db:99:7a:cf:14:
                    24:71:86:e4:53:86:28:96:86:e9:9d:fd:de:60:d7:
                    c2:35:3c:1c:d3:e1:02:83:57:ac:3c:9f:f2:51:3b:
                    7d:e2:a1:79:9b:15:4f:c1:c4:7d:62:fe:75:46:87:
                    f7:51:90:47:c8:25:96:c1:a6:94:f6:fd:4f:28:c8:
                    fd:db:12:6f:2a:bf:af:d7:0f:df:1e:88:f0:42:c5:
                    6a:73:82:09:f0:ce:66:9e:ac:7d:8a:2a:8c:bd:35:
                    ab:ec:fc:73:eb:d3:ef:3a:d5:bd:e5:6a:ce:93:cb:
                    15:92:c9:d5:d7:e8:9f:59:52:09:3f:4e:4b:9e:3d:
                    6c:fd:d5:27:59:7f:36:f4:db:4a:31:2c:d3:bd:23:
                    bb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EC:3E:A7:E1:98:B7:9B:F7:1E:A5:FA:72:3F:7B:58:B9:C4:79:02
            X509v3 Authority Key Identifier:
                keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/x-w-p-GYt5v3HqX6cj97WLnEeQI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:b487:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         4d:20:2d:92:6a:18:d1:8a:bf:de:53:e6:e2:1d:4a:76:49:16:
         e5:81:9f:86:09:ed:cf:4f:41:ad:ac:11:bf:9c:f2:ca:c8:6b:
         f8:ac:16:e6:f3:e6:0a:6e:9c:cd:58:be:ea:10:94:53:73:6e:
         7b:f4:19:55:94:7f:27:15:e1:8d:53:82:c5:7b:b0:bb:a6:71:
         6f:c2:f3:74:10:63:93:e4:fb:bd:5f:be:93:df:ba:c1:08:c9:
         c5:ab:5a:1c:c9:e9:86:f5:2a:e4:cb:bc:6e:46:f7:b0:ec:da:
         57:5f:3d:7b:4b:59:a5:f3:5f:e0:21:c1:2a:f6:18:16:48:1f:
         8d:3b:a6:6a:90:7a:aa:db:30:6b:ea:9a:09:36:3d:6d:66:be:
         a9:fd:e1:37:0a:13:8c:38:07:c1:02:12:0a:09:37:a9:2d:eb:
         0c:db:5e:18:b0:dc:60:67:11:af:b9:d6:de:2e:f2:45:61:12:
         f3:a8:ff:9f:da:68:52:b4:60:4d:36:99:b3:ee:46:69:dc:01:
         51:d2:fc:c1:fb:45:be:69:73:65:dc:fd:9d:1b:9e:2b:d0:d3:
         7d:96:2b:f7:d0:d6:da:70:bd:c3:02:e5:c3:1f:76:cb:3b:13:
         65:d8:ca:42:47:e4:82:cd:23:1a:5f:e6:3d:72:88:97:5d:b4:
         a5:08:04:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:58 2024 by rpki-client on console-fra.rpki-client.org