Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/4ljQYRt75RaFvCoigauZKK_4Rs8.roa
File:                     4ljQYRt75RaFvCoigauZKK_4Rs8.roa (raw, json)
Hash identifier:          zJxZveNZZ4V4Tg6VZSynXCneo3C5OhE1pzrgZuPupRA=
Subject key identifier:   E2:58:D0:61:1B:7B:E5:16:85:BC:2A:22:81:AB:99:28:AF:F8:46:CF
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       018F8134AF63985426A6F1C323D5666B702B
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/4ljQYRt75RaFvCoigauZKK_4Rs8.roa
Signing time:             Thu 16 May 2024 11:41:04 +0000
ROA not before:           Thu 16 May 2024 11:41:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215158
IP address blocks:        2a12:a880::/29 maxlen: 29
                          2a12:e700::/29 maxlen: 29
                          2a12:ed80::/29 maxlen: 29

Validation:               Failed, certificate revoked on Thu 16 May 2024 19:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:81:34:af:63:98:54:26:a6:f1:c3:23:d5:66:6b:70:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: May 16 11:41:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e258d0611b7be51685bc2a2281ab9928aff846cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1a:2b:e2:26:03:8a:3f:b0:70:d1:31:3a:62:
                    79:eb:78:1b:be:71:90:ab:85:7e:ee:a8:21:61:89:
                    7e:a9:d9:0e:22:14:22:6b:6b:7c:0b:99:43:da:af:
                    83:99:e8:72:9d:c2:78:f7:bf:33:17:70:98:9c:10:
                    60:64:89:a1:4c:f3:f5:eb:bc:14:be:6e:48:d9:76:
                    1a:0d:72:0e:81:56:31:32:80:fe:d5:71:73:e3:15:
                    e9:da:8a:68:ad:18:67:9d:fc:bd:53:c9:49:6b:b8:
                    89:76:59:d7:14:47:bb:3d:7e:98:d2:0c:0c:55:c5:
                    6f:35:e8:26:b4:41:46:da:92:80:9c:de:bb:75:26:
                    e6:b1:41:7e:17:5f:49:a8:94:8d:5e:e9:8e:dd:d1:
                    8b:c3:80:bd:60:7b:6a:5f:87:8f:5b:ec:a3:d4:c8:
                    c8:36:48:e0:ae:ff:bf:97:82:05:d8:6c:61:c1:9a:
                    f1:82:18:11:b1:46:eb:3c:61:83:17:a0:d0:d9:49:
                    3f:a1:e5:94:eb:b5:32:fc:2f:59:1d:c1:fb:79:2c:
                    13:68:69:ce:43:3a:65:16:78:76:9b:e0:68:7e:ba:
                    3c:75:78:76:ca:b2:b6:30:ca:7a:c7:f2:e1:ac:30:
                    a4:9f:bd:07:b7:ff:a0:1e:cf:8f:ec:2a:3e:dd:57:
                    77:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:58:D0:61:1B:7B:E5:16:85:BC:2A:22:81:AB:99:28:AF:F8:46:CF
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/4ljQYRt75RaFvCoigauZKK_4Rs8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:a880::/29
                  2a12:e700::/29
                  2a12:ed80::/29

    Signature Algorithm: sha256WithRSAEncryption
         35:20:b9:e2:37:58:51:22:32:fe:cb:49:e6:de:77:17:0e:2d:
         7f:42:d7:70:be:7c:fc:52:fb:ee:11:2d:f1:15:20:ce:6b:60:
         35:00:74:1d:aa:c5:14:97:9a:bf:7a:49:1f:c1:88:73:b9:cf:
         71:dd:89:8e:ed:3b:1c:f5:a6:9c:71:08:43:a8:78:a3:bd:32:
         31:9e:9b:23:37:2a:0e:fa:3a:06:48:6e:24:26:25:56:59:b7:
         59:7f:b0:70:3f:3a:34:d1:e0:7f:0b:8b:22:44:d1:85:13:94:
         09:fe:53:7c:07:3f:4e:bc:d1:fc:23:71:05:50:00:00:06:c7:
         18:a3:d4:e3:ef:82:e3:c5:a9:5c:9a:66:1e:e0:7e:a2:d4:0c:
         28:9e:f3:bc:61:ed:2b:77:e5:19:95:22:6f:e7:d4:22:67:31:
         a7:2f:32:79:d3:f8:b0:1d:5c:7c:b6:ac:1d:6a:83:0b:42:72:
         84:49:1e:77:3c:65:80:e0:bb:a2:6a:4f:64:c7:bf:e1:2a:c0:
         af:df:81:12:ba:c9:3d:8e:19:c4:54:17:8b:2e:ea:76:48:61:
         74:66:88:be:9c:32:7f:69:d5:a1:50:51:b6:49:68:b6:d2:bf:
         24:67:08:c6:d2:07:5e:44:8c:49:62:34:36:8f:ab:6b:20:eb:
         88:c4:c0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:04 2024 by rpki-client on console-ams.rpki-client.org