Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/gJmah20XHC2tpS9ZmTRcTZIuIX4.roa
File:                     gJmah20XHC2tpS9ZmTRcTZIuIX4.roa (raw, json)
Hash identifier:          qGukCLE8vC8NoVjf01H7DQ6VuPtcfncSryOvc19lwNI=
Subject key identifier:   80:99:9A:87:6D:17:1C:2D:AD:A5:2F:59:99:34:5C:4D:92:2E:21:7E
Certificate issuer:       /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial:       0185712764E6FFEEAE9ADB94D045F574E638
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/gJmah20XHC2tpS9ZmTRcTZIuIX4.roa
Signing time:             Mon 02 Jan 2023 06:24:45 +0000
ROA not before:           Mon 02 Jan 2023 06:24:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205154
IP address blocks:        2a12:efc0::/29 maxlen: 29

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:27:64:e6:ff:ee:ae:9a:db:94:d0:45:f5:74:e6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
        Validity
            Not Before: Jan  2 06:24:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=80999a876d171c2dada52f5999345c4d922e217e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:36:59:38:03:de:bb:88:a6:17:ff:50:e4:da:
                    0b:cd:e7:0f:27:ad:bb:58:1b:6f:86:a7:21:9d:a9:
                    c8:75:c8:bc:f3:d5:b8:45:2d:05:94:e2:5e:8b:2e:
                    74:52:57:ac:af:43:64:f3:a1:43:a9:73:02:38:fb:
                    04:8c:ff:78:be:a8:19:64:11:13:38:2f:82:07:e9:
                    95:69:0e:33:c6:0c:83:6d:84:84:b8:c8:b2:f5:74:
                    b4:3d:de:c6:c9:24:d3:51:0e:41:fa:70:f5:bb:ef:
                    43:90:50:0c:43:73:d5:e9:2b:e3:2b:da:f1:85:07:
                    51:e8:59:cb:7b:61:0f:cd:e5:10:cf:a7:03:bd:a8:
                    5d:69:68:3a:a7:17:b6:23:5f:fa:c4:e8:02:66:25:
                    f1:f3:7f:38:ba:8d:9b:e3:c3:9c:c4:75:86:e8:e4:
                    cf:63:06:e9:2c:82:30:d0:be:02:fd:9d:70:de:a8:
                    65:44:71:2d:8c:b1:5a:b3:5f:3a:0e:5a:a2:73:01:
                    6f:08:84:b0:7d:e8:bb:b2:05:89:63:8f:b4:4d:a5:
                    bc:c7:f7:f3:3e:94:f3:00:07:44:e7:d1:95:84:2f:
                    e8:4a:cb:27:74:7c:8c:4b:a3:fe:9f:d3:37:1e:d1:
                    22:f7:75:e6:69:ec:b3:de:b5:05:17:fc:c6:bc:c3:
                    c5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:99:9A:87:6D:17:1C:2D:AD:A5:2F:59:99:34:5C:4D:92:2E:21:7E
            X509v3 Authority Key Identifier:
                keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/gJmah20XHC2tpS9ZmTRcTZIuIX4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:efc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         7f:38:2e:a4:ec:5b:7a:c4:3f:aa:7c:f4:da:bf:0b:73:ff:ef:
         59:70:c8:fa:7e:0e:c4:9e:24:6b:85:e6:d5:54:6c:f8:b7:3d:
         ca:78:d4:73:68:9f:0c:af:2a:12:74:71:f6:2a:e3:ac:8e:46:
         78:47:8c:87:10:bf:9c:b3:cc:9e:ab:55:6f:ec:20:a5:73:48:
         c1:72:50:a2:ea:71:12:79:9d:86:18:e1:6d:ea:31:f1:62:29:
         86:34:b4:6d:15:94:1d:5f:39:96:17:01:50:df:94:ee:7d:fc:
         2e:b3:bd:6e:da:15:a2:02:92:18:52:e0:04:5f:27:f7:7d:0a:
         16:85:ff:ec:31:da:db:b3:0d:cb:11:62:66:d3:88:d7:f0:95:
         b6:0c:5c:cf:43:26:8a:0d:e6:b7:4a:8e:ec:f6:66:80:6b:2d:
         5b:1e:86:6b:7e:5c:0e:74:c1:ca:f6:7a:a6:5f:8f:17:b6:75:
         74:0b:0b:78:7c:6c:04:11:ff:b0:70:8c:37:99:3c:c8:9d:15:
         c6:31:67:3b:e1:1e:bf:22:48:a1:26:56:3e:ab:36:19:6c:b0:
         77:dd:f6:55:5f:46:36:af:fd:2f:ef:6a:c8:b5:15:70:61:aa:
         17:80:d0:31:8e:fa:26:29:6a:5f:e1:f0:e5:aa:d3:e7:62:2d:
         89:d7:3b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:52 2024 by rpki-client on console-ams.rpki-client.org