Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/gTkkjnwiZmkOSJx6lGXxKDX7Tm8.roa
File:                     gTkkjnwiZmkOSJx6lGXxKDX7Tm8.roa (raw, json)
Hash identifier:          rX8uC2oq+/JbcVYBDVQyJAD8lZXrL7Vozvbu6iYt+/8=
Subject key identifier:   81:39:24:8E:7C:22:66:69:0E:48:9C:7A:94:65:F1:28:35:FB:4E:6F
Certificate issuer:       /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial:       0187F6F5A1725D8AEBF349D43154FA8B1E28
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/gTkkjnwiZmkOSJx6lGXxKDX7Tm8.roa
Signing time:             Sun 07 May 2023 16:05:05 +0000
ROA not before:           Sun 07 May 2023 16:05:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212104
IP address blocks:        2a12:5844:1112::/48 maxlen: 48
                          2a12:5844:1110::/44 maxlen: 44
                          2a12:5844:1111::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:f6:f5:a1:72:5d:8a:eb:f3:49:d4:31:54:fa:8b:1e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
        Validity
            Not Before: May  7 16:05:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8139248e7c2266690e489c7a9465f12835fb4e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8f:68:90:a3:b4:6e:53:67:ca:9a:58:28:5c:
                    c2:47:ee:29:fb:32:72:ef:f0:c8:0b:4b:a1:12:21:
                    f9:6c:be:f8:3a:2f:74:c0:e4:3d:f6:d3:bb:48:ac:
                    16:8e:14:11:fa:76:13:1b:99:88:ed:8f:4d:d2:b2:
                    b3:0e:90:12:c9:80:48:df:99:62:b0:3d:90:e9:5d:
                    6f:a9:cc:85:ea:58:3e:8f:12:29:56:25:83:0f:d7:
                    ee:d3:88:9d:56:52:84:88:88:e8:4b:3e:b9:89:e3:
                    bb:9a:0b:2e:b8:0a:0c:4d:f2:fe:2e:95:c0:71:57:
                    77:a1:5d:f5:b3:11:b9:8e:6a:74:68:83:8c:da:08:
                    ea:c1:d9:3b:60:14:1c:6d:86:4d:25:6e:04:26:ba:
                    93:47:90:d3:4f:de:2c:58:9e:42:c1:87:d4:bc:dc:
                    11:37:89:b3:56:95:fb:be:16:17:31:24:05:75:e0:
                    37:ab:39:bc:50:92:62:8d:f2:c9:e1:9b:77:7a:bd:
                    c1:73:f2:5a:48:be:be:f2:dc:3c:57:69:74:11:b4:
                    a5:4b:8b:7b:6d:37:f6:b0:b0:80:f6:de:ee:cc:f0:
                    87:5f:22:58:56:7a:ec:2a:08:7e:c7:08:ba:56:46:
                    34:f7:07:8f:79:45:aa:3b:83:8d:62:8f:d3:75:b7:
                    5c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:39:24:8E:7C:22:66:69:0E:48:9C:7A:94:65:F1:28:35:FB:4E:6F
            X509v3 Authority Key Identifier:
                keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/gTkkjnwiZmkOSJx6lGXxKDX7Tm8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:5844:1110::/44

    Signature Algorithm: sha256WithRSAEncryption
         46:de:1f:64:40:f0:6c:03:54:a4:0d:33:75:df:51:f5:18:ff:
         61:e7:a2:00:79:97:79:97:78:6d:f3:f7:af:aa:60:3e:80:ea:
         d5:23:bb:15:1c:79:56:b6:e8:b8:19:8b:f0:72:9c:38:b7:6b:
         23:3d:3e:cc:66:69:8f:bc:c8:76:5d:99:b8:53:ad:bb:c7:63:
         d4:26:08:3f:34:22:dc:33:fa:9c:44:77:ca:71:e9:03:7f:cd:
         93:f6:26:a8:76:6f:0f:26:07:a9:34:fb:fc:a8:f6:61:ec:f7:
         53:8a:58:3b:9e:ea:85:32:88:2d:17:5e:a0:8e:01:02:4f:e5:
         f5:f5:f2:07:09:5a:0c:5b:bc:bc:20:6a:d4:17:82:9e:93:fc:
         55:04:f6:d0:3f:95:86:5c:ea:d6:08:79:43:ce:e4:ae:8a:22:
         94:0d:05:cd:d0:bb:85:3c:78:8c:a8:aa:fd:b5:d2:da:76:97:
         8c:e6:65:b6:1a:c8:8b:0b:1d:cf:28:b4:7d:1f:df:62:6f:73:
         a2:d6:e7:92:b3:62:42:35:95:c4:1d:29:6a:26:f7:c3:4e:96:
         63:30:a8:77:35:5c:dc:f5:a7:cd:25:22:69:30:99:13:57:44:
         60:72:6c:dc:1b:28:8d:ae:71:69:3c:55:ea:62:96:97:02:9e:
         34:33:ce:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:36 2024 by rpki-client on console-ams.rpki-client.org