Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kSLjaHByWSJuGtq9RljeVzep8bE.roa
File:                     kSLjaHByWSJuGtq9RljeVzep8bE.roa (raw, json)
Hash identifier:          tVVDMYia3MDIUg60v8WXj62oiIbxcwRBXm4Kb3Nn728=
Subject key identifier:   91:22:E3:68:70:72:59:22:6E:1A:DA:BD:46:58:DE:57:37:A9:F1:B1
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       0186E5823EC4B6EA03944408BDD0A9F4CE5C
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kSLjaHByWSJuGtq9RljeVzep8bE.roa
Signing time:             Wed 15 Mar 2023 13:42:43 +0000
ROA not before:           Wed 15 Mar 2023 13:42:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199426
IP address blocks:        2a0c:b641:9b0::/44 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e5:82:3e:c4:b6:ea:03:94:44:08:bd:d0:a9:f4:ce:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Mar 15 13:42:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9122e368707259226e1adabd4658de5737a9f1b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fc:78:96:ce:f0:03:c2:6b:47:76:c1:0f:77:
                    a7:0f:53:34:80:9b:1f:d5:ea:50:1d:3d:0b:ae:a9:
                    09:aa:83:b6:c0:79:93:0c:fa:d8:55:8a:63:e9:b9:
                    31:81:6f:86:4f:6e:43:d2:79:e4:cb:0e:d3:a6:69:
                    f0:c9:cb:e8:25:8f:8d:cd:92:fd:be:39:ce:88:f4:
                    93:56:69:45:81:c4:3d:73:d9:4f:2a:a6:20:45:a1:
                    1a:29:3d:4b:c5:42:e1:44:dc:b4:92:f2:16:7a:22:
                    e3:35:58:cc:f6:ac:f9:c5:4c:32:f6:f2:79:d0:8d:
                    60:c2:be:cb:7d:e8:b0:0c:de:16:ef:8a:b3:4c:84:
                    36:b8:bd:ad:a0:f0:10:11:0c:22:fc:86:90:41:e0:
                    55:9e:e1:34:8e:80:f3:5f:60:a9:76:92:da:d9:68:
                    bb:c3:9a:86:95:5d:aa:65:b6:d1:6f:31:99:ba:d0:
                    f4:f3:19:31:b0:61:bc:af:a7:4b:af:2c:00:df:f3:
                    f6:9f:d9:0f:37:1a:e2:1e:2a:11:2e:6e:4d:ff:c5:
                    6a:a0:7a:2d:0f:e5:ad:6e:22:3e:eb:0f:61:34:33:
                    5c:4e:11:50:2a:a6:c4:4b:fd:f5:f7:84:6e:8f:cb:
                    d6:76:7c:9f:39:1d:e4:d1:c0:9b:78:87:8f:09:b9:
                    01:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:22:E3:68:70:72:59:22:6E:1A:DA:BD:46:58:DE:57:37:A9:F1:B1
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kSLjaHByWSJuGtq9RljeVzep8bE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:9b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         0f:06:3a:b2:df:55:17:ab:49:47:f7:9f:cb:a6:53:f5:c7:27:
         21:54:b3:6b:d0:ff:e7:14:db:fc:e3:60:b1:df:8f:de:e5:ef:
         16:d8:a2:f0:86:f8:a2:da:e9:38:da:c7:e5:07:19:2e:1a:4f:
         5a:27:09:a1:e2:22:74:9e:f7:ef:9d:1b:4d:f4:b4:7c:6d:46:
         4a:67:0a:2e:fb:e7:44:53:09:39:be:61:af:43:42:6a:8a:63:
         e2:93:5d:30:0a:bb:71:bc:7f:30:1d:91:0a:ef:3d:1a:34:14:
         a1:e9:4f:50:f3:0a:b1:51:7b:cc:32:79:5d:ad:61:5e:57:2c:
         88:eb:6e:b7:b7:81:8b:67:ed:8b:4f:5f:06:eb:40:90:51:6b:
         21:cd:ce:e9:a0:24:56:3e:73:65:29:7f:7c:53:bf:90:c1:d3:
         6c:38:80:be:f3:9f:74:d4:01:f5:f8:cb:66:f2:93:13:b4:e7:
         96:a0:85:1c:bf:5f:01:73:6e:af:d9:06:10:40:53:30:3c:d8:
         c1:2f:24:0f:52:ff:6f:1d:f5:9a:2c:d4:df:51:8b:a8:18:64:
         98:29:49:c7:2d:58:9b:a1:ec:8d:f2:df:38:5d:a0:c5:36:c5:
         10:1f:4f:92:49:8b:02:b7:1a:35:89:67:a7:77:aa:94:e1:4a:
         c6:fb:5f:1a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYblgj7EtuoDlEQIvdCp9M5cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjMwMzE1MTM0MjQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTIyZTM2ODcwNzI1OTIyNmUxYWRhYmQ0NjU4ZGU1NzM3YTlmMWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfx4ls7wA8JrR3bBD3enD1M0gJsf
1epQHT0LrqkJqoO2wHmTDPrYVYpj6bkxgW+GT25D0nnkyw7TpmnwycvoJY+NzZL9
vjnOiPSTVmlFgcQ9c9lPKqYgRaEaKT1LxULhRNy0kvIWeiLjNVjM9qz5xUwy9vJ5
0I1gwr7LfeiwDN4W74qzTIQ2uL2toPAQEQwi/IaQQeBVnuE0joDzX2CpdpLa2Wi7
w5qGlV2qZbbRbzGZutD08xkxsGG8r6dLrywA3/P2n9kPNxriHioRLm5N/8VqoHot
D+WtbiI+6w9hNDNcThFQKqbES/3194Ruj8vWdnyfOR3k0cCbeIePCbkByQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJEi42hwclkibhravUZY3lc3qfGxMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEva1NMamFIQnlXU0p1R3RxOVJsamVWemVwOGJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQmw
MA0GCSqGSIb3DQEBCwUAA4IBAQAPBjqy31UXq0lH95/LplP1xychVLNr0P/nFNv8
42Cx34/e5e8W2KLwhvii2uk42sflBxkuGk9aJwmh4iJ0nvfvnRtN9LR8bUZKZwou
++dEUwk5vmGvQ0JqimPik10wCrtxvH8wHZEK7z0aNBSh6U9Q8wqxUXvMMnldrWFe
VyyI6263t4GLZ+2LT18G60CQUWshzc7poCRWPnNlKX98U7+QwdNsOIC+85901AH1
+Mtm8pMTtOeWoIUcv18Bc26v2QYQQFMwPNjBLyQPUv9vHfWaLNTfUYuoGGSYKUnH
LViboeyN8t84XaDFNsUQH0+SSYsCtxo1iWend6qU4UrG+18a
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:38 2024 by rpki-client on console-ams.rpki-client.org