Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LAWboRnzPJ9V7_ZDHiq0X8qLeHw.roa
File:                     LAWboRnzPJ9V7_ZDHiq0X8qLeHw.roa (raw, json)
Hash identifier:          +7B9ILGgiTbUwelMEKJJGCRE9/paZWsm0ufA9+DS/QI=
Subject key identifier:   2C:05:9B:A1:19:F3:3C:9F:55:EF:F6:43:1E:2A:B4:5F:CA:8B:78:7C
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0186115DECCA35831F4F516105E45072DBED
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LAWboRnzPJ9V7_ZDHiq0X8qLeHw.roa
Signing time:             Thu 02 Feb 2023 09:03:33 +0000
ROA not before:           Thu 02 Feb 2023 09:03:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49768
IP address blocks:        2a10:cc42:1a0::/46 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:11:5d:ec:ca:35:83:1f:4f:51:61:05:e4:50:72:db:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb  2 09:03:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2c059ba119f33c9f55eff6431e2ab45fca8b787c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:31:cd:ec:52:70:09:04:45:34:60:0c:e9:5d:
                    42:e3:26:6f:de:b4:58:af:f0:17:1b:f3:d9:49:12:
                    71:92:e9:2d:71:a5:1e:ac:0b:de:a1:b7:a3:7e:52:
                    3e:9a:60:c3:ce:45:3b:53:b1:3a:8e:4f:b8:36:da:
                    4c:29:63:28:fd:54:a1:db:29:1a:54:a7:91:b3:ec:
                    78:dc:86:c9:29:40:61:76:b8:7a:57:0d:92:54:40:
                    e8:48:b6:e7:e6:61:b3:bc:ca:d8:2d:31:aa:8b:34:
                    54:c8:3a:31:48:1c:75:30:8c:a0:94:f5:f7:46:46:
                    78:f4:e8:f5:b1:ca:6f:c6:c7:cd:bc:36:fe:f1:04:
                    b1:74:c3:33:c5:02:e0:80:0a:d9:69:4c:af:d9:53:
                    b6:cc:ac:02:e7:69:30:9b:ed:62:69:c9:c7:8c:94:
                    07:ae:d7:d3:29:43:26:a9:35:28:f2:60:ea:0b:ae:
                    6b:73:15:a5:85:66:2b:6b:e8:84:8e:08:98:1c:58:
                    79:fe:67:66:b2:59:98:f6:a5:1e:6e:b9:e6:ce:d5:
                    28:b4:86:a3:7c:d1:6c:e0:9e:71:ae:82:c3:99:31:
                    82:7a:42:04:d1:59:1e:62:d7:47:e5:17:01:0a:80:
                    24:f4:95:e1:27:a3:e5:7a:ba:da:a4:b2:99:ec:29:
                    b9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:05:9B:A1:19:F3:3C:9F:55:EF:F6:43:1E:2A:B4:5F:CA:8B:78:7C
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LAWboRnzPJ9V7_ZDHiq0X8qLeHw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc42:1a0::/46

    Signature Algorithm: sha256WithRSAEncryption
         73:07:a6:59:96:25:d9:fa:b0:6b:d4:bd:18:24:f2:ac:6a:6f:
         13:69:ea:b1:2b:49:07:a1:a5:70:0e:47:ac:e2:f5:1d:cd:f5:
         57:9b:aa:91:65:a1:ca:a7:d3:aa:df:91:54:ac:5f:fb:fe:ca:
         32:23:7c:2a:bc:52:d9:ab:97:05:5c:3f:58:cd:55:ea:4d:a1:
         c1:eb:a3:f2:88:aa:23:d0:26:f5:50:98:7e:a4:ac:84:1e:94:
         ca:f8:1a:e4:1a:5f:58:69:a4:fb:f3:62:55:d7:4d:f2:25:10:
         12:3c:d1:2e:20:21:24:47:c9:94:3c:1a:2a:b2:5d:29:d6:76:
         28:d8:f3:95:b9:a7:34:7e:1c:8e:fe:8e:48:47:59:ba:3e:b1:
         d7:0f:19:58:8f:b0:00:e9:6e:9a:12:c6:09:c0:e6:16:4d:ff:
         3a:a1:5f:c8:fa:e8:97:d2:23:04:58:f4:e8:51:1f:c3:3a:1e:
         fd:2d:9b:2e:79:26:89:49:89:bf:58:f9:22:58:ef:a4:8a:6f:
         8e:ed:15:b1:84:11:de:0c:91:c5:a8:7b:7e:86:ab:22:40:38:
         bc:30:76:5f:0e:31:bb:b0:41:8b:59:0a:b2:87:07:8f:9c:10:
         8b:c5:a0:dd:d2:a0:6a:15:1a:b1:91:d8:da:be:b2:fe:e9:e5:
         ba:cc:02:92
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYYRXezKNYMfT1FhBeRQctvtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMjAyMDkwMzMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzA1OWJhMTE5ZjMzYzlmNTVlZmY2NDMxZTJhYjQ1ZmNhOGI3ODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDHN7FJwCQRFNGAM6V1C4yZv3rRY
r/AXG/PZSRJxkuktcaUerAveobejflI+mmDDzkU7U7E6jk+4NtpMKWMo/VSh2yka
VKeRs+x43IbJKUBhdrh6Vw2SVEDoSLbn5mGzvMrYLTGqizRUyDoxSBx1MIyglPX3
RkZ49Oj1scpvxsfNvDb+8QSxdMMzxQLggArZaUyv2VO2zKwC52kwm+1iacnHjJQH
rtfTKUMmqTUo8mDqC65rcxWlhWYra+iEjgiYHFh5/mdmslmY9qUebrnmztUotIaj
fNFs4J5xroLDmTGCekIE0VkeYtdH5RcBCoAk9JXhJ6PlerrapLKZ7Cm5ywIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCwFm6EZ8zyfVe/2Qx4qtF/Ki3h8MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvTEFXYm9SbnpQSjlWN19aREhpcTBYOHFMZUh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKhDMQgGg
MA0GCSqGSIb3DQEBCwUAA4IBAQBzB6ZZliXZ+rBr1L0YJPKsam8TaeqxK0kHoaVw
Dkes4vUdzfVXm6qRZaHKp9Oq35FUrF/7/soyI3wqvFLZq5cFXD9YzVXqTaHB66Py
iKoj0Cb1UJh+pKyEHpTK+BrkGl9YaaT782JV103yJRASPNEuICEkR8mUPBoqsl0p
1nYo2POVuac0fhyO/o5IR1m6PrHXDxlYj7AA6W6aEsYJwOYWTf86oV/I+uiX0iME
WPToUR/DOh79LZsueSaJSYm/WPkiWO+kim+O7RWxhBHeDJHFqHt+hqsiQDi8MHZf
DjG7sEGLWQqyhwePnBCLxaDd0qBqFRqxkdjavrL+6eW6zAKS
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:00 2024 by rpki-client on console-ams.rpki-client.org