Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/21f1ef-d6f5-4ad4-ad11-af4c1de0249d/1/q4dMHpvfN-12D2lX7JA_29SlymE.roa
File:                     q4dMHpvfN-12D2lX7JA_29SlymE.roa (raw, json)
Hash identifier:          c06kxTd65qDk7q8eiHIwpTosNu9kjb12bAQbB5pIpw8=
Subject key identifier:   AB:87:4C:1E:9B:DF:37:ED:76:0F:69:57:EC:90:3F:DB:D4:A5:CA:61
Certificate issuer:       /CN=77c3131201b08679481a03a494a1367cae81ea03
Certificate serial:       01856CCB1075E469601F32B8E0D3FF63B847
Authority key identifier: 77:C3:13:12:01:B0:86:79:48:1A:03:A4:94:A1:36:7C:AE:81:EA:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8MTEgGwhnlIGgOklKE2fK6B6gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/21f1ef-d6f5-4ad4-ad11-af4c1de0249d/1/q4dMHpvfN-12D2lX7JA_29SlymE.roa
Signing time:             Sun 01 Jan 2023 10:05:25 +0000
ROA not before:           Sun 01 Jan 2023 10:05:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44406
IP address blocks:        2a03:7540::/32 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:29:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:cb:10:75:e4:69:60:1f:32:b8:e0:d3:ff:63:b8:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c3131201b08679481a03a494a1367cae81ea03
        Validity
            Not Before: Jan  1 10:05:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ab874c1e9bdf37ed760f6957ec903fdbd4a5ca61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3e:17:45:f4:8b:e2:d1:40:7e:52:2f:c3:f3:
                    c4:04:10:fb:a2:4d:f2:99:56:66:5f:3f:a9:33:a7:
                    82:43:5c:57:cf:a4:80:aa:2b:a5:d9:83:c1:7c:60:
                    3c:9e:4d:fc:cc:31:80:33:8d:76:35:b5:8a:3f:4a:
                    52:5b:be:ec:22:8f:ab:2c:c2:40:27:7f:8c:c6:91:
                    76:9c:20:6f:0b:b8:e4:54:5d:39:bd:75:44:3a:9e:
                    28:16:2b:21:05:31:e6:71:f4:1e:d0:09:ca:ac:8a:
                    73:07:e5:7d:9c:52:11:c3:26:79:81:65:74:fb:31:
                    c4:fd:00:69:6d:1d:e8:93:3d:ca:52:25:0b:f9:cb:
                    49:b0:66:12:d1:26:d0:d0:24:a2:c4:19:b2:66:25:
                    3c:2e:87:18:17:ff:b9:b6:47:99:61:a4:29:c8:41:
                    84:5c:9b:61:75:d8:9d:2e:f9:7f:33:e3:5c:3b:ee:
                    05:91:c8:b1:93:9a:d7:11:41:9e:3a:10:27:35:20:
                    f3:ab:6c:48:95:49:5d:ed:ad:e4:fb:05:08:ef:6f:
                    2f:32:3d:e0:30:e4:f1:25:43:e4:5c:72:e5:c0:1c:
                    df:39:7c:74:fc:5e:ac:e3:70:7a:09:f0:74:43:66:
                    e1:2b:1f:0c:10:5d:06:15:ea:69:07:9f:6d:b7:7d:
                    6b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:87:4C:1E:9B:DF:37:ED:76:0F:69:57:EC:90:3F:DB:D4:A5:CA:61
            X509v3 Authority Key Identifier:
                keyid:77:C3:13:12:01:B0:86:79:48:1A:03:A4:94:A1:36:7C:AE:81:EA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8MTEgGwhnlIGgOklKE2fK6B6gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/21f1ef-d6f5-4ad4-ad11-af4c1de0249d/1/q4dMHpvfN-12D2lX7JA_29SlymE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/21f1ef-d6f5-4ad4-ad11-af4c1de0249d/1/d8MTEgGwhnlIGgOklKE2fK6B6gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:7540::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:bf:20:ce:40:1a:88:57:7b:d1:fe:54:b2:f3:6d:1f:ac:c1:
         c6:82:3a:df:79:00:16:4e:66:90:c4:90:73:07:e2:53:1a:29:
         21:65:84:d5:08:71:b4:6b:36:8c:f9:80:fc:a7:6b:83:d5:65:
         7d:b8:06:71:23:75:b8:d8:d6:bf:6b:53:b6:e4:84:d4:61:ee:
         93:77:5e:77:fe:54:6b:b3:22:35:10:45:08:c3:68:64:10:0e:
         1c:e8:c0:85:3c:64:dc:0a:17:3b:4d:05:0f:cb:9b:89:d9:2d:
         2e:51:73:1e:db:40:9b:25:fd:88:10:17:29:7d:54:d8:ec:cb:
         a2:8b:d6:0e:fe:97:a2:2f:4d:b3:bb:1e:80:14:a3:b2:45:0c:
         5f:b2:3b:c5:85:84:01:40:6c:52:3c:13:0a:bc:9e:83:de:29:
         96:78:37:a6:8b:29:2a:8a:fa:d4:75:58:95:88:84:07:a5:3b:
         2b:6d:d2:7b:7c:8f:67:93:a9:d0:6b:9f:f6:49:ad:7c:64:47:
         b8:23:d6:82:48:ae:b2:dd:ad:e0:37:8d:e7:52:2e:e8:ac:d7:
         4a:8b:70:5c:26:3d:28:db:9e:23:45:4a:cd:4f:08:f9:48:49:
         de:6a:e9:9e:80:98:40:f7:06:62:34:57:d4:74:11:84:b9:31:
         94:27:fa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:57 2024 by rpki-client on console-ams.rpki-client.org