Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/JOYO6t7X7g4XA0K7BFMCV3NoKzg.roa
File:                     JOYO6t7X7g4XA0K7BFMCV3NoKzg.roa (raw, json)
Hash identifier:          +BGyenMrd267PZUek8q3zvnLLPgA/Pc0gPQdnZsJnTU=
Subject key identifier:   24:E6:0E:EA:DE:D7:EE:0E:17:03:42:BB:04:53:02:57:73:68:2B:38
Certificate issuer:       /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial:       0186CB1FEF37CDAC3D78E66811C7193D1176
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/JOYO6t7X7g4XA0K7BFMCV3NoKzg.roa
Signing time:             Fri 10 Mar 2023 10:45:13 +0000
ROA not before:           Fri 10 Mar 2023 10:45:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        2a13:27c0:10::/44 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:cb:1f:ef:37:cd:ac:3d:78:e6:68:11:c7:19:3d:11:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
        Validity
            Not Before: Mar 10 10:45:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=24e60eeaded7ee0e170342bb0453025773682b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e9:3d:bd:49:02:58:91:b2:f0:45:ad:1a:77:
                    26:69:a2:30:2d:ae:f8:b9:99:3b:d0:f8:70:e2:3d:
                    50:57:ad:82:8d:08:88:fa:85:73:45:6e:7d:27:2d:
                    7b:25:ae:39:fe:23:fc:14:fb:be:5a:46:25:d9:e7:
                    c4:00:f7:73:e3:1c:a0:70:34:1f:ac:41:49:ac:aa:
                    0e:5b:4d:3d:2b:de:ac:b0:10:ac:11:ce:80:55:9d:
                    7e:6c:0a:1a:e6:fd:86:f2:d8:9b:84:51:14:37:79:
                    ed:d2:e7:dc:8a:eb:3e:fd:b7:c8:62:81:8f:da:01:
                    37:fb:59:de:69:40:00:37:a2:b2:e9:62:fd:41:51:
                    20:e7:49:e4:39:53:3a:25:d5:3e:b6:18:9f:a4:ef:
                    88:7a:7b:0a:74:3b:c8:d6:80:c2:c8:c7:2c:94:e1:
                    e1:76:af:91:99:9c:46:d2:5d:68:56:55:1c:9e:d4:
                    a4:bb:ef:43:98:e6:5c:74:ea:ff:79:e5:a1:5c:eb:
                    4a:7d:72:d0:12:33:42:ab:46:f7:c1:e1:a8:6b:c9:
                    34:2a:53:f6:aa:37:fe:ab:a4:18:4f:c6:89:f2:f7:
                    8a:7b:06:63:78:23:53:07:da:aa:b7:d4:fe:ad:83:
                    03:0d:b2:37:af:15:1a:83:28:2f:a5:9a:5d:02:8e:
                    1c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E6:0E:EA:DE:D7:EE:0E:17:03:42:BB:04:53:02:57:73:68:2B:38
            X509v3 Authority Key Identifier:
                keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/JOYO6t7X7g4XA0K7BFMCV3NoKzg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:27c0:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         51:1a:d6:ba:76:21:76:05:52:3b:2f:36:6d:b0:44:df:41:96:
         f3:f5:f8:ba:44:30:bb:fc:56:d0:ec:fa:68:d3:07:8c:ad:5f:
         1e:6c:d6:38:3d:60:59:50:59:0a:78:2f:6c:8b:57:21:05:ed:
         1f:a3:a4:b2:a8:bf:3b:d0:24:24:67:e4:d7:f1:cf:cb:db:ac:
         af:62:a0:b3:2f:99:2f:92:46:f0:af:8a:ae:f2:23:e7:fb:3a:
         63:e9:60:55:58:af:13:6d:bc:23:0b:3b:58:49:bb:ba:1b:a2:
         cd:bc:d8:c7:4b:19:48:27:af:03:21:4b:26:07:83:6b:57:43:
         2f:23:3b:51:4f:7a:92:35:8e:ec:85:fa:49:f2:90:01:34:ed:
         03:b4:26:c9:fc:a1:45:34:d1:cb:e2:32:ee:55:c9:ed:ba:7f:
         dd:78:8f:b7:04:91:5c:90:00:4e:f5:ea:15:24:99:37:7d:06:
         bb:5a:ff:77:c7:5c:ce:9f:0a:c1:b9:e9:53:c7:64:54:60:c9:
         ad:ae:13:e0:02:5e:49:cf:41:d4:fb:e6:e6:6d:6d:74:8e:dd:
         ad:f7:97:c5:97:6f:06:3e:27:ef:8a:63:06:13:69:c4:11:cd:
         68:4e:41:66:28:58:a6:b2:6d:8b:f8:ff:33:cd:44:2b:47:19:
         42:a0:9f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:02 2024 by rpki-client on console-fra.rpki-client.org