Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/woOrRLoTEx5FZANaHJ8GXxH0kUU.roa
File:                     woOrRLoTEx5FZANaHJ8GXxH0kUU.roa (raw, json)
Hash identifier:          Fa5NCVYAZDMHosgSpys4mhWsm/DRM4LkTSUfO9SGaJA=
Subject key identifier:   C2:83:AB:44:BA:13:13:1E:45:64:03:5A:1C:9F:06:5F:11:F4:91:45
Certificate issuer:       /CN=6f7fa37185a22944a607d9a94f9885997d851b1e
Certificate serial:       018807A28FDD6510E6EE5B28421C65CF6C58
Authority key identifier: 6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/woOrRLoTEx5FZANaHJ8GXxH0kUU.roa
Signing time:             Wed 10 May 2023 21:47:54 +0000
ROA not before:           Wed 10 May 2023 21:47:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198660
IP address blocks:        2001:67c:25b4::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:07:a2:8f:dd:65:10:e6:ee:5b:28:42:1c:65:cf:6c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f7fa37185a22944a607d9a94f9885997d851b1e
        Validity
            Not Before: May 10 21:47:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c283ab44ba13131e4564035a1c9f065f11f49145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:82:08:b1:e9:a4:2f:e3:f7:71:35:5c:c9:86:
                    5a:a3:a8:cc:ed:06:4d:11:40:29:20:05:9b:2c:c8:
                    2f:65:44:d4:9a:6f:d4:c6:f0:24:64:db:a4:b9:b1:
                    86:dc:9a:9d:09:5a:e9:40:a6:5a:e3:84:cf:19:ad:
                    a3:b5:94:84:98:e5:aa:a4:a3:49:5f:42:c1:8f:e3:
                    78:e7:33:c3:d7:6e:e7:c2:64:e8:da:37:6e:6a:23:
                    02:77:5c:df:59:9f:7e:01:3e:83:5b:ad:f6:8b:47:
                    23:da:bc:8b:30:7e:2e:19:29:8d:89:02:d2:e3:ab:
                    f4:22:bb:a8:b0:e2:e8:87:9e:2d:0c:da:d1:bf:c8:
                    42:20:41:6f:0e:00:32:89:d1:c2:60:a7:ba:70:e8:
                    cc:03:1f:7a:74:ea:65:71:73:af:b9:d1:62:48:1a:
                    5c:38:ed:46:72:d5:01:19:31:00:3b:76:fe:91:66:
                    23:e2:ae:28:aa:62:db:42:0d:77:0f:f1:5b:6f:26:
                    33:82:aa:cc:8e:25:70:e1:fc:11:e0:f8:34:eb:ef:
                    7d:4c:51:02:9e:21:5c:a4:af:f3:5c:4b:26:1e:5c:
                    6b:1b:b2:20:34:e3:19:4b:9f:5b:a0:ca:a1:d1:4d:
                    d5:5c:cc:3f:95:b0:bf:ea:d5:a4:41:ce:e7:89:d8:
                    7c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:83:AB:44:BA:13:13:1E:45:64:03:5A:1C:9F:06:5F:11:F4:91:45
            X509v3 Authority Key Identifier:
                keyid:6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/woOrRLoTEx5FZANaHJ8GXxH0kUU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:25b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:e6:a3:e6:38:72:74:fa:df:80:fe:0a:2d:9b:ef:47:28:3d:
         b8:94:00:05:e0:d2:2b:09:67:96:21:b3:b4:f9:b6:70:d3:0e:
         00:b4:f8:f4:56:b2:f7:fb:03:b3:00:38:a3:ec:a4:5b:e0:41:
         98:e4:37:b3:99:e5:9f:f8:49:1b:5d:b3:8b:e0:f9:c4:e9:af:
         3d:10:01:92:8e:17:b1:c9:56:90:fa:4d:cd:c3:fb:3b:16:e1:
         89:2a:04:cf:87:60:c4:5b:fa:84:57:c9:fe:b0:e1:c7:a1:82:
         6c:ec:1c:7f:81:a6:f7:64:c7:35:1a:44:52:30:0c:4e:dd:c6:
         88:0f:e8:04:7d:2c:00:ec:fb:d1:90:3f:1a:c8:bd:ba:ad:07:
         b9:bd:de:3a:00:2c:08:82:4e:98:68:bb:5c:21:61:35:98:8a:
         84:12:4a:38:9b:1e:57:c0:77:45:4e:62:07:98:2f:c4:44:96:
         be:f7:9d:41:d1:87:f0:f5:9b:e3:f1:69:10:7e:72:84:bf:7c:
         e3:1d:48:3b:9d:75:45:1e:d1:dc:4b:87:f4:1f:27:83:5c:1a:
         57:bb:48:0b:1b:9f:1b:9f:c7:9d:34:d5:eb:7a:07:9d:cb:04:
         4f:94:28:7b:33:db:8e:75:0f:86:8f:6a:52:b3:3c:94:de:9f:
         7a:11:70:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org