Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/GngekwC93JODGUTGI6min22bEk0.roa
File:                     GngekwC93JODGUTGI6min22bEk0.roa (raw, json)
Hash identifier:          mGHyFUX9VgKYsK5gce/p5ZixFCn3QgVCR/ilGFzFmic=
Subject key identifier:   1A:78:1E:93:00:BD:DC:93:83:19:44:C6:23:A9:A2:9F:6D:9B:12:4D
Certificate issuer:       /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial:       01856CF87DB49747B6F9BEF0798F6AB8CAD6
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/GngekwC93JODGUTGI6min22bEk0.roa
Signing time:             Sun 01 Jan 2023 10:55:02 +0000
ROA not before:           Sun 01 Jan 2023 10:55:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211776
IP address blocks:        2a07:22c1:34::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:f8:7d:b4:97:47:b6:f9:be:f0:79:8f:6a:b8:ca:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
        Validity
            Not Before: Jan  1 10:55:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1a781e9300bddc93831944c623a9a29f6d9b124d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:73:e1:7b:83:7a:27:0c:98:55:b7:2a:50:98:
                    66:01:34:e3:55:70:99:cd:5c:d8:33:fc:9c:f7:5d:
                    df:2c:c5:8c:bb:f6:51:0d:32:f2:cc:25:99:8d:ae:
                    4c:51:6b:4d:a4:f7:7b:92:c5:c8:de:94:87:4d:a4:
                    5d:ea:7e:1e:b3:13:68:65:cf:2a:cb:ff:c4:03:10:
                    2a:de:60:ba:20:7e:2c:0e:58:d9:90:b4:9f:3c:8b:
                    ab:1e:e2:be:b0:30:43:5b:22:05:bd:d7:d2:14:92:
                    fa:57:4d:c5:72:83:ea:3b:51:cd:a9:ef:be:2f:2c:
                    e9:0a:f7:5e:48:6e:53:3f:a4:9d:a7:5f:67:98:3e:
                    15:72:b7:58:f4:eb:18:1a:3d:3f:17:74:b2:67:83:
                    c7:3a:a5:3b:a0:1f:11:61:61:3b:de:53:91:42:0d:
                    74:1e:70:2d:05:7e:87:b1:4d:89:a2:f4:8d:f3:82:
                    97:f1:01:ea:5c:a8:08:27:0f:66:3b:38:06:73:23:
                    20:4a:4b:aa:e3:e5:b6:44:c0:7f:50:79:6b:1e:02:
                    2f:98:7c:59:61:59:be:4d:ad:9d:3c:8f:e3:e2:d1:
                    cf:74:4e:cd:ae:10:7e:b0:ff:c4:81:95:fd:14:ac:
                    f2:64:fa:6c:3e:95:58:07:0c:b5:66:7d:b8:5a:3a:
                    d9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:78:1E:93:00:BD:DC:93:83:19:44:C6:23:A9:A2:9F:6D:9B:12:4D
            X509v3 Authority Key Identifier:
                keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/GngekwC93JODGUTGI6min22bEk0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:22c1:34::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:5e:cb:dc:a8:a9:e9:7c:92:50:8e:83:9c:c8:48:97:ff:3b:
         cd:df:a2:69:e4:64:c8:75:8c:4b:f6:ba:ee:eb:d0:18:91:ad:
         21:89:0e:f2:3e:91:b2:06:0e:53:ee:ad:0c:2c:f6:10:3b:23:
         40:54:c7:47:7d:80:fc:92:bc:f4:d5:92:ac:89:46:d5:65:52:
         09:7a:eb:41:0f:d9:bf:d0:9b:3d:65:80:57:05:ee:4f:a4:2b:
         b0:9e:b3:87:6e:bb:21:b5:d4:8e:bf:a0:46:17:eb:5b:91:7f:
         f7:36:0f:fa:53:87:db:b4:68:51:f9:f6:c9:0d:19:39:69:41:
         72:e6:db:18:e2:61:69:95:73:c3:b4:17:9e:31:90:c5:2e:3a:
         32:81:d5:ba:7d:22:e0:e8:37:02:73:6d:76:af:c5:d2:ee:e2:
         04:4b:d1:c6:24:c2:97:f6:04:3d:be:93:5d:d5:2b:83:e6:96:
         80:78:81:b5:1c:79:bc:6d:82:32:cc:7a:91:69:a3:0f:77:4b:
         fc:90:e8:8f:e2:0f:34:95:ef:94:12:26:66:8f:7a:90:6b:89:
         2e:1f:45:21:f6:6f:4d:8d:36:62:ce:c9:7c:b8:f4:57:a5:d1:
         48:15:81:25:bd:8a:8d:ad:a7:61:22:5e:02:02:16:98:c2:38:
         1b:b2:47:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:35 2024 by rpki-client on console-ams.rpki-client.org