Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/73xva4zWsXZxb2H9aa74p34SUK8.roa
File:                     73xva4zWsXZxb2H9aa74p34SUK8.roa (raw, json)
Hash identifier:          LP9okXA5dvWKMytZmpMb9FMSaHjoq0xW4GIBgEuE0ag=
Subject key identifier:   EF:7C:6F:6B:8C:D6:B1:76:71:6F:61:FD:69:AE:F8:A7:7E:12:50:AF
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       0185711E6F08185EBD7E105DA69B3888089C
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/73xva4zWsXZxb2H9aa74p34SUK8.roa
Signing time:             Mon 02 Jan 2023 06:14:57 +0000
ROA not before:           Mon 02 Jan 2023 06:14:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209861
IP address blocks:        2a0c:b641:80::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:1e:6f:08:18:5e:bd:7e:10:5d:a6:9b:38:88:08:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  2 06:14:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ef7c6f6b8cd6b176716f61fd69aef8a77e1250af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9e:18:67:e6:e8:9d:9b:a1:3f:88:7b:b9:52:
                    75:f8:fd:f8:04:66:47:b1:53:da:bf:48:45:3f:4b:
                    0e:56:9a:3d:24:f3:26:71:d2:f4:cf:bc:b8:e9:6e:
                    4a:86:86:83:39:5d:a6:78:fa:67:f3:84:c8:05:ab:
                    39:d8:36:aa:68:84:f5:7e:26:6c:3d:23:ff:71:66:
                    85:17:c0:82:91:b7:b4:0d:8b:b0:ea:b1:3c:23:65:
                    c0:2e:4a:11:51:8d:ba:bb:45:99:db:eb:c3:48:c8:
                    af:41:97:97:a9:9b:c5:dc:de:82:f6:df:52:1b:fe:
                    5e:ce:d4:83:46:af:81:73:85:b8:60:37:68:6a:2f:
                    91:b0:a5:ff:af:e1:ad:d8:d2:a1:45:1b:a0:b4:e2:
                    ee:4c:c9:fc:03:b4:31:a9:54:cb:35:a8:9e:8e:e0:
                    a9:b4:d3:c7:8f:24:d8:e6:f3:56:e4:6c:02:52:e5:
                    b3:36:da:57:de:c1:35:ba:ad:9c:52:62:40:ab:89:
                    aa:e5:80:55:a0:8a:d4:19:94:83:86:2e:cf:fd:9d:
                    65:52:5c:3a:7f:ea:ab:73:42:3a:0e:d9:19:0a:3a:
                    b3:09:13:cd:1b:7d:5a:c7:54:5a:03:a8:62:72:ac:
                    83:34:0b:11:95:c1:3d:6e:ea:11:da:b0:b1:4e:9b:
                    d6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7C:6F:6B:8C:D6:B1:76:71:6F:61:FD:69:AE:F8:A7:7E:12:50:AF
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/73xva4zWsXZxb2H9aa74p34SUK8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:80::/44

    Signature Algorithm: sha256WithRSAEncryption
         67:54:f0:3b:7d:68:53:dc:c1:4c:c2:93:48:46:c8:8a:74:d9:
         f3:14:43:a7:c6:84:86:64:5e:4f:7f:cd:b5:06:9c:e6:6a:20:
         b8:93:60:78:08:2f:df:7d:8f:0c:72:68:8f:ed:16:66:73:d2:
         df:e2:09:30:3d:58:30:6e:88:6b:00:78:d8:3b:f8:9a:8e:ea:
         74:95:3f:11:7a:08:f3:3e:a3:f3:3a:83:29:80:c4:62:2d:01:
         45:54:d4:34:2d:1b:cf:61:02:6f:4e:d8:5a:e7:b9:eb:8e:09:
         f5:91:40:2f:b1:b9:57:3b:19:7c:c3:16:da:d5:a0:ba:77:0c:
         ff:13:a3:af:a2:04:7b:2c:4e:fe:67:3a:6a:46:6d:48:eb:19:
         a2:c7:7f:9b:73:c2:9b:b3:63:a9:24:db:e4:6d:53:ed:8e:6c:
         24:0c:bf:8c:ee:ee:26:6d:af:a3:b9:df:67:98:ef:40:fc:f4:
         3d:c8:76:41:f3:b9:ed:08:bb:db:75:ad:54:c5:e0:0f:25:6c:
         fd:1c:9e:4d:8b:6b:cc:fa:af:8b:c0:f9:7b:12:c3:1d:07:ef:
         d8:18:85:e4:f6:b3:d3:ef:0b:a9:80:6d:cf:ea:3e:87:93:1b:
         66:b6:70:a2:11:f7:98:1f:0a:ff:49:53:c0:f3:29:f7:a8:a6:
         19:db:0b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:06 2024 by rpki-client on console-fra.rpki-client.org