Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FK1YaBLniNzXC7fxgKa2Q1MWoU4.roa
File:                     FK1YaBLniNzXC7fxgKa2Q1MWoU4.roa (raw, json)
Hash identifier:          KZZhTYpJ8t/kKbnXWZusuvIrxptHoSHKLi61eWW/JlI=
Subject key identifier:   14:AD:58:68:12:E7:88:DC:D7:0B:B7:F1:80:A6:B6:43:53:16:A1:4E
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E77E2BC69B47A1C8BE8395AE6C9827
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FK1YaBLniNzXC7fxgKa2Q1MWoU4.roa
Signing time:             Mon 02 Jan 2023 05:14:57 +0000
ROA not before:           Mon 02 Jan 2023 05:14:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44024
IP address blocks:        2a10:2f01:330::/44 maxlen: 48

Validation:               Failed, certificate revoked on Mon 28 Aug 2023 16:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:7e:2b:c6:9b:47:a1:c8:be:83:95:ae:6c:98:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:14:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=14ad586812e788dcd70bb7f180a6b6435316a14e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bc:88:19:18:41:f6:23:5a:7a:19:f7:30:f7:
                    9b:e0:0f:8d:33:19:5d:1b:3a:23:eb:60:f7:af:e5:
                    8d:81:5c:9b:df:be:85:dc:3c:eb:3c:a6:b3:91:fe:
                    fd:eb:a3:de:4f:27:37:da:ff:66:2d:3d:b1:8a:a6:
                    63:04:9e:27:18:9d:90:53:3c:97:37:38:fe:78:1c:
                    58:af:d6:69:fa:b8:e4:10:c8:c1:04:91:3e:3a:84:
                    24:e4:c2:c5:fd:92:24:96:33:0e:ac:85:79:35:5f:
                    f5:2b:62:de:41:5d:85:9b:31:89:fc:db:9a:e8:97:
                    bd:b5:a1:70:e4:47:30:e4:b6:53:c5:1d:16:6c:b7:
                    48:85:64:8e:13:96:fa:52:e5:64:7e:b4:b2:49:c5:
                    81:d5:6d:dc:94:6d:11:ce:b6:92:66:1c:d3:d4:7a:
                    07:5e:f0:a8:b2:78:ea:23:9b:72:50:df:33:34:e9:
                    c6:de:3a:e8:af:76:72:de:30:31:67:65:2c:fe:51:
                    54:14:4a:5f:b8:ea:7a:fb:25:08:25:f3:02:f4:ce:
                    69:13:08:5d:39:82:7a:b7:ef:6c:9b:56:4d:aa:c5:
                    d9:f2:ca:fb:83:3f:58:d2:61:bb:f7:f5:7d:93:5c:
                    ed:65:1d:93:fa:18:50:24:d0:c4:4f:c2:de:81:76:
                    65:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AD:58:68:12:E7:88:DC:D7:0B:B7:F1:80:A6:B6:43:53:16:A1:4E
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FK1YaBLniNzXC7fxgKa2Q1MWoU4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f01:330::/44

    Signature Algorithm: sha256WithRSAEncryption
         49:75:30:38:45:07:f8:c8:8e:86:73:ba:ae:77:60:f1:63:88:
         76:f7:41:7f:6f:fb:98:23:b3:04:3d:93:29:9c:9b:d9:67:0c:
         52:70:48:82:a1:70:44:14:a1:99:88:e0:6c:d0:c4:ad:0c:dc:
         97:72:51:51:07:81:cc:b9:82:45:15:a4:90:71:87:ea:7e:a3:
         dd:fa:13:6a:6c:f4:7f:e8:0a:3a:1f:d8:9e:ec:30:89:59:02:
         63:2e:7b:d8:38:27:f2:89:0f:db:4d:a9:ec:32:bd:48:4d:db:
         a9:f8:0a:16:41:bf:b5:b9:89:1e:40:20:20:6c:b6:15:c1:92:
         07:be:ce:89:07:4b:d3:d8:01:46:5f:4a:ed:9d:96:e0:61:e5:
         76:6e:4e:e7:96:9c:b9:36:f9:8b:26:58:79:72:76:35:5e:e5:
         47:54:74:d6:a0:81:ae:96:52:be:78:fb:26:0b:06:a0:b5:fc:
         8d:97:47:3e:71:84:16:58:c0:0d:2d:66:96:3d:a8:02:a8:a4:
         45:f0:d5:87:d5:fd:f7:2b:e5:09:e3:5e:d0:74:ff:3f:8e:98:
         2c:a9:d9:48:fc:07:06:84:da:a6:04:b4:42:18:d9:29:fd:18:
         a9:48:2b:04:db:b0:66:8d:6b:12:59:e2:90:7f:91:5d:dc:e2:
         04:9b:59:4c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw534rxptHoci+g5WubJgnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGFkNTg2ODEyZTc4OGRjZDcwYmI3ZjE4MGE2YjY0MzUzMTZhMTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7yIGRhB9iNaehn3MPeb4A+NMxld
Gzoj62D3r+WNgVyb376F3DzrPKazkf7966PeTyc32v9mLT2xiqZjBJ4nGJ2QUzyX
Nzj+eBxYr9Zp+rjkEMjBBJE+OoQk5MLF/ZIkljMOrIV5NV/1K2LeQV2FmzGJ/Nua
6Je9taFw5Ecw5LZTxR0WbLdIhWSOE5b6UuVkfrSyScWB1W3clG0RzraSZhzT1HoH
XvCosnjqI5tyUN8zNOnG3jror3Zy3jAxZ2Us/lFUFEpfuOp6+yUIJfMC9M5pEwhd
OYJ6t+9sm1ZNqsXZ8sr7gz9Y0mG79/V9k1ztZR2T+hhQJNDET8LegXZltQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBStWGgS54jc1wu38YCmtkNTFqFOMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvRksxWWFCTG5pTnpYQzdmeGdLYTJRMU1Xb1U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhAvAQMw
MA0GCSqGSIb3DQEBCwUAA4IBAQBJdTA4RQf4yI6Gc7qud2DxY4h290F/b/uYI7ME
PZMpnJvZZwxScEiCoXBEFKGZiOBs0MStDNyXclFRB4HMuYJFFaSQcYfqfqPd+hNq
bPR/6Ao6H9ie7DCJWQJjLnvYOCfyiQ/bTansMr1ITdup+AoWQb+1uYkeQCAgbLYV
wZIHvs6JB0vT2AFGX0rtnZbgYeV2bk7nlpy5NvmLJlh5cnY1XuVHVHTWoIGullK+
ePsmCwagtfyNl0c+cYQWWMANLWaWPagCqKRF8NWH1f33K+UJ417QdP8/jpgsqdlI
/AcGhNqmBLRCGNkp/RipSCsE27BmjWsSWeKQf5Fd3OIEm1lM
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:58 2024 by rpki-client on console-ams.rpki-client.org