Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/7MbruOmUtN9PjPdyYZ5EGd-59nE.roa
File:                     7MbruOmUtN9PjPdyYZ5EGd-59nE.roa (raw, json)
Hash identifier:          XsUiDU3d7G4/T9NaEQt+IQWFLgSb7qDwJBm+B88wpB0=
Subject key identifier:   EC:C6:EB:B8:E9:94:B4:DF:4F:8C:F7:72:61:9E:44:19:DF:B9:F6:71
Certificate issuer:       /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial:       018B1896C4EE0367CC09FB2817D1CDD6DFD0
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/7MbruOmUtN9PjPdyYZ5EGd-59nE.roa
Signing time:             Tue 10 Oct 2023 07:56:55 +0000
ROA not before:           Tue 10 Oct 2023 07:56:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216193
IP address blocks:        2a13:1c47:c0d0::/44 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:18:96:c4:ee:03:67:cc:09:fb:28:17:d1:cd:d6:df:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
        Validity
            Not Before: Oct 10 07:56:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ecc6ebb8e994b4df4f8cf772619e4419dfb9f671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ee:fb:ec:d0:5a:c6:8e:25:b4:2f:90:d6:f9:
                    0c:c1:56:e5:20:96:d3:5e:82:e8:96:e0:a2:70:2f:
                    a5:36:5e:0a:6d:af:f8:34:fc:61:8c:4f:fd:d1:f8:
                    6e:af:c9:c7:98:ac:f5:bc:79:e4:2f:c5:7c:84:0e:
                    a3:9c:c7:de:65:93:24:56:26:94:f4:a4:e4:ac:cd:
                    3c:1e:b4:22:2f:45:9f:3d:ed:fd:00:47:53:91:31:
                    e8:53:61:7c:ee:ae:7d:c0:13:83:5f:a3:43:33:66:
                    df:6d:e3:d7:79:03:a2:ba:2b:6f:fe:61:bb:4e:6e:
                    05:29:c7:be:be:32:9f:19:17:e5:44:93:f4:b4:9c:
                    1b:7a:3d:e3:6e:ec:85:09:5c:5c:b1:fa:b5:9d:1e:
                    8d:04:d5:bf:98:40:f7:d0:d0:66:85:16:ec:12:bf:
                    7d:4a:5f:12:4f:ee:fd:d4:0a:b7:e6:a1:61:a6:98:
                    2d:19:6e:c1:e5:a5:92:c0:67:56:57:20:24:b7:ee:
                    a8:51:43:57:92:30:72:31:1d:e1:da:1b:77:26:2c:
                    38:98:c5:51:b0:e5:d0:f6:51:87:16:b5:30:7d:70:
                    ed:6c:4b:ca:75:94:ef:69:f6:4a:18:1c:e9:73:f6:
                    96:01:e0:63:56:af:ba:9f:db:ae:fa:9e:3e:43:3a:
                    74:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C6:EB:B8:E9:94:B4:DF:4F:8C:F7:72:61:9E:44:19:DF:B9:F6:71
            X509v3 Authority Key Identifier:
                keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/7MbruOmUtN9PjPdyYZ5EGd-59nE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:1c47:c0d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         34:0a:06:77:45:c9:19:45:6e:fa:4d:99:b3:c5:2e:6f:7b:79:
         b0:b4:6c:db:01:98:54:8a:b3:fc:f4:cf:a6:65:75:dd:a3:b8:
         17:61:b5:0a:aa:b2:98:5a:e5:ce:a2:43:71:64:20:7b:17:5c:
         92:5d:ad:a7:cc:69:76:02:c9:e3:59:e9:2e:f4:1c:64:3a:84:
         67:61:f3:ea:01:14:8a:85:6e:46:9b:a6:45:ea:f3:b6:ba:4d:
         da:97:cb:e8:f5:a2:b8:3c:7a:88:90:2c:63:5a:9a:99:c9:f6:
         65:75:35:58:19:b1:18:cd:d6:b8:5d:35:01:d9:d1:51:26:eb:
         b6:f3:a3:af:d5:fe:c2:68:81:3e:7e:b2:e9:c5:d9:47:66:d3:
         57:5b:9a:d8:67:c7:b9:75:2e:1c:b0:fa:04:00:a7:42:71:64:
         c3:c6:b2:16:5b:49:bd:c6:42:4b:4d:e4:8f:22:e7:fb:b8:97:
         0f:88:95:cb:bd:44:60:17:19:55:d0:cf:3d:cf:2f:3a:24:8c:
         e7:fb:a9:d0:5b:61:1b:22:bd:88:f5:7a:56:f2:fb:a7:ca:cc:
         fa:24:8f:19:05:cf:89:c9:31:d5:38:30:15:12:4d:d4:5e:83:
         5b:16:d1:da:1c:b8:e1:20:a5:cc:1e:ed:bd:2b:77:bc:dc:81:
         63:2a:2b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:44 2024 by rpki-client on console-fra.rpki-client.org