Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ti_azxRVdEe79-12-5xrQqokGmE.roa
File:                     ti_azxRVdEe79-12-5xrQqokGmE.roa (raw, json)
Hash identifier:          x26pMQr9zsPc71AIYZbWbfbH703ylBxZ5LjyqB6BHAQ=
Subject key identifier:   B6:2F:DA:CF:14:55:74:47:BB:F7:ED:76:FB:9C:6B:42:AA:24:1A:61
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018CC9BD363265A929134C6062D779FFB042
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ti_azxRVdEe79-12-5xrQqokGmE.roa
Signing time:             Tue 02 Jan 2024 10:34:29 +0000
ROA not before:           Tue 02 Jan 2024 10:34:29 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211484
IP address blocks:        2a0e:97c0:360::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 12 May 2024 22:55:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bd:36:32:65:a9:29:13:4c:60:62:d7:79:ff:b0:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 10:34:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b62fdacf14557447bbf7ed76fb9c6b42aa241a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:af:00:f8:5e:3d:8b:57:a7:c9:9c:95:59:5b:
                    c0:21:86:bd:18:2e:92:bb:0b:13:e9:b7:26:45:ba:
                    45:5c:fa:16:12:12:f2:fd:71:d8:b2:c8:98:24:bc:
                    21:f9:68:86:94:f5:aa:8d:23:e8:03:59:08:2d:12:
                    30:eb:2f:8f:11:73:a2:57:62:0a:85:18:52:4e:34:
                    d4:ef:41:e3:c6:9c:69:10:a2:67:c9:e2:b5:8e:e5:
                    c3:f4:44:f3:51:59:60:5c:3f:28:f6:60:17:92:51:
                    06:f2:a2:f4:0b:f7:7e:68:8f:b6:b3:9c:a0:1c:83:
                    6a:b0:e2:c7:4b:c9:ef:c5:e8:d9:0e:66:1b:7b:fa:
                    de:d6:61:4a:d5:3f:c3:da:19:60:a1:54:e5:3c:97:
                    ce:34:1f:bb:45:dc:3f:7b:f5:c1:f4:65:04:7d:59:
                    9d:f1:4b:3d:7d:b5:ca:35:38:06:37:32:89:2a:df:
                    88:d7:26:76:9d:06:6c:be:1e:7f:67:57:46:d4:b4:
                    dc:a3:41:73:89:2c:5d:c8:9a:15:45:80:91:f6:be:
                    ab:9e:60:5d:db:ab:24:4a:60:05:2b:eb:4a:42:8d:
                    d2:85:5a:26:f5:6d:6a:a7:d8:e4:d8:ae:7a:ae:19:
                    9f:8f:b1:d7:b4:f5:9e:85:08:f0:68:65:02:ab:2b:
                    97:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2F:DA:CF:14:55:74:47:BB:F7:ED:76:FB:9C:6B:42:AA:24:1A:61
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ti_azxRVdEe79-12-5xrQqokGmE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:360::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:35:d7:6c:af:01:26:bb:c0:19:83:0a:2f:45:61:37:d3:eb:
         d2:a3:79:30:17:a0:0b:7b:4f:7c:c1:54:c0:af:0d:61:cf:1a:
         83:7d:07:c0:1f:57:61:97:25:89:e1:62:aa:f5:dc:1e:aa:15:
         46:d5:3f:90:a3:0b:a6:57:be:d3:52:51:c2:be:2a:a7:07:2b:
         6f:63:bc:c3:7b:11:5e:d4:9a:c4:83:34:4d:9d:25:80:dc:f6:
         a5:77:32:f0:15:d0:01:77:a5:8f:bb:36:ff:5f:7b:3b:4d:5b:
         2e:62:f2:2b:ec:6c:06:ea:17:80:66:be:bf:3a:2e:29:fa:30:
         13:38:25:19:46:6c:b5:4b:cc:d9:89:4b:d4:01:57:b6:79:f7:
         72:39:5d:a8:88:94:b8:0f:c5:0c:f1:dc:6c:b5:bb:ab:c2:8e:
         e9:ed:f6:ff:c7:78:1f:7a:5d:c6:87:60:09:a3:79:56:73:28:
         8a:29:af:38:19:50:6e:0d:39:20:21:8a:15:9f:53:52:90:97:
         76:f1:cc:4d:b8:2e:4b:af:62:3a:4e:f3:95:2f:1c:88:54:de:
         1d:9b:3a:7e:d5:42:56:b0:70:7f:3d:f7:25:33:9d:72:e2:b4:
         4e:e0:10:6d:3a:21:20:9e:6b:21:df:34:29:c5:8e:eb:dd:28:
         fb:84:2d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:39 2024 by rpki-client on console-fra.rpki-client.org