Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/5iWJTDKrm8P_FNMmAt1DR7-icJs.roa
File:                     5iWJTDKrm8P_FNMmAt1DR7-icJs.roa (raw, json)
Hash identifier:          P7W2H17tuYGZ6naFcR3+lBewG5Xbx9UuDXhuMWtv8ZI=
Subject key identifier:   E6:25:89:4C:32:AB:9B:C3:FF:14:D3:26:02:DD:43:47:BF:A2:70:9B
Certificate issuer:       /CN=7981ea4d507fb0ae07159f6f88def958430fd070
Certificate serial:       018BAFE0574A97D64059F5CC232E37BE039A
Authority key identifier: 79:81:EA:4D:50:7F:B0:AE:07:15:9F:6F:88:DE:F9:58:43:0F:D0:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eYHqTVB_sK4HFZ9viN75WEMP0HA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/5iWJTDKrm8P_FNMmAt1DR7-icJs.roa
Signing time:             Wed 08 Nov 2023 16:59:57 +0000
ROA not before:           Wed 08 Nov 2023 16:59:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60542
IP address blocks:        2a12:eb80:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 11 Nov 2023 11:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:af:e0:57:4a:97:d6:40:59:f5:cc:23:2e:37:be:03:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7981ea4d507fb0ae07159f6f88def958430fd070
        Validity
            Not Before: Nov  8 16:59:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e625894c32ab9bc3ff14d32602dd4347bfa2709b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:f8:45:0b:a4:dc:e2:48:64:a3:6e:1b:21:
                    ac:53:fa:84:25:30:68:ad:3a:13:86:12:73:67:0b:
                    b0:03:5e:b1:6c:3f:f7:9e:cf:b1:ff:3b:c5:ee:1c:
                    8d:d3:06:dd:9f:1c:f4:61:a9:b0:f6:5b:1e:07:d3:
                    68:57:c4:8a:ad:31:00:6d:03:4a:cd:fe:02:f9:39:
                    0d:83:55:34:37:bd:40:c5:4e:85:0d:8f:99:d6:25:
                    63:44:5f:be:85:91:c9:eb:38:27:89:ad:44:c6:6c:
                    9b:a3:dc:92:05:31:73:8e:09:a4:0d:87:10:af:3b:
                    65:4d:c0:aa:e8:f4:d0:5e:be:1a:ac:15:a7:2f:89:
                    00:c6:e4:8b:35:98:2b:67:fc:e7:17:5a:55:ab:bd:
                    16:d7:d6:68:aa:27:c8:3c:73:94:11:f0:d5:1a:00:
                    fc:5d:9c:e0:86:97:b7:b4:96:5a:f5:20:87:b9:ea:
                    38:4e:af:56:94:0b:ac:11:98:3b:ff:eb:85:ee:dc:
                    8c:b8:76:15:5c:e4:17:f2:c8:1c:4a:16:f5:04:8a:
                    3d:f3:a1:4a:6d:64:fe:69:a8:9c:6a:9f:5e:71:f2:
                    17:4d:4c:43:c7:e0:13:21:95:b6:6c:c5:ed:28:c1:
                    bc:b6:b5:b4:8c:97:28:74:fa:30:d1:b4:c0:fa:c9:
                    09:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:25:89:4C:32:AB:9B:C3:FF:14:D3:26:02:DD:43:47:BF:A2:70:9B
            X509v3 Authority Key Identifier:
                keyid:79:81:EA:4D:50:7F:B0:AE:07:15:9F:6F:88:DE:F9:58:43:0F:D0:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYHqTVB_sK4HFZ9viN75WEMP0HA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/5iWJTDKrm8P_FNMmAt1DR7-icJs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/eYHqTVB_sK4HFZ9viN75WEMP0HA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:eb80:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         cf:e8:f3:42:2a:0b:ef:7c:2a:b2:f3:2c:9c:f4:2a:24:45:2e:
         81:52:af:19:19:8b:e6:9b:30:05:bb:13:da:34:f6:da:83:dc:
         62:40:97:9d:14:67:d1:62:51:74:bb:f0:c7:46:82:e7:2f:31:
         d3:37:b4:f6:f1:29:f3:55:2e:c4:24:38:20:8e:d0:a5:5a:4e:
         71:b3:f6:9b:92:e3:f5:8a:ad:0b:d4:39:04:9f:e8:c6:33:75:
         05:f1:5e:1f:40:ee:8f:69:7f:c7:27:7f:8d:f1:46:00:d7:5e:
         dc:4d:75:f9:d9:52:86:b3:bf:4c:43:71:e7:7d:0c:bd:04:18:
         26:87:1d:5c:f3:96:f6:3b:32:fd:14:39:db:78:df:3c:56:bd:
         62:3f:5d:ad:40:45:35:4d:b2:c4:46:fb:bc:0e:42:00:35:43:
         84:fd:4f:0f:6d:99:a8:13:52:04:0a:46:7b:82:b1:43:08:e1:
         86:75:b7:f2:bb:70:1e:11:f9:f3:30:9a:b9:e0:ce:09:a9:c4:
         02:bb:38:60:c5:5c:99:7f:70:86:3b:fc:88:4a:84:56:59:c4:
         14:60:9e:7d:44:f2:2d:7f:de:8d:17:5b:ab:8c:22:58:23:4f:
         4d:24:dd:b5:19:5f:39:d8:af:39:bc:c2:94:72:a0:8e:1e:e1:
         82:62:29:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-fra.rpki-client.org