Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/lqHfMeinmW6l7HvlBci5LEl_7Ps.roa
File:                     lqHfMeinmW6l7HvlBci5LEl_7Ps.roa (raw, json)
Hash identifier:          Fn75EcMQM53IV7CRqBXOYp346aeWcv0d1rpvgPy1Gfc=
Subject key identifier:   96:A1:DF:31:E8:A7:99:6E:A5:EC:7B:E5:05:C8:B9:2C:49:7F:EC:FB
Certificate issuer:       /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial:       018C1C55EA59FA20ED2F52068DB18D06349E
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/lqHfMeinmW6l7HvlBci5LEl_7Ps.roa
Signing time:             Wed 29 Nov 2023 18:27:21 +0000
ROA not before:           Wed 29 Nov 2023 18:27:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     52041
IP address blocks:        2a11:8f83::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:1c:55:ea:59:fa:20:ed:2f:52:06:8d:b1:8d:06:34:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
        Validity
            Not Before: Nov 29 18:27:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=96a1df31e8a7996ea5ec7be505c8b92c497fecfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f4:4d:0c:c6:b3:8a:c5:55:44:74:e1:32:53:
                    f3:4c:e0:8d:dc:2f:c3:ea:8a:2b:8b:f1:b9:00:fa:
                    f6:fe:70:25:21:34:3e:e7:16:aa:9f:9d:cd:1d:80:
                    c7:5f:6e:cc:91:bb:15:73:c9:32:d9:de:b0:48:72:
                    16:33:40:54:f1:77:53:4a:35:48:39:cf:85:50:d0:
                    03:73:d5:61:89:9d:c1:6b:18:92:ca:e1:92:af:41:
                    04:fc:c4:4b:3d:54:88:1f:92:08:57:20:42:bf:3a:
                    38:07:ef:13:4c:14:ff:a9:40:64:b0:b9:04:e8:73:
                    75:b2:42:a0:19:79:93:07:72:91:92:f0:94:65:e0:
                    fa:1b:bc:71:c7:6e:a0:d0:fe:ce:45:6e:7c:25:94:
                    48:92:0c:cb:31:42:ab:49:72:c4:88:9c:78:76:cc:
                    77:8b:fb:d2:ea:04:c6:0e:95:82:cb:07:73:0f:9f:
                    12:48:37:db:ee:74:b5:7f:58:a8:76:63:d6:b5:7f:
                    58:c8:50:37:b1:98:15:4d:96:1e:a3:c7:34:51:04:
                    3a:a3:f9:91:b4:8e:8b:b2:f3:eb:7a:47:a1:57:57:
                    af:bd:56:45:70:46:64:cc:5e:4f:e5:f8:9f:d6:48:
                    f1:92:9a:c3:bc:a3:70:31:3e:4f:df:e6:13:67:a4:
                    8f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A1:DF:31:E8:A7:99:6E:A5:EC:7B:E5:05:C8:B9:2C:49:7F:EC:FB
            X509v3 Authority Key Identifier:
                keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/lqHfMeinmW6l7HvlBci5LEl_7Ps.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:8f83::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:8e:25:58:da:c7:60:63:27:63:72:89:56:80:b4:a9:10:ee:
         d6:da:ec:62:86:51:4d:20:47:57:60:49:51:91:ca:25:a4:b7:
         8e:3e:a2:df:17:59:4d:a9:3d:88:59:c0:21:83:4b:1b:91:2c:
         83:a1:5c:2a:2f:e8:6d:b0:d5:37:91:b2:27:d9:c5:64:3f:63:
         f1:d9:99:ed:f6:91:89:9c:58:f0:22:e6:0f:ea:2c:4d:8e:10:
         81:ea:68:9d:8d:31:a7:04:39:9f:10:72:24:d0:d3:da:c0:3a:
         26:42:1a:58:2e:7e:51:68:1c:6b:6f:cb:34:94:bc:da:2f:8f:
         6a:f8:83:77:0d:f3:31:23:fa:4a:0c:5c:5f:40:e7:22:90:6c:
         98:99:53:33:49:d5:18:92:49:aa:43:65:7d:fb:12:b2:eb:d9:
         c7:ed:00:e5:f4:bf:4f:a2:d0:16:bb:59:45:8e:d4:67:6e:e1:
         29:4a:d6:9f:6f:ef:b7:a0:3e:4a:71:ec:7b:94:65:0f:c8:b2:
         78:52:f5:5a:da:fb:92:fc:4e:35:94:7a:39:f4:08:83:c4:d2:
         a3:f0:57:69:44:50:fc:7d:7c:3e:a4:b6:ad:58:26:37:1c:ae:
         6c:47:f1:71:05:69:89:bc:63:69:c0:61:bf:5a:34:3f:ae:e5:
         6a:7d:77:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:18 2024 by rpki-client on console-ams.rpki-client.org