Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/LMAgxKxIUDWEKWoshl8U0VIHME8.roa
File:                     LMAgxKxIUDWEKWoshl8U0VIHME8.roa (raw, json)
Hash identifier:          64k+nNYp2Ds6W9J3SFT1xDmv2lD/egHa8smO5cv4F9c=
Subject key identifier:   2C:C0:20:C4:AC:48:50:35:84:29:6A:2C:86:5F:14:D1:52:07:30:4F
Certificate issuer:       /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial:       0185709507097CE5AF6986952447E37F3AE5
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/LMAgxKxIUDWEKWoshl8U0VIHME8.roa
Signing time:             Mon 02 Jan 2023 03:44:52 +0000
ROA not before:           Mon 02 Jan 2023 03:44:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61272
IP address blocks:        2a02:e00:ffe7::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:95:07:09:7c:e5:af:69:86:95:24:47:e3:7f:3a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=494d7873416510a2fb2346ef342280155522713b
        Validity
            Not Before: Jan  2 03:44:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2cc020c4ac48503584296a2c865f14d15207304f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ae:5d:7d:56:c0:3b:51:57:98:fd:d6:96:7d:
                    14:6a:12:c9:d0:e3:5c:21:23:be:3a:c6:39:b8:88:
                    3c:39:0b:f7:b3:dd:d9:41:09:1b:1a:1f:4c:15:80:
                    a8:6a:c9:4f:f7:2a:53:25:a1:50:71:e7:39:e5:48:
                    14:2a:ea:c1:3b:c6:4b:5e:c2:56:65:6e:c3:e9:1f:
                    e1:6b:41:2d:ae:94:bf:0a:87:85:73:54:52:38:fd:
                    b1:ae:23:cf:e4:c1:43:e3:a4:4f:23:6b:46:24:a4:
                    08:8c:08:a5:8b:df:2b:bf:c6:fb:8b:6f:3f:2f:ca:
                    fc:92:8b:cb:4a:b9:38:86:94:b8:55:91:3b:9f:77:
                    aa:6b:a2:29:56:51:f5:d2:17:fc:ef:a8:83:9e:7f:
                    0d:f7:b3:60:d7:ea:4a:a4:29:8f:93:2a:f5:db:a3:
                    92:a6:8a:df:76:3e:e9:e4:c6:0e:d5:31:bd:97:cc:
                    03:e2:f4:39:66:7c:0e:cb:38:ea:22:73:80:83:63:
                    30:aa:80:52:40:22:06:c4:28:8e:98:b3:bc:19:45:
                    b4:77:99:4b:dd:cb:69:11:df:c2:59:19:bd:c7:b1:
                    27:9e:27:0f:7a:ba:68:b0:90:b3:28:09:4f:44:5b:
                    74:72:0e:87:f3:23:22:7a:68:ed:81:cb:27:e3:dc:
                    db:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C0:20:C4:AC:48:50:35:84:29:6A:2C:86:5F:14:D1:52:07:30:4F
            X509v3 Authority Key Identifier:
                keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/LMAgxKxIUDWEKWoshl8U0VIHME8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:e00:ffe7::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:4a:0d:96:97:36:5b:ee:4e:8b:ed:dc:48:e8:7d:c7:d7:b6:
         d2:83:88:62:8e:88:a8:75:79:c2:13:b7:5b:12:90:c9:8b:9d:
         12:d2:9f:35:af:dd:61:07:9f:13:74:57:96:7f:0a:48:c5:fd:
         05:20:54:41:a2:be:37:58:9e:11:00:b1:07:b4:80:42:b9:cc:
         8a:62:40:f9:c1:d4:10:98:58:48:8c:99:c1:51:f4:0d:17:e7:
         6d:65:6b:a2:47:71:1f:08:0d:3c:13:ec:94:7c:dc:53:1f:b5:
         b0:e5:3e:7b:57:22:52:d7:d6:16:89:1d:6e:b8:9f:de:63:41:
         63:70:1f:cd:f0:eb:9c:67:7f:82:11:72:38:56:8d:63:87:35:
         ee:28:95:4b:0f:6c:c9:40:ae:8a:f7:84:22:d7:a4:b8:68:8b:
         5b:87:82:1e:d3:c0:36:e4:ef:e8:47:1e:42:36:8b:94:e7:18:
         95:b3:6f:d7:d5:3c:d2:ef:2f:0c:b6:5f:74:52:21:c4:bb:bd:
         ed:3a:57:41:d7:2a:df:ac:75:75:a9:c9:ee:9a:1b:91:13:22:
         4e:27:f3:4e:ba:b6:7b:e0:76:6a:c4:df:9a:b5:7b:a8:84:e8:
         a3:c1:44:89:82:ba:6d:a9:1e:51:69:17:67:58:3c:bc:54:86:
         54:7a:b3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:38 2024 by rpki-client on console-fra.rpki-client.org