Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/uoF7mJ_sqE8d4_lfDHJmmtzGwJk.roa
File:                     uoF7mJ_sqE8d4_lfDHJmmtzGwJk.roa (raw, json)
Hash identifier:          wDXJSX7C1rpUp/0PocNkpfV7CXTw3LJPzUIuelP+BpU=
Subject key identifier:   BA:81:7B:98:9F:EC:A8:4F:1D:E3:F9:5F:0C:72:66:9A:DC:C6:C0:99
Certificate issuer:       /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial:       018E14B6F7DBC6204AB7B3F7CBCD6253840F
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/uoF7mJ_sqE8d4_lfDHJmmtzGwJk.roa
Signing time:             Wed 06 Mar 2024 17:01:59 +0000
ROA not before:           Wed 06 Mar 2024 17:01:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     43639
IP address blocks:        2a02:26f0:80::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 27 Mar 2024 11:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:14:b6:f7:db:c6:20:4a:b7:b3:f7:cb:cd:62:53:84:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
        Validity
            Not Before: Mar  6 17:01:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ba817b989feca84f1de3f95f0c72669adcc6c099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a5:07:0b:00:4a:5c:f0:88:20:14:a5:c6:7e:
                    a0:d2:8c:72:90:45:8b:36:dd:2a:3c:68:6d:fa:5f:
                    d3:df:9e:ab:4e:4a:e0:f4:ce:3f:33:ec:12:9d:26:
                    c2:f9:23:28:92:f8:f9:7b:ae:fd:6f:5d:0c:9f:fc:
                    0f:7b:ab:32:7b:89:9d:33:09:8d:f4:00:9a:38:c9:
                    a8:63:e7:9a:23:cb:0e:be:72:a7:69:b0:6d:a3:01:
                    2b:35:b4:81:da:21:67:d9:82:a0:8a:ee:38:0a:eb:
                    91:12:b7:66:c6:35:b2:c8:1d:2e:c9:67:ba:57:99:
                    eb:70:a0:ac:93:7e:a3:ea:d0:92:92:c6:66:35:5a:
                    50:4b:38:18:5b:46:ae:7a:c9:b5:4c:8b:df:a3:a2:
                    8b:f5:9f:3a:db:f4:bc:6e:9e:17:48:ab:73:2a:cb:
                    c2:30:24:62:cb:54:7d:8d:0e:95:a6:dc:84:f4:5a:
                    77:dd:73:fb:b4:d8:f9:45:a1:b5:70:5e:c2:3e:2d:
                    56:30:ea:79:38:15:bd:e8:81:bd:f0:e4:dd:09:b5:
                    36:ce:8b:06:3d:74:0a:e4:b6:e9:d0:96:6e:c7:19:
                    5d:3e:d2:ee:a4:4c:98:e7:8a:20:7c:80:05:5c:3d:
                    cf:4b:36:90:14:fb:dc:ad:68:5d:e4:0e:a7:10:79:
                    2f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:81:7B:98:9F:EC:A8:4F:1D:E3:F9:5F:0C:72:66:9A:DC:C6:C0:99
            X509v3 Authority Key Identifier:
                keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/uoF7mJ_sqE8d4_lfDHJmmtzGwJk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:26f0:80::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:12:6e:a7:50:4e:8d:57:05:01:3f:ca:85:5d:6d:db:74:1f:
         4a:fc:a1:d9:eb:1c:39:74:64:13:d5:97:d8:a9:41:2e:31:f4:
         fa:09:9c:1a:9c:07:3f:46:1b:4c:51:fc:53:d1:5d:38:d0:4b:
         b9:39:91:de:fd:eb:0d:e3:f0:d5:30:f8:82:0c:85:90:2d:bb:
         ac:5f:60:79:19:9e:43:69:bb:f1:7a:db:a2:61:13:b9:9e:ad:
         41:6e:a0:cd:3f:e0:65:82:55:58:2f:71:59:eb:98:72:66:8d:
         2e:2a:05:44:c8:02:4b:ae:68:1b:9b:97:7a:63:5b:06:e5:d4:
         8a:60:c2:4a:be:32:d0:ff:60:8a:44:a0:43:07:bd:45:9d:85:
         83:72:7f:26:df:f0:ab:30:a4:5a:51:37:58:6f:a0:6f:f7:17:
         52:5f:5f:a7:bb:44:61:f3:2c:cf:94:e8:ca:9d:b1:58:10:e7:
         2b:3e:1e:9f:e8:d8:d8:14:71:77:78:28:fa:60:48:08:54:ff:
         2f:9e:43:2a:b0:4e:8b:d7:fc:eb:29:3f:85:af:74:85:13:4f:
         cf:52:51:0f:9a:7a:a5:9f:fc:81:d5:47:a0:b7:e5:fc:ff:d4:
         33:66:3f:4d:5f:f7:75:2b:13:b6:c6:56:3d:0b:39:d2:cc:86:
         18:33:58:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 15:17:37 2024 by rpki-client on console-fra.rpki-client.org