Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/0phs3uj5szaDLLknupSALRs2vU0.roa
File:                     0phs3uj5szaDLLknupSALRs2vU0.roa (raw, json)
Hash identifier:          UPVNSBOM90OIaon6lpd2KLVFbqgIxlIBFvnmodPXTOo=
Subject key identifier:   D2:98:6C:DE:E8:F9:B3:36:83:2C:B9:27:BA:94:80:2D:1B:36:BD:4D
Certificate issuer:       /CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Certificate serial:       0185701512AD25B0EF10E36F266E1ED3B679
Authority key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/0phs3uj5szaDLLknupSALRs2vU0.roa
Signing time:             Mon 02 Jan 2023 01:25:07 +0000
ROA not before:           Mon 02 Jan 2023 01:25:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62392
IP address blocks:        2001:67c:1810::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:35:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:15:12:ad:25:b0:ef:10:e3:6f:26:6e:1e:d3:b6:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
        Validity
            Not Before: Jan  2 01:25:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d2986cdee8f9b336832cb927ba94802d1b36bd4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ca:45:1d:6d:49:50:64:c7:27:2b:9e:65:69:
                    6f:22:14:fe:4f:e0:16:ec:c8:1f:e8:66:ab:c8:67:
                    54:d9:51:00:44:cd:65:ee:f3:8f:c1:61:17:8e:16:
                    00:27:06:bb:dc:79:39:fb:34:a8:99:ae:97:19:f7:
                    21:9f:36:29:ba:42:29:3f:13:77:05:53:23:72:97:
                    91:46:f2:e5:97:6f:e8:52:61:57:cf:ba:01:46:97:
                    a9:ba:16:db:b5:25:60:38:2c:9e:31:f4:86:c0:1c:
                    0e:b9:78:3a:36:e4:76:33:29:33:8d:6c:bc:36:15:
                    26:c0:a7:cf:5a:79:89:71:fc:b6:c7:62:2f:8e:3b:
                    b2:ef:b2:b3:3a:97:d7:38:48:44:7b:29:88:a1:5b:
                    46:68:84:a9:25:35:18:d6:c2:cd:86:69:2e:8b:ce:
                    09:61:ec:a2:df:a9:4e:75:3f:b1:af:a3:6a:91:f8:
                    94:93:1b:bf:33:9f:1f:26:4c:ba:a9:77:e9:6c:9c:
                    f5:a6:a0:b6:f2:5c:9a:c0:21:41:79:35:63:19:23:
                    6f:b0:d1:31:6a:8a:f8:67:8c:b1:16:8e:e4:cd:5c:
                    4f:e7:c6:4e:34:60:2c:8c:73:83:7c:ea:3c:ef:81:
                    f6:dd:c4:74:30:31:50:6c:21:f8:38:ee:9e:3f:92:
                    0b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:98:6C:DE:E8:F9:B3:36:83:2C:B9:27:BA:94:80:2D:1B:36:BD:4D
            X509v3 Authority Key Identifier:
                keyid:77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/0phs3uj5szaDLLknupSALRs2vU0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1810::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:1a:55:57:d4:55:2b:1e:7a:47:98:ba:19:49:78:15:77:be:
         6d:1a:56:a2:12:45:e4:ec:52:24:ff:5a:e8:60:7c:c6:e0:ab:
         2d:da:ce:c3:7b:f1:e4:8e:f4:19:38:a2:e7:a7:92:88:a3:bf:
         4c:08:61:b2:4f:6f:9b:68:e9:29:f7:ec:3a:53:d2:59:09:de:
         23:bb:56:52:23:68:cd:3b:51:d1:72:ba:a5:d9:df:c0:71:33:
         d7:85:03:09:21:bb:17:32:ea:76:c5:d4:33:9c:e6:14:3f:8a:
         28:15:58:a4:e8:31:47:13:8c:b9:01:e5:fd:88:e6:b4:50:15:
         87:32:63:df:fc:c2:82:4c:f7:40:a6:cb:04:11:3e:82:36:8c:
         a1:f2:f4:8f:7a:44:2d:8b:b8:5c:4e:c4:2a:63:88:d3:f9:f3:
         ed:9e:34:d7:fa:cc:71:d2:f7:74:a1:87:91:3f:0c:9b:c6:f9:
         e2:30:33:2e:97:07:12:b0:36:dd:93:99:dd:9d:7f:50:98:fa:
         22:81:6f:3b:20:76:46:0e:70:26:eb:ea:b1:b9:3f:5a:01:cb:
         0a:ea:5b:46:23:a2:01:e6:a6:2d:74:ad:ba:db:2b:75:2f:d1:
         48:74:8f:56:ee:86:77:79:7a:5a:28:51:91:d2:01:10:00:53:
         ea:e1:53:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:29 2024 by rpki-client on console-ams.rpki-client.org