Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/EuKpLrDKsc4w6O9-WUNLh1S2IDk.roa
File:                     EuKpLrDKsc4w6O9-WUNLh1S2IDk.roa (raw, json)
Hash identifier:          gtaZ2sTkkW7+hbUfypLfJzzJyr0Vc8SS0aVXTerQftU=
Subject key identifier:   12:E2:A9:2E:B0:CA:B1:CE:30:E8:EF:7E:59:43:4B:87:54:B6:20:39
Certificate issuer:       /CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
Certificate serial:       019039551153D4578E63540B597DDF57F268
Authority key identifier: 46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/EuKpLrDKsc4w6O9-WUNLh1S2IDk.roa
Signing time:             Fri 21 Jun 2024 05:46:34 +0000
ROA not before:           Fri 21 Jun 2024 05:46:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     203995
IP address blocks:        2a05:9cc0::/29 maxlen: 32
Validation:               Failed, certificate revoked on Mon 24 Jun 2024 06:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:39:55:11:53:d4:57:8e:63:54:0b:59:7d:df:57:f2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
        Validity
            Not Before: Jun 21 05:46:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=12e2a92eb0cab1ce30e8ef7e59434b8754b62039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c4:f3:ab:c6:f2:52:b6:99:b2:64:5c:b6:ff:
                    ff:ed:be:bc:9d:e0:f2:e7:17:af:95:c7:89:61:e7:
                    d9:f3:bb:a6:ab:10:a5:27:4e:7e:d4:da:82:71:a0:
                    f0:a4:d1:e2:65:e4:31:f8:2d:d8:ca:37:92:c1:35:
                    99:63:46:0e:ec:18:65:ea:b1:c7:bd:e7:ed:54:bd:
                    c6:5c:2e:16:31:6d:77:d6:2a:69:96:5d:c3:dc:4c:
                    6d:64:98:12:5e:cd:71:92:75:89:ad:7d:01:92:75:
                    38:10:d2:84:07:49:ff:c0:22:7b:86:83:d8:af:09:
                    10:ee:04:48:87:39:79:8c:22:e3:db:5a:1b:9e:30:
                    fa:0a:53:07:3c:eb:53:79:3a:7b:ec:3a:fc:bf:95:
                    11:76:e0:37:4e:a9:43:6c:e1:72:95:dc:ca:b9:fc:
                    17:4e:d7:0f:b7:ea:94:16:ae:c1:3e:8f:09:15:2c:
                    52:4c:40:c9:09:b4:bc:68:0f:25:24:0c:3d:32:5e:
                    91:77:e1:86:85:70:31:9b:6a:24:db:ee:d9:61:fc:
                    09:a7:bf:74:9e:a4:ad:d3:aa:ad:ad:bc:8e:c6:22:
                    5c:ce:f7:ba:e8:34:6f:28:11:25:db:58:a4:65:64:
                    50:43:00:77:d2:55:81:7c:7e:de:83:01:11:4b:5c:
                    1b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E2:A9:2E:B0:CA:B1:CE:30:E8:EF:7E:59:43:4B:87:54:B6:20:39
            X509v3 Authority Key Identifier:
                keyid:46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/EuKpLrDKsc4w6O9-WUNLh1S2IDk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:9cc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         74:3f:7f:23:41:56:cc:25:a7:96:84:a3:d4:6f:1f:dc:ef:9b:
         c8:c2:0d:8e:1d:0e:bb:2d:65:a6:47:ff:70:36:b6:f7:03:b9:
         8f:22:53:a5:58:34:71:3e:45:6b:50:11:f1:4f:d4:77:a9:f4:
         3f:d3:a6:8a:45:cd:b1:7e:72:0d:1d:93:38:fd:00:e5:b8:8e:
         e3:d1:7c:39:b0:7f:1a:70:41:92:18:7f:ba:28:e8:46:36:30:
         ec:20:22:28:7a:36:5f:36:1d:b3:ea:4b:24:28:4c:3e:50:ae:
         cc:12:dc:1f:41:26:d5:32:64:c9:1f:fb:e5:d1:ca:46:a6:f0:
         1c:63:f9:ea:4d:09:d1:53:2b:d1:2c:43:44:dc:e3:f2:cf:98:
         66:38:68:57:b8:6d:54:94:6c:67:f0:91:34:08:ab:05:a4:6b:
         26:cb:67:3d:db:4e:46:51:e7:02:78:ae:14:65:98:7e:5a:c4:
         e1:6e:a4:40:5f:75:9a:af:64:01:42:01:e1:b9:6f:c7:4f:71:
         f7:fb:12:cd:2a:f1:d9:91:9b:9e:20:e0:9f:62:3a:2d:4b:bf:
         a8:ca:4d:d8:ef:97:82:9e:28:e7:a7:97:94:26:20:5a:e5:34:
         07:3c:03:c1:6d:4b:1a:ce:c7:42:4f:7e:3a:a0:bb:2c:f7:eb:
         41:54:5c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:44 2025 by rpki-client