Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/Eq5daT3lz1qu3o9AsSmq7f7DQiY.roa
File:                     Eq5daT3lz1qu3o9AsSmq7f7DQiY.roa (raw, json)
Hash identifier:          pSFY4u2G5NspAQZzXMp/JuazNmUKfRsVlgtF3AfNpHI=
Subject key identifier:   12:AE:5D:69:3D:E5:CF:5A:AE:DE:8F:40:B1:29:AA:ED:FE:C3:42:26
Certificate issuer:       /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial:       0191ADE885CE4E3412E424DCA103C5A786B4
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/Eq5daT3lz1qu3o9AsSmq7f7DQiY.roa
Signing time:             Sun 01 Sep 2024 14:06:22 +0000
ROA not before:           Sun 01 Sep 2024 14:06:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49581
IP address blocks:        2a10:3b00::/29 maxlen: 32

Validation:               Failed, certificate revoked on Tue 01 Oct 2024 21:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:ad:e8:85:ce:4e:34:12:e4:24:dc:a1:03:c5:a7:86:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
        Validity
            Not Before: Sep  1 14:06:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=12ae5d693de5cf5aaede8f40b129aaedfec34226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9f:6f:f7:26:69:37:82:fe:15:bd:e2:0a:16:
                    d5:58:86:67:2e:65:7e:26:ed:4c:69:80:4f:46:6f:
                    29:28:85:7c:e3:d6:54:30:c6:18:ae:34:61:7d:68:
                    5e:40:a0:f6:d2:13:ce:2a:23:ea:f9:c4:06:bf:d2:
                    c8:1f:8d:df:f8:52:79:d3:8e:27:26:e3:55:e3:3f:
                    38:8b:54:66:48:41:b1:64:6a:aa:56:25:09:7e:75:
                    56:86:ea:f6:c6:14:57:a9:5b:6d:0c:9b:b8:14:17:
                    7c:a1:f1:e7:dc:4d:08:61:1a:94:59:0d:c9:d0:35:
                    cc:f1:12:1d:4c:48:a2:77:89:ac:e5:6a:54:e3:50:
                    ea:2c:9c:0e:1f:46:16:8a:e9:b2:da:f0:44:af:d0:
                    9e:40:01:d7:a2:4c:e8:7d:cc:67:4c:37:a5:ba:51:
                    34:9c:9e:02:b7:3c:c4:d7:bf:06:19:a6:30:63:b7:
                    5a:8e:6f:a5:e4:55:be:78:e2:bd:87:48:ab:1b:a1:
                    e0:dd:b4:69:1d:1b:9e:49:cd:bc:04:6c:33:60:9d:
                    40:6e:e3:59:94:01:86:cb:d0:b8:b5:15:1b:ab:65:
                    fa:1d:84:5f:44:ed:ef:46:7a:41:ce:95:d3:d8:b3:
                    b9:7f:de:f8:f9:02:83:ed:88:bb:73:59:ba:0b:e4:
                    ef:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AE:5D:69:3D:E5:CF:5A:AE:DE:8F:40:B1:29:AA:ED:FE:C3:42:26
            X509v3 Authority Key Identifier:
                keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/Eq5daT3lz1qu3o9AsSmq7f7DQiY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:3b00::/29

    Signature Algorithm: sha256WithRSAEncryption
