Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/mslFDX_xvWEBGDD3F7wlSLSQBQY.roa
File:                     mslFDX_xvWEBGDD3F7wlSLSQBQY.roa (raw, json)
Hash identifier:          CvuUE4BzsYanX9qc8eCcMg7yn1uqEqwaHJue7C3QgEw=
Subject key identifier:   9A:C9:45:0D:7F:F1:BD:61:01:18:30:F7:17:BC:25:48:B4:90:05:06
Certificate issuer:       /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial:       0186AB7DE77351824379AB994ADDFAD6B9FF
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/mslFDX_xvWEBGDD3F7wlSLSQBQY.roa
Signing time:             Sat 04 Mar 2023 07:20:00 +0000
ROA not before:           Sat 04 Mar 2023 07:20:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60939
IP address blocks:        2a13:5880::/29 maxlen: 29

Validation:               Failed, certificate revoked on Sun 10 Sep 2023 12:17:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ab:7d:e7:73:51:82:43:79:ab:99:4a:dd:fa:d6:b9:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
        Validity
            Not Before: Mar  4 07:20:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9ac9450d7ff1bd61011830f717bc2548b4900506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2d:7c:fa:24:5f:e7:f4:ca:67:f4:6e:84:4a:
                    81:72:ae:e1:32:90:57:47:4e:2c:40:19:b7:ad:00:
                    9c:36:6c:6e:8b:80:71:e4:5d:6b:e4:d6:64:59:64:
                    7a:df:4a:9a:2b:82:27:78:aa:2e:c9:c0:30:01:ca:
                    92:cc:89:ae:03:bf:58:ce:de:69:6e:7f:31:3e:56:
                    44:52:7b:9b:c1:2b:7c:b4:f8:cc:6d:a9:53:d2:01:
                    98:03:8e:73:2c:f3:59:9a:e5:97:97:1e:98:77:ee:
                    af:7f:41:b4:67:a5:f9:92:38:1e:85:d5:c9:7c:2e:
                    72:d6:35:87:e6:ef:d6:cd:15:4f:19:68:47:eb:e2:
                    0c:47:54:51:ca:85:78:ff:03:6c:4e:ca:0c:07:5a:
                    4b:20:05:d9:6d:71:32:b1:9c:e5:57:57:f1:75:b8:
                    11:9c:af:4a:f0:fa:e1:20:8f:39:83:d4:e4:9e:9b:
                    cb:df:22:61:9b:4a:25:69:46:5c:57:54:a1:67:3a:
                    2c:58:0a:cd:90:2f:63:67:e1:20:b7:e4:8a:fb:14:
                    73:31:1b:0e:66:c7:ad:c8:7b:0a:e2:e9:9e:26:59:
                    4f:2b:9f:b7:da:42:2e:38:83:34:fa:ba:df:49:3c:
                    bb:4a:25:c0:84:7c:1e:8b:85:45:9a:c3:42:cd:94:
                    5e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C9:45:0D:7F:F1:BD:61:01:18:30:F7:17:BC:25:48:B4:90:05:06
            X509v3 Authority Key Identifier:
                keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/mslFDX_xvWEBGDD3F7wlSLSQBQY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:5880::/29

    Signature Algorithm: sha256WithRSAEncryption
         7b:f1:bf:af:a0:83:ad:60:e3:8e:70:ce:9f:78:8f:b3:f8:80:
         b6:94:78:a1:fc:73:17:2d:b3:9a:f6:02:fd:2d:e7:64:8c:80:
         25:44:8b:31:e2:15:d8:99:f5:f0:a4:ae:d1:87:d2:b6:f8:3b:
         56:9e:06:f6:a9:59:41:44:63:59:d1:f4:f6:f1:79:28:37:2a:
         8b:10:ee:cd:9e:dd:79:af:e7:7e:a9:3c:7e:7d:2a:51:cc:79:
         fd:e1:64:7d:d0:81:55:8c:d7:d4:7c:25:f7:d0:6e:38:7e:d4:
         7b:9d:a2:72:58:96:a5:fa:5c:19:9a:3c:1a:15:13:ea:0d:69:
         0b:15:09:a0:af:1a:99:4f:29:b7:a6:5f:50:a4:d3:14:63:43:
         50:ec:4e:a0:69:2c:8b:65:11:16:56:08:7e:c6:0a:e7:e1:57:
         e1:93:26:36:e2:a2:bf:9c:b2:0b:1e:75:5c:90:5a:01:5b:f2:
         99:64:0f:3a:44:76:da:1b:36:0e:c2:6a:de:29:20:90:24:dd:
         97:1d:d2:73:3b:18:bb:d6:f3:a3:03:f1:4c:5b:ff:e4:fc:93:
         cb:55:d1:41:25:f9:90:d9:7d:35:3f:7a:25:5e:ac:e5:4c:c8:
         bf:d1:85:76:b0:19:d8:a8:21:97:d6:a2:68:84:e7:00:97:99:
         7a:6c:17:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:56 2024 by rpki-client on console-ams.rpki-client.org