Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/AEgWuiJeMKU-oOg5wEjaGZewWvA.roa
File:                     AEgWuiJeMKU-oOg5wEjaGZewWvA.roa (raw, json)
Hash identifier:          xy87Ymv+HTMBoz71Eoi4NPSnKFZj4F48zKhvhOVfqg4=
Subject key identifier:   00:48:16:BA:22:5E:30:A5:3E:A0:E8:39:C0:48:DA:19:97:B0:5A:F0
Certificate issuer:       /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial:       019033F6DCDAE9B36E20C15CFA06BE5881BE
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/AEgWuiJeMKU-oOg5wEjaGZewWvA.roa
Signing time:             Thu 20 Jun 2024 04:45:34 +0000
ROA not before:           Thu 20 Jun 2024 04:45:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209221
IP address blocks:        2a0d:6f80:1f73::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 04:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:33:f6:dc:da:e9:b3:6e:20:c1:5c:fa:06:be:58:81:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
        Validity
            Not Before: Jun 20 04:45:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=004816ba225e30a53ea0e839c048da1997b05af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fe:97:99:43:c4:fe:eb:a0:76:2f:de:55:95:
                    f1:b5:6e:60:8e:8c:99:ed:6d:71:4d:62:70:97:0d:
                    f9:c5:f5:19:40:96:b4:30:40:de:b7:5f:80:65:7b:
                    83:8b:c0:37:74:80:47:23:8f:3b:12:fc:72:26:85:
                    e7:2c:62:24:f2:0f:4e:b5:c9:54:46:b0:ab:85:e1:
                    bf:da:a9:42:38:ef:9b:32:b3:c9:d7:26:0b:54:7e:
                    4f:65:40:42:b0:3f:2e:38:d3:37:b1:48:79:92:b1:
                    77:22:43:82:02:4b:c0:2c:16:2d:74:34:d8:cf:08:
                    fd:cc:97:10:1b:8f:a3:c8:d6:af:f4:d4:93:85:42:
                    f9:f9:47:e1:9d:a1:75:99:49:29:62:d1:8b:b0:34:
                    22:04:9d:5c:2a:36:ea:cc:41:5b:6c:9d:ba:b2:07:
                    5f:73:69:f8:33:52:ff:28:a5:d5:07:46:bf:34:3b:
                    cd:a0:1b:51:84:bb:a3:4c:fb:6b:ff:72:b2:2c:15:
                    c5:f7:68:0f:9d:ef:a1:84:e6:5d:69:17:f2:60:e6:
                    62:2d:84:b0:c8:c8:1a:41:3d:68:57:2d:30:4d:a0:
                    5d:08:e2:a4:bb:e4:7a:ec:fc:2a:05:20:9c:c2:95:
                    79:42:eb:53:dd:41:e1:45:d7:07:c7:5d:4c:16:79:
                    2c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:48:16:BA:22:5E:30:A5:3E:A0:E8:39:C0:48:DA:19:97:B0:5A:F0
            X509v3 Authority Key Identifier:
                keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/AEgWuiJeMKU-oOg5wEjaGZewWvA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:6f80:1f73::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:27:23:56:55:a3:b4:5a:ed:81:cb:80:21:55:2b:99:33:d9:
         8c:fe:e3:68:36:d2:73:66:57:0d:e0:77:af:b3:bc:bd:8a:d8:
         d1:33:04:e1:47:e2:4c:e2:a0:68:34:24:8a:d1:ac:57:68:58:
         60:a1:40:b0:fc:66:b4:9a:3d:00:a8:c0:f7:b7:06:c6:59:96:
         8a:1e:e5:a4:8e:1f:f2:2b:d1:78:4e:52:dd:4b:80:15:a6:8b:
         e0:05:b8:52:ef:41:85:c5:bd:ef:2c:f1:0c:c4:e8:ca:0d:c5:
         f9:11:0e:92:35:53:49:d2:cc:18:d1:af:d3:2b:75:7a:df:d3:
         35:c3:1c:97:e8:6f:2e:44:46:eb:66:9f:31:08:a5:2c:70:06:
         3e:18:61:32:22:cd:71:a6:87:21:4b:69:9a:d1:a8:ab:73:90:
         4d:a6:38:26:45:41:41:42:ec:ac:07:fe:0c:b6:ed:bc:a7:48:
         05:7c:49:bc:ba:63:83:a6:1c:55:30:7e:eb:c4:44:4c:e5:bc:
         c6:0c:b0:ad:36:de:1e:79:8d:c2:70:75:bd:56:70:64:17:34:
         14:3a:2a:8a:23:fd:6f:bd:5d:72:3a:fc:e4:ce:b3:26:18:d6:
         fd:93:02:96:55:0d:4d:4d:62:27:75:d1:30:c1:eb:ea:50:67:
         12:09:41:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 09:29:21 2024 by rpki-client on console-ams.rpki-client.org