Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/gREOsaaIuqr6PZ-dawCDxKpiHsk.roa
File:                     gREOsaaIuqr6PZ-dawCDxKpiHsk.roa (raw, json)
Hash identifier:          NvOjSJuCUoHXlpKYNlsbB2NbDp4G4t4Gy0VNpSpbvRg=
Subject key identifier:   81:11:0E:B1:A6:88:BA:AA:FA:3D:9F:9D:6B:00:83:C4:AA:62:1E:C9
Certificate issuer:       /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial:       01857321CC227099B1B9DBEBC6D685B1D49A
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/gREOsaaIuqr6PZ-dawCDxKpiHsk.roa
Signing time:             Mon 02 Jan 2023 15:37:52 +0000
ROA not before:           Mon 02 Jan 2023 15:37:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212149
IP address blocks:        2a12:5840:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:21:cc:22:70:99:b1:b9:db:eb:c6:d6:85:b1:d4:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
        Validity
            Not Before: Jan  2 15:37:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=81110eb1a688baaafa3d9f9d6b0083c4aa621ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:aa:00:81:ea:bf:ef:be:95:05:6b:e6:b3:46:
                    bf:bc:1b:e5:9d:79:28:a6:d7:e9:08:9f:52:62:ca:
                    3f:5c:b2:d7:84:67:90:b8:04:9c:00:4a:5f:57:18:
                    21:f0:1d:42:df:0b:70:a8:00:a3:8b:e9:89:ca:93:
                    a7:af:25:85:78:2e:03:54:1d:42:f2:94:83:2d:bb:
                    19:c1:97:21:e6:14:29:62:86:c6:37:cc:b8:6c:f8:
                    44:e7:b9:75:94:ee:e1:6f:0d:43:f4:3a:53:50:8a:
                    23:d5:50:e1:1c:bf:35:8c:f5:03:97:2a:a4:f4:e3:
                    5b:2b:cd:7d:ff:3f:43:a6:06:28:8c:c9:8a:50:f5:
                    05:4f:cd:44:bc:89:e5:cf:d6:3d:96:bb:1c:03:e7:
                    52:8c:09:07:2b:8a:a4:a9:53:59:22:df:f2:6f:63:
                    f1:ef:19:bd:d5:59:f1:1b:0b:d1:13:1b:73:60:f1:
                    a6:93:95:49:89:6e:d0:c7:64:7e:db:0c:13:cc:94:
                    25:1e:32:df:c0:a7:4b:1e:4d:3d:7c:96:1c:0b:c7:
                    99:70:45:00:1a:88:2d:0e:12:7d:f1:d2:de:79:f4:
                    3b:e9:11:01:75:85:e3:43:21:f1:05:61:eb:ff:cb:
                    0c:d7:eb:55:fc:f5:1d:89:d8:4f:0e:2b:46:14:4c:
                    28:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:11:0E:B1:A6:88:BA:AA:FA:3D:9F:9D:6B:00:83:C4:AA:62:1E:C9
            X509v3 Authority Key Identifier:
                keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/gREOsaaIuqr6PZ-dawCDxKpiHsk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:5840:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:0d:72:f5:2b:a9:c9:8e:e2:16:da:30:46:48:a7:9b:41:84:
         6e:de:91:c8:04:54:65:33:4f:9f:2c:a2:db:c9:98:ad:20:58:
         96:5a:29:f4:d2:ac:d6:f4:9e:3e:b1:d5:f8:4c:33:d0:97:b6:
         02:fd:8e:f6:9f:c1:2a:be:1a:e9:7e:20:fe:ad:e0:a8:b2:c3:
         8b:e2:4a:73:6d:bb:eb:21:cf:86:58:97:6b:da:c6:33:af:13:
         e9:7b:7b:13:54:99:f8:28:d0:4b:06:5a:05:d3:a4:2c:6e:67:
         c1:30:9c:b8:81:48:09:84:31:62:74:7f:5d:99:9a:30:15:4b:
         da:ef:45:fa:d4:da:4a:b0:62:97:43:b4:e0:3c:86:db:b1:17:
         71:f8:05:78:de:7e:44:55:00:ba:89:c1:6f:13:af:d7:35:f5:
         c6:9d:a7:ae:28:0b:36:f3:0e:5e:83:84:e0:48:e5:6b:30:df:
         26:b2:11:66:2e:6b:d2:5d:6f:27:51:47:0a:9b:c6:44:89:bd:
         ef:3a:6f:42:2b:6c:a2:e5:d6:7a:5b:20:be:a7:7e:25:4a:8e:
         59:26:3b:29:c5:16:1d:00:d7:f8:7d:1a:33:58:8c:e4:0f:3a:
         b9:17:06:33:68:11:f4:b3:5e:3f:be:a3:63:1f:69:23:d6:4d:
         bf:e3:dc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:36 2024 by rpki-client on console-ams.rpki-client.org