Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/jXzS0t5_95V13eIjGLh1oU-Za0E.roa
File:                     jXzS0t5_95V13eIjGLh1oU-Za0E.roa (raw, json)
Hash identifier:          tiNEoGUhcJjmzZnz5P9ZdHcWW6OCaUpT5bUsn4++We4=
Subject key identifier:   8D:7C:D2:D2:DE:7F:F7:95:75:DD:E2:23:18:B8:75:A1:4F:99:6B:41
Certificate issuer:       /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial:       0186328E8D17C4885B23F9387A9B9C3B76FD
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/jXzS0t5_95V13eIjGLh1oU-Za0E.roa
Signing time:             Wed 08 Feb 2023 19:44:08 +0000
ROA not before:           Wed 08 Feb 2023 19:44:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47994
IP address blocks:        2a02:88e:c000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Thu 09 Feb 2023 07:16:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:32:8e:8d:17:c4:88:5b:23:f9:38:7a:9b:9c:3b:76:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
        Validity
            Not Before: Feb  8 19:44:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8d7cd2d2de7ff79575dde22318b875a14f996b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:9e:61:6c:26:ea:96:74:6b:d2:1f:74:c9:
                    e9:e0:81:1b:58:a6:b8:fd:39:13:3e:aa:d2:80:c1:
                    3f:44:49:87:21:1e:f9:57:00:0d:40:05:0a:28:23:
                    d9:ed:98:8b:a8:18:4b:92:b3:d0:c4:5b:55:46:12:
                    fc:94:1a:ae:5f:8e:d1:57:6a:59:6c:23:b5:9c:3b:
                    f2:7c:a7:16:c3:82:b7:03:19:51:37:9c:45:3e:b3:
                    4e:ba:4e:69:2a:6a:84:a5:7a:30:59:36:03:dd:56:
                    b9:47:40:a1:ab:23:5b:24:02:74:a8:15:38:08:e0:
                    3b:5f:32:1c:7c:72:03:ea:ff:d1:1b:80:46:da:11:
                    4d:14:40:6e:81:81:4a:ee:e4:38:07:a0:f0:4c:d0:
                    49:c7:9c:7e:10:d8:ef:38:af:e4:21:97:1b:75:cc:
                    ad:71:d6:b7:a7:ce:f3:48:1e:00:2c:e4:5f:fc:eb:
                    b2:51:2e:05:45:f2:4e:6c:79:74:17:48:9c:b6:5a:
                    fd:b7:30:1e:a5:94:19:28:71:4c:60:50:91:fd:be:
                    ae:6a:58:0a:26:fa:25:d3:cd:45:57:2f:60:5c:e3:
                    ba:1e:e8:7c:32:92:7f:de:7d:a0:fa:c6:67:5c:ff:
                    e9:04:fc:2d:da:16:7b:66:0a:47:bf:ef:4d:b3:ae:
                    56:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7C:D2:D2:DE:7F:F7:95:75:DD:E2:23:18:B8:75:A1:4F:99:6B:41
            X509v3 Authority Key Identifier:
                keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/jXzS0t5_95V13eIjGLh1oU-Za0E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:88e:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7b:f3:c7:e7:d7:4a:c4:d6:40:7d:48:fc:3a:ac:58:70:2d:2b:
         62:7f:21:28:02:4b:15:c8:b4:0e:47:12:4b:b6:b6:d2:cb:e0:
         38:f8:d7:21:85:08:70:a0:8c:a3:02:31:9a:44:b1:ed:be:16:
         30:cd:f2:4a:4d:1c:a9:28:ab:3f:45:e6:cb:59:84:eb:22:e1:
         c0:a9:d5:cc:65:49:90:0a:51:95:f2:31:1d:8e:31:3b:03:03:
         38:e9:45:a8:57:88:fa:4d:54:63:8c:59:fc:d9:a0:6b:37:da:
         cc:87:f8:35:39:16:0c:7c:d9:ab:95:93:20:4d:cc:00:b7:46:
         3a:f4:b0:a5:6d:f3:e8:e3:c1:b9:44:17:1c:83:eb:3f:96:02:
         06:34:bb:b4:2f:ca:f3:d2:06:3c:a1:09:29:f0:b5:ce:25:58:
         dc:a1:fc:31:a5:bd:5c:86:91:53:91:34:94:e4:70:63:01:5f:
         5c:4e:17:c9:55:c5:b6:d6:85:01:75:ff:92:05:99:6b:d1:82:
         0c:75:15:13:69:87:36:d5:01:ba:ae:79:b4:da:19:cd:6d:e4:
         30:8a:f3:38:12:ba:98:40:c0:a9:7c:78:ed:bd:df:6e:b4:f5:
         1c:da:07:a1:29:af:e8:1b:4c:33:95:59:a7:b0:30:b8:b9:ed:
         07:73:9a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:58 2024 by rpki-client on console-ams.rpki-client.org