Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/xq_DzcJKJyL_QOXEcDevkfhNNPI.roa
File:                     xq_DzcJKJyL_QOXEcDevkfhNNPI.roa (raw, json)
Hash identifier:          jzUsWD8ZcpEQ3kYgHeVt63pPeqv0U4REF8CxebZQVqk=
Subject key identifier:   C6:AF:C3:CD:C2:4A:27:22:FF:40:E5:C4:70:37:AF:91:F8:4D:34:F2
Certificate issuer:       /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial:       018899FA364A644F9DFAC537C2D1E85A6089
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/xq_DzcJKJyL_QOXEcDevkfhNNPI.roa
Signing time:             Thu 08 Jun 2023 07:48:11 +0000
ROA not before:           Thu 08 Jun 2023 07:48:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     5411
IP address blocks:        2a03:9b80:4000::/34 maxlen: 34
                          2a03:9b80:6000::/35 maxlen: 35
                          2a03:9b80:4000::/35 maxlen: 35

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:99:fa:36:4a:64:4f:9d:fa:c5:37:c2:d1:e8:5a:60:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
        Validity
            Not Before: Jun  8 07:48:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c6afc3cdc24a2722ff40e5c47037af91f84d34f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b7:60:5f:14:ae:90:d6:d1:2c:23:dc:c0:f3:
                    ad:ca:ad:e8:8e:5f:0e:fd:6a:48:69:a3:8f:91:40:
                    72:58:6f:d6:d8:6e:e8:86:f7:81:09:28:01:56:db:
                    b0:38:ee:95:ed:f0:20:12:55:6d:29:44:b5:d0:c8:
                    45:43:43:21:47:92:2b:a2:a4:98:dd:24:16:8a:f2:
                    40:53:46:cd:66:af:d8:d9:c9:62:1e:47:9d:ea:24:
                    ad:0d:c3:12:87:7a:93:a1:0a:1a:bf:4f:67:b5:e5:
                    a8:eb:84:d2:13:9d:e0:84:4f:d2:56:f3:1c:06:f7:
                    2f:00:f7:5c:10:92:c0:df:39:65:83:ae:7f:01:16:
                    ac:86:70:aa:3f:45:de:67:ba:83:be:05:d9:5e:07:
                    b9:48:4e:71:a9:0e:9d:19:91:24:98:da:ec:9f:83:
                    d2:e8:50:fa:4a:13:30:4d:c0:aa:31:49:af:79:3e:
                    1a:3c:b7:d4:f7:7e:d4:8c:50:03:d8:97:27:2e:a8:
                    f1:76:cd:38:6b:17:bc:6a:6d:47:24:ad:33:8d:e0:
                    18:5d:10:e5:98:a5:19:c5:13:0d:d8:68:25:78:9d:
                    0b:06:e2:7d:9d:cc:74:60:0c:24:88:fd:01:77:de:
                    70:ee:71:44:e2:a7:2a:08:a6:93:ec:5f:18:c7:d2:
                    20:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AF:C3:CD:C2:4A:27:22:FF:40:E5:C4:70:37:AF:91:F8:4D:34:F2
            X509v3 Authority Key Identifier:
                keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/xq_DzcJKJyL_QOXEcDevkfhNNPI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:9b80:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8f:ec:46:d0:09:44:c6:63:b3:1a:83:da:4b:e8:3f:2c:14:d3:
         95:7a:66:f1:b1:c4:cb:39:9c:99:ab:8c:e2:97:ce:b6:4e:94:
         2d:44:ce:6f:1a:43:70:16:49:a2:d1:59:17:b6:cd:1f:ea:52:
         b7:0b:84:7c:f5:40:9a:51:b3:27:5c:fe:cd:48:c9:db:b5:7f:
         54:16:ef:cd:0a:50:39:da:4e:ed:a5:b6:90:fd:1f:e1:2e:81:
         b0:41:d2:ce:c4:d4:ec:78:05:f4:5f:91:6c:0b:74:b3:27:78:
         9c:cf:6c:af:ad:99:8c:45:b4:c0:41:51:5a:a7:aa:46:c7:36:
         d3:0b:c3:50:ee:d1:8e:b7:80:45:7c:9b:df:e2:77:d1:cb:63:
         f3:7f:69:96:82:2b:4a:e8:bb:8a:6b:aa:04:9b:34:a9:a0:88:
         8d:2f:82:ff:90:13:0c:66:00:7e:25:1e:e0:0c:46:ed:6d:95:
         e3:00:38:fc:ff:fc:65:46:6b:cf:82:ff:96:d5:33:67:d2:0b:
         80:76:ea:a0:af:58:45:1f:c9:a4:fb:b4:93:48:3b:c5:d2:bc:
         7c:c0:9b:70:c3:a8:4c:4c:85:bc:6a:c2:5d:ff:2a:c9:a1:50:
         33:03:78:9c:62:c7:b7:36:d1:c3:ca:d6:82:4e:7a:7c:fa:cf:
         49:0c:2d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:01 2024 by rpki-client on console-fra.rpki-client.org