Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Ke8V_MohsTRAde5iVJlUf8kxFVI.roa
File:                     Ke8V_MohsTRAde5iVJlUf8kxFVI.roa (raw, json)
Hash identifier:          hr+TNjtCokgyhUqoVU2+DhX6Wn00EzIKj/mNEf0QQj0=
Subject key identifier:   29:EF:15:FC:CA:21:B1:34:40:75:EE:62:54:99:54:7F:C9:31:15:52
Certificate issuer:       /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial:       01880A400C2C602E5BBFD88EEC33C901F077
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Ke8V_MohsTRAde5iVJlUf8kxFVI.roa
Signing time:             Thu 11 May 2023 09:59:09 +0000
ROA not before:           Thu 11 May 2023 09:59:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49592
IP address blocks:        2a12:bec0:340::/44 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:0a:40:0c:2c:60:2e:5b:bf:d8:8e:ec:33:c9:01:f0:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
        Validity
            Not Before: May 11 09:59:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=29ef15fcca21b1344075ee625499547fc9311552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7f:16:0e:da:bd:f0:ea:7b:fa:08:0e:d7:71:
                    96:16:5e:58:67:f2:be:2b:cc:9d:f4:0d:74:9e:10:
                    11:52:12:ae:ab:ce:15:37:7d:ff:23:fb:7e:72:cd:
                    8a:af:37:fe:51:3f:57:48:9f:e4:75:00:cb:cc:7f:
                    1c:25:1a:f9:da:7c:3e:cd:7c:68:d6:d5:62:e6:39:
                    5c:86:62:8d:61:df:94:e1:50:65:10:e1:ea:e0:21:
                    36:63:3e:5f:15:73:73:ef:b7:ff:da:b6:cf:f1:8e:
                    ae:25:ca:8b:e9:2b:07:55:b2:a1:c8:d6:44:71:e9:
                    68:e1:84:da:d2:82:54:de:98:87:aa:63:2b:1e:d8:
                    d5:76:cc:90:ee:4c:32:0b:85:a5:f7:27:e5:9f:ce:
                    8d:4b:50:7f:60:4c:38:cf:01:20:a7:b6:42:bf:15:
                    30:49:83:66:d9:b6:76:dd:7a:20:ac:9d:05:59:65:
                    09:38:1f:d2:d5:1f:bb:42:fc:da:98:0a:21:5f:0d:
                    68:87:2a:4c:d0:8f:33:51:d4:66:ad:85:49:09:3e:
                    8f:45:5d:b2:ab:a0:11:5f:ac:05:b6:6d:bf:bd:8d:
                    6c:d3:b0:20:fa:b1:f0:80:07:51:e2:91:61:62:19:
                    33:39:09:37:68:00:1f:d1:ba:d0:42:99:39:e3:9e:
                    5a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EF:15:FC:CA:21:B1:34:40:75:EE:62:54:99:54:7F:C9:31:15:52
            X509v3 Authority Key Identifier:
                keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Ke8V_MohsTRAde5iVJlUf8kxFVI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:bec0:340::/44

    Signature Algorithm: sha256WithRSAEncryption
         2e:a9:d7:10:cb:6f:18:43:20:63:cb:6a:91:59:0f:d9:87:bd:
         a7:8a:e9:02:da:b2:00:b0:84:9b:2f:ac:52:05:8e:bf:0b:3c:
         ce:0f:b7:df:4f:58:de:94:32:f0:70:60:09:2a:4c:27:ee:6b:
         30:14:f9:88:be:2d:5b:fd:ad:10:41:60:39:e4:8e:21:28:a9:
         59:50:65:f1:ba:80:4e:43:e5:09:37:cd:7f:58:1d:54:62:c1:
         58:17:56:69:52:95:08:b5:41:15:63:1d:52:69:3b:11:17:8b:
         56:f7:19:50:1f:be:c8:67:a4:28:fa:cb:bc:41:f9:43:1e:5d:
         eb:c6:27:be:57:dc:b4:c0:c6:d4:8a:37:b5:a5:af:37:07:fd:
         6e:22:e5:d7:02:