Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/gCcAKnTZeX6u2a4DK_jJ7hGH9z8.roa
File:                     gCcAKnTZeX6u2a4DK_jJ7hGH9z8.roa (raw, json)
Hash identifier:          DOZ54MWyhpyC8FQqS9MQfsGh17J//yTk3rXZqBiFN2A=
Subject key identifier:   80:27:00:2A:74:D9:79:7E:AE:D9:AE:03:2B:F8:C9:EE:11:87:F7:3F
Certificate issuer:       /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial:       018B1B456A8AB975DD172750554A96488300
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/gCcAKnTZeX6u2a4DK_jJ7hGH9z8.roa
Signing time:             Tue 10 Oct 2023 20:26:55 +0000
ROA not before:           Tue 10 Oct 2023 20:26:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51345
IP address blocks:        2a13:1c40::/40 maxlen: 48
                          2a13:1c47:fff0::/44 maxlen: 48

Validation:               Failed, certificate revoked on Mon 30 Oct 2023 22:36:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:1b:45:6a:8a:b9:75:dd:17:27:50:55:4a:96:48:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
        Validity
            Not Before: Oct 10 20:26:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8027002a74d9797eaed9ae032bf8c9ee1187f73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e8:d0:ed:15:58:ed:ff:7e:ca:94:c0:0e:70:
                    cf:dd:a7:9e:a4:4f:fc:30:90:3b:61:98:d4:54:d8:
                    86:a0:4f:70:b2:d3:ef:ee:56:b6:8a:d3:dd:b4:44:
                    f9:16:88:8b:ba:f7:9b:d7:09:87:3e:29:91:37:af:
                    76:5a:ff:2b:53:21:5a:49:03:38:84:1b:e2:28:76:
                    2b:f1:a8:96:dc:c4:81:8c:ae:20:1f:b9:1b:bb:d0:
                    08:40:f8:4b:7d:8b:2d:bf:e0:b1:07:95:17:12:14:
                    d7:9a:f8:bb:56:25:0b:c3:2c:de:93:64:5e:21:22:
                    06:cf:75:81:28:64:ff:a9:4a:72:39:2f:f8:a0:f2:
                    aa:c6:ce:d5:24:e9:c4:bd:92:37:ec:09:07:b3:cd:
                    99:2c:22:a8:93:f8:82:0c:7d:3f:50:54:9d:01:da:
                    b2:69:df:b4:10:6c:7e:11:9d:2d:91:18:0c:80:88:
                    7a:73:46:13:ec:57:c3:8a:a4:f2:40:f5:43:56:dc:
                    ca:54:0a:44:d2:5e:37:aa:6d:1c:b0:05:bb:4d:40:
                    dd:7d:33:8c:c1:74:21:54:0a:68:c2:62:c5:31:fb:
                    e9:40:20:93:07:ff:bf:99:f3:fe:d5:a5:0c:c4:2b:
                    9b:b1:9d:b8:21:11:b3:68:03:21:e5:2f:24:94:b4:
                    80:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:27:00:2A:74:D9:79:7E:AE:D9:AE:03:2B:F8:C9:EE:11:87:F7:3F
            X509v3 Authority Key Identifier:
                keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/gCcAKnTZeX6u2a4DK_jJ7hGH9z8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:1c40::/40
                  2a13:1c47:fff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         a3:0b:d1:93:72:54:a9:65:ff:d3:9e:a6:fd:af:bf:59:32:02:
         2a:e1:2d:d5:19:02:61:70:02:0f:f7:3e:c6:27:5b:45:7e:9a:
         45:44:a0:e1:79:18:6e:82:96:3f:c3:58:2f:e9:5e:27:9e:6b:
         8b:43:5f:d8:b5:e1:db:2b:26:32:7e:1e:47:01:ab:2f:2e:a2:
         be:af:17:ef:90:c5:50:f1:1e:7a:ad:17:cd:2d:c8:24:97:4c:
         0b:ee:b5:f1:b3:e0:d6:e8:c5:aa:a4:4b:31:9e:a3:29:63:ac:
         c7:da:81:c0:e8:38:56:07:7a:72:f2:b4:4a:c0:93:22:0e:b4:
         4f:1d:e8:9d:15:a4:f2:98:0d:73:54:ed:13:04:7e:59:77:33:
         35:fa:b4:0a:ce:32:75:b0:88:db:25:2e:2a:c0:d7:17:ce:fb:
         a8:2c:0a:78:34:dd:1f:dd:ce:37:c4:cf:fb:04:0a:ee:b5:de:
         d0:cc:55:ee:65:a6:d2:b1:e2:77:7d:3c:19:c1:86:4d:2a:d9:
         d9:94:7a:11:c2:55:67:78:89:77:9a:4e:99:2c:5e:5b:18:b1:
         ed:d6:fc:81:56:7d:5e:a0:f3:5d:68:a8:d1:b6:43:1e:01:2d:
         4a:5a:b5:f9:70:98:c8:42:44:9c:a0:73:43:6e:b0:c3:91:aa:
         2c:cf:70:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:44 2024 by rpki-client on console-fra.rpki-client.org