         0d:40:e3:a6:d4:93:25:1d:6c:6d:2e:c6:6c:3f:c3:c9:51:1d:
         c7:af:59:98:11:af:25:a3:8d:da:6e:2f:56:36:c2:e0:52:94:
         f1:5d:a5:66:ae:75:6f:c5:cd:9e:07:5c:0c:dd:18:b7:4e:61:
         3c:93:61:5b:5b:8e:e2:a6:9b:b9:7a:9a:71:08:5d:5c:0e:40:
         e2:80:92:c4:e3:94:72:11:26:71:83:34:c7:8d:d3:fa:a2:4a:
         49:74:0c:ea:a6:4a:dd:07:87:94:bc:aa:d3:56:74:67:59:03:
         35:de:4f:73:e1:8d:02:79:82:1b:b3:b7:6d:d5:39:81:72:6c:
         f8:f1:82:8e:36:61:ef:52:49:cd:71:4a:53:e6:be:74:dc:80:
         3d:ea:26:c5:77:62:0f:03:cf:65:63:79:92:c6:e4:df:4e:d5:
         70:dd:70:21:09:2e:80:b8:67:26:a7:48:9f:29:87:6f:58:4d:
         23:26:28:3e:64:83:0f:d6:c0:80:e8:f2:6c:90:b6:ce:97:22:
         6b:51:53:51:a2:90:d0:e5:63:ce:f5:55:75:7f:18:01:55:9b:
         e9:56:21:b4:85:86:26:c5:f9:fa:a1:52:59:9e:94:9b:32:fe:
         92:47:67:5c:f0:99:4e:67:a7:4a:65:bf:80:1b:fc:87:68:02:
         a2:dd:76:27
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZGt6IXOTjQS5CTcoQPFp4a0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDg0OTU2NzM2NTQ5ZWFiM2IwNmUyM2FhYjg5Y2E1OTkz
YTgwNzYwHhcNMjQwOTAxMTQwNjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmFlNWQ2OTNkZTVjZjVhYWVkZThmNDBiMTI5YWFlZGZlYzM0MjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ9v9yZpN4L+Fb3iChbVWIZnLmV+
Ju1MaYBPRm8pKIV849ZUMMYYrjRhfWheQKD20hPOKiPq+cQGv9LIH43f+FJ5044n
JuNV4z84i1RmSEGxZGqqViUJfnVWhur2xhRXqVttDJu4FBd8ofHn3E0IYRqUWQ3J
0DXM8RIdTEiid4ms5WpU41DqLJwOH0YWiumy2vBEr9CeQAHXokzofcxnTDelulE0
nJ4CtzzE178GGaYwY7dajm+l5FW+eOK9h0irG6Hg3bRpHRueSc28BGwzYJ1AbuNZ
lAGGy9C4tRUbq2X6HYRfRO3vRnpBzpXT2LO5f974+QKD7Yi7c1m6C+TvCQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBKuXWk95c9art6PQLEpqu3+w0ImMB8GA1UdIwQY
MBaAFCdISVZzZUnqs7BuI6q4nKWZOoB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBoSlZuTmxTZXF6c0c0anFyaWNwWms2Z0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZWU1NzgtZjJjNi00MWMwLWI3Mjgt
YWQxNjNhYjM1NGM4LzEvRXE1ZGFUM2x6MXF1M285QXNTbXE3ZjdEUWlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZWU1NzgtZjJjNi00MWMwLWI3MjgtYWQxNjNhYjM1NGM4
LzEvSjBoSlZuTmxTZXF6c0c0anFyaWNwWms2Z0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhA7ADAN
BgkqhkiG9w0BAQsFAAOCAQEADUDjptSTJR1sbS7GbD/DyVEdx69ZmBGvJaON2m4v
VjbC4FKU8V2lZq51b8XNngdcDN0Yt05hPJNhW1uO4qabuXqacQhdXA5A4oCSxOOU
chEmcYM0x43T+qJKSXQM6qZK3QeHlLyq01Z0Z1kDNd5Pc+GNAnmCG7O3bdU5gXJs
+PGCjjZh71JJzXFKU+a+dNyAPeomxXdiDwPPZWN5ksbk307VcN1wIQkugLhnJqdI
nymHb1hNIyYoPmSDD9bAgOjybJC2zpcia1FTUaKQ0OVjzvVVdX8YAVWb6VYhtIWG
JsX5+qFSWZ6UmzL+kkdnXPCZTmenSmW/gBv8h2gCot12Jw==
Generated at Wed Oct 2 00:37:52 2024 by rpki-client on console-ams.rpki-client.org