Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/1-Pw9zVN-knZ2Y1P5eVeTRs9u6_Y.roa
File:                     1-Pw9zVN-knZ2Y1P5eVeTRs9u6_Y.roa (raw, json)
Hash identifier:          PBnUW/nj65ZWPXoNplJytkwhl/O0aXGHcBwC0vd+GYU=
Subject key identifier:   F8:FC:3D:CD:53:7E:92:76:76:63:53:F9:79:57:93:46:CF:6E:EB:F6
Certificate issuer:       /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial:       01886E25B4CD5A1282F6FDC6274297D67277
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/1-Pw9zVN-knZ2Y1P5eVeTRs9u6_Y.roa
Signing time:             Tue 30 May 2023 19:32:24 +0000
ROA not before:           Tue 30 May 2023 19:32:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        2a0a:f581::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:6e:25:b4:cd:5a:12:82:f6:fd:c6:27:42:97:d6:72:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
        Validity
            Not Before: May 30 19:32:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f8fc3dcd537e9276766353f979579346cf6eebf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4e:3e:55:bb:34:dd:99:5d:bf:7a:aa:81:d4:
                    33:ff:c8:bb:79:fe:95:88:e0:9f:fe:06:7d:a9:ba:
                    97:fe:20:9d:c9:a8:c7:82:ec:a5:bc:9c:56:6b:61:
                    cf:93:66:86:22:c3:ce:7c:9f:9c:e0:14:63:91:d3:
                    e7:22:9c:0c:a7:ac:8d:19:4b:b3:09:d2:dc:e6:b6:
                    f4:da:cf:2f:02:91:18:c2:1b:97:54:53:bd:39:9c:
                    36:3f:4b:a7:22:4d:b4:51:80:29:1a:20:6b:6e:c3:
                    46:08:15:12:d9:6a:44:4e:ba:ad:65:d9:2a:49:e1:
                    2a:bd:b2:2a:9b:25:cc:f4:5e:3d:3f:91:70:f9:06:
                    8f:4d:99:b2:07:10:90:13:c5:20:5e:5b:97:b9:81:
                    af:28:24:7e:ad:9b:77:bf:f0:a9:94:6c:16:92:0a:
                    8b:59:76:90:3c:c7:8b:93:2c:19:54:2d:94:5b:f7:
                    e6:ca:83:91:bb:ae:b3:40:af:96:9b:e6:ca:46:e8:
                    28:47:36:5f:a6:b4:0e:ee:4d:bc:a9:80:7d:60:c0:
                    d3:c3:35:05:59:6e:32:c8:97:17:c2:27:22:c5:a4:
                    12:52:af:dc:e3:8f:44:7b:dd:98:89:e9:55:65:5f:
                    a0:12:23:64:e1:d0:6d:6b:20:f8:4d:48:aa:80:c1:
                    8d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FC:3D:CD:53:7E:92:76:76:63:53:F9:79:57:93:46:CF:6E:EB:F6
            X509v3 Authority Key Identifier:
                keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/1-Pw9zVN-knZ2Y1P5eVeTRs9u6_Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:f581::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:c5:ef:cd:57:89:f3:ee:32:1d:64:03:ab:5e:3e:cb:16:16:
         08:24:dc:dc:de:93:d6:96:0f:c0:dd:e2:d2:97:ee:d3:e1:6a:
         17:cc:61:77:8e:fb:34:72:74:ea:1e:d7:61:c8:a0:f8:ac:01:
         36:16:db:ed:85:4c:b5:67:6e:ab:71:34:f3:24:bd:b7:46:2d:
         dc:4d:71:28:e6:b5:19:67:1b:69:db:32:06:1b:c3:35:e0:32:
         29:42:05:67:79:cb:c4:14:e9:06:f6:30:01:e0:56:f0:bd:48:
         21:3c:df:f3:6a:08:e9:ca:50:a6:16:b4:1f:27:91:75:41:1f:
         81:8a:92:93:e7:99:32:bd:0b:41:8b:51:ba:d6:47:14:fb:f7:
         82:89:60:ed:b8:fb:ba:53:fb:63:79:3c:b0:94:48:39:72:1f:
         86:26:bf:18:72:68:f0:b4:4b:9d:fa:b6:c6:61:62:5e:d4:ab:
         e0:5d:cb:0a:9e:1a:57:29:a2:6a:89:39:49:ad:41:4d:b1:b2:
         fa:66:6f:80:ff:eb:d1:56:6f:43:77:c8:b8:4f:94:c7:2f:d8:
         44:0e:73:76:27:16:4c:b2:16:63:ed:08:97:12:67:42:a2:6d:
         ec:4e:63:01:a9:22:4e:1d:ab:03:1b:3e:58:cc:df:f0:67:bc:
         f7:b8:e3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:18 2024 by rpki-client on console-ams.rpki-client.org