Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/hUIRrMctQasiwjP2bB1IdUnnRx0.roa
File:                     hUIRrMctQasiwjP2bB1IdUnnRx0.roa (raw, json)
Hash identifier:          9vvNY6dpGnKk69njFLLRBbmmv5fHAvhSmebElOJJdLw=
Subject key identifier:   85:42:11:AC:C7:2D:41:AB:22:C2:33:F6:6C:1D:48:75:49:E7:47:1D
Certificate issuer:       /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial:       018F2AF1866FFBF8FB96E88A84F44C17E053
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/hUIRrMctQasiwjP2bB1IdUnnRx0.roa
Signing time:             Mon 29 Apr 2024 17:40:22 +0000
ROA not before:           Mon 29 Apr 2024 17:40:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215158
IP address blocks:        2a11:e8c0::/29 maxlen: 29
                          2a11:ea80::/29 maxlen: 29
                          2a11:ff40::/29 maxlen: 29
                          2a12:1040::/29 maxlen: 29
                          2a12:2e80::/29 maxlen: 29
                          2a12:3c00::/29 maxlen: 29
                          2a12:8580::/29 maxlen: 29
                          2a12:8a00::/29 maxlen: 29
                          2a12:9300::/29 maxlen: 29
                          2a12:d080::/29 maxlen: 29

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2a:f1:86:6f:fb:f8:fb:96:e8:8a:84:f4:4c:17:e0:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
        Validity
            Not Before: Apr 29 17:40:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=854211acc72d41ab22c233f66c1d487549e7471d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8f:1d:51:47:81:b1:b0:08:42:cd:3c:e1:0d:
                    8e:11:c1:45:c5:f3:f6:99:c8:e0:18:5c:26:eb:33:
                    46:51:8d:df:b6:37:fb:2f:9d:23:e0:28:dc:79:8c:
                    42:ac:f7:bd:0f:e7:3c:64:06:45:18:6d:20:61:3c:
                    ce:f7:36:8e:7e:c6:d3:c7:07:3a:f8:04:bd:da:b5:
                    ec:19:31:d3:1a:54:95:e8:2e:4c:39:26:78:fb:69:
                    1c:d9:ab:44:51:90:7e:4b:de:af:af:4e:7b:e1:23:
                    d8:0c:59:7a:f5:44:fa:ae:9b:98:51:ab:12:20:79:
                    dd:8a:5d:25:bd:5c:d1:c0:52:4b:6e:84:30:99:b3:
                    9c:b1:8f:ae:b4:28:d9:f4:23:7c:54:ba:e2:78:83:
                    1d:26:78:b7:b1:cd:61:be:e7:ed:64:1e:f4:d6:e4:
                    56:5a:9b:1b:94:7c:56:ca:08:87:e7:3e:f6:05:3d:
                    23:81:16:77:72:25:3e:8b:35:25:9c:c6:d9:2c:fd:
                    24:cb:1d:68:bb:15:23:3b:42:6e:f3:59:5c:ae:97:
                    cf:35:f8:6f:a5:b8:c4:11:d7:09:c0:ae:b5:16:f6:
                    92:29:6b:61:94:72:b2:dd:17:fe:a4:a9:b2:43:a2:
                    47:76:dd:56:aa:da:a1:3c:79:c4:5a:fc:23:1c:b9:
                    67:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:42:11:AC:C7:2D:41:AB:22:C2:33:F6:6C:1D:48:75:49:E7:47:1D
            X509v3 Authority Key Identifier:
                keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/hUIRrMctQasiwjP2bB1IdUnnRx0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:e8c0::/29
                  2a11:ea80::/29
                  2a11:ff40::/29
                  2a12:1040::/29
                  2a12:2e80::/29
                  2a12:3c00::/29
                  2a12:8580::/29
                  2a12:8a00::/29
                  2a12:9300::/29
                  2a12:d080::/29

    Signature Algorithm: sha256WithRSAEncryption
         1b:16:05:5b:0d:27:5d:c8:d5:80:03:57:15:1b:57:09:5e:8e:
         c0:e3:f4:5c:2d:22:a9:62:75:2b:e2:4f:c1:c8:d0:83:c1:87:
         8a:b6:d6:98:5c:80:cb:2e:bc:df:ea:cb:86:f5:bf:1c:7e:05:
         a8:9e:bf:9c:fb:fe:70:34:84:9d:8c:2e:88:93:09:e4:bb:3c:
         58:db:f9:c8:93:08:b5:bd:ca:b4:4f:f4:12:0e:59:f1:bf:65:
         3c:ab:d2:71:db:30:76:81:be:07:1e:c1:b2:be:14:09:10:17:
         39:4b:8c:f0:39:52:31:98:89:2e:0a:bb:47:78:2f:8f:69:92:
         d1:68:b0:3f:09:b6:47:c7:72:a2:07:f0:f6:b5:d8:cd:c2:19:
         d9:21:21:29:7f:28:63:3b:79:71:85:8d:6c:ac:ed:16:99:c8:
         34:bf:7a:fc:29:11:50:5c:16:4b:25:11:be:2a:2b:a3:96:19:
         ec:4b:0e:eb:16:0b:06:74:b1:e3:2c:8a:e0:ef:02:d9:20:f1:
         2f:fb:37:2e:bd:a6:cd:5a:c5:2a:93:08:7c:b0:aa:6d:7d:21:
         40:53:32:4b:23:2c:a5:3b:50:62:5d:e9:a2:bd:a4:a2:37:d6:
         9c:c1:68:eb:85:a0:c9:78:83:8c:ec:ea:e6:ca:67:12:fe:ad:
         fb:55:43:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:52 2024 by rpki-client on console-ams.rpki-client.org