Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/n0DkXlhKYIsGCm5IhQMr-X0BPoE.roa
File:                     n0DkXlhKYIsGCm5IhQMr-X0BPoE.roa (raw, json)
Hash identifier:          M55Ctk1DnktokFaeolbYDqhPhNsqrjuHV4608QGk68c=
Subject key identifier:   9F:40:E4:5E:58:4A:60:8B:06:0A:6E:48:85:03:2B:F9:7D:01:3E:81
Certificate issuer:       /CN=7981ea4d507fb0ae07159f6f88def958430fd070
Certificate serial:       018BAF5B97ADDE725BAEE6D6282A40E1118C
Authority key identifier: 79:81:EA:4D:50:7F:B0:AE:07:15:9F:6F:88:DE:F9:58:43:0F:D0:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eYHqTVB_sK4HFZ9viN75WEMP0HA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/n0DkXlhKYIsGCm5IhQMr-X0BPoE.roa
Signing time:             Wed 08 Nov 2023 14:34:57 +0000
ROA not before:           Wed 08 Nov 2023 14:34:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42785
IP address blocks:        2a12:eb80::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 11 Nov 2023 11:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:af:5b:97:ad:de:72:5b:ae:e6:d6:28:2a:40:e1:11:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7981ea4d507fb0ae07159f6f88def958430fd070
        Validity
            Not Before: Nov  8 14:34:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9f40e45e584a608b060a6e4885032bf97d013e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:68:ea:23:97:59:65:97:a1:b4:83:ea:2d:75:
                    98:fe:7e:b4:f1:46:0b:f2:8e:c3:3a:50:19:04:67:
                    95:05:62:a7:aa:42:18:ac:cb:15:37:45:13:d0:d2:
                    86:3a:a4:a0:3e:94:32:3e:5b:5c:80:62:f7:f7:dd:
                    1c:c9:c6:db:9b:eb:0b:7e:75:ea:5e:41:d2:d4:46:
                    0c:55:9f:44:1b:1f:13:a5:6f:7a:7f:08:70:5d:a6:
                    0b:a8:51:9a:eb:53:ad:91:73:de:72:27:c2:95:a3:
                    66:8b:66:40:73:b3:b4:80:07:66:3b:fb:1e:e3:14:
                    47:05:73:47:0a:0d:c6:22:2a:a2:71:81:ea:40:88:
                    dc:fb:6d:30:76:38:d7:70:4e:5a:94:36:07:85:4c:
                    77:58:57:7d:fb:24:63:fd:4c:24:ac:0e:79:01:90:
                    3f:d4:e3:72:89:6b:10:1d:42:41:f7:70:8a:15:94:
                    f6:0b:8c:f0:4d:17:1b:0d:7f:96:43:3d:42:4a:23:
                    98:ab:af:e4:18:94:a5:41:eb:01:a6:4b:87:22:7c:
                    61:d0:82:77:04:5d:a6:97:44:32:03:b4:80:70:23:
                    c2:ab:b3:01:5b:2c:b6:66:12:72:e7:5b:14:e2:c2:
                    3f:16:79:fb:3a:07:d6:5e:d8:6c:f0:eb:f3:45:94:
                    9d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:40:E4:5E:58:4A:60:8B:06:0A:6E:48:85:03:2B:F9:7D:01:3E:81
            X509v3 Authority Key Identifier:
                keyid:79:81:EA:4D:50:7F:B0:AE:07:15:9F:6F:88:DE:F9:58:43:0F:D0:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYHqTVB_sK4HFZ9viN75WEMP0HA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/n0DkXlhKYIsGCm5IhQMr-X0BPoE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/eYHqTVB_sK4HFZ9viN75WEMP0HA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:eb80::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:92:34:85:15:35:e9:b2:22:88:1e:18:41:53:36:56:d5:44:
         fd:07:02:ea:73:42:fb:e2:c7:1f:b6:8c:2c:1e:14:7b:3d:d9:
         a8:f5:2b:95:f7:58:9a:49:b0:94:5c:bf:d0:73:77:91:bb:d2:
         27:be:ce:31:fe:bf:d9:c0:25:a1:02:53:70:bd:4c:2a:80:f3:
         f2:e1:0a:fc:af:d0:e9:8a:1a:71:db:a2:fc:cd:e7:62:b8:a4:
         f8:88:66:f6:d5:0f:f5:4c:90:a9:f8:e3:31:93:b8:3a:55:2b:
         cb:f1:0c:91:f1:37:64:1f:e7:a5:75:77:69:8d:f3:bc:10:55:
         fe:32:e0:ad:e0:f4:06:05:d1:2a:75:bd:9a:81:02:c6:4e:a3:
         70:1e:bd:27:c9:0d:aa:61:13:76:c1:6a:58:73:96:ec:81:5b:
         4d:c2:54:7f:4f:c0:c4:72:9f:e6:1c:ac:71:fc:07:a9:58:ab:
         b7:78:06:f8:74:8e:2d:b0:9d:b1:e3:19:9d:87:43:21:40:87:
         16:27:a7:d0:dc:37:2d:7d:34:c0:fe:d3:f0:ae:0e:f1:93:72:
         25:15:2b:01:77:46:da:4d:e0:66:79:a3:d2:3f:36:47:9e:53:
         03:86:9a:67:fd:78:64:90:89:1f:f2:03:79:01:70:21:f4:73:
         d6:47:53:d6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYuvW5et3nJbrubWKCpA4RGMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ODFlYTRkNTA3ZmIwYWUwNzE1OWY2Zjg4ZGVmOTU4NDMw
ZmQwNzAwHhcNMjMxMTA4MTQzNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjQwZTQ1ZTU4NGE2MDhiMDYwYTZlNDg4NTAzMmJmOTdkMDEzZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2jqI5dZZZehtIPqLXWY/n608UYL
8o7DOlAZBGeVBWKnqkIYrMsVN0UT0NKGOqSgPpQyPltcgGL3990cycbbm+sLfnXq
XkHS1EYMVZ9EGx8TpW96fwhwXaYLqFGa61OtkXPecifClaNmi2ZAc7O0gAdmO/se
4xRHBXNHCg3GIiqicYHqQIjc+20wdjjXcE5alDYHhUx3WFd9+yRj/UwkrA55AZA/
1ONyiWsQHUJB93CKFZT2C4zwTRcbDX+WQz1CSiOYq6/kGJSlQesBpkuHInxh0IJ3
BF2ml0QyA7SAcCPCq7MBWyy2ZhJy51sU4sI/Fnn7OgfWXths8OvzRZSdTwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJ9A5F5YSmCLBgpuSIUDK/l9AT6BMB8GA1UdIwQY
MBaAFHmB6k1Qf7CuBxWfb4je+VhDD9BwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVlIcVRWQl9zSzRIRlo5dmlONzVXRU1QMEhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lNDRiZDctMGY3MC00NWM4LTg1NmUt
NDBlMmVmMzM4M2IwLzEvbjBEa1hsaEtZSXNHQ201SWhRTXItWDBCUG9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lNDRiZDctMGY3MC00NWM4LTg1NmUtNDBlMmVmMzM4M2Iw
LzEvZVlIcVRWQl9zSzRIRlo5dmlONzVXRU1QMEhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhLrgAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQBAkjSFFTXpsiKIHhhBUzZW1UT9BwLqc0L74scf
towsHhR7Pdmo9SuV91iaSbCUXL/Qc3eRu9Invs4x/r/ZwCWhAlNwvUwqgPPy4Qr8
r9Dpihpx26L8zediuKT4iGb21Q/1TJCp+OMxk7g6VSvL8QyR8TdkH+eldXdpjfO8
EFX+MuCt4PQGBdEqdb2agQLGTqNwHr0nyQ2qYRN2wWpYc5bsgVtNwlR/T8DEcp/m
HKxx/AepWKu3eAb4dI4tsJ2x4xmdh0MhQIcWJ6fQ3DctfTTA/tPwrg7xk3IlFSsB
d0baTeBmeaPSPzZHnlMDhppn/XhkkIkf8gN5AXAh9HPWR1PW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-fra.rpki-client.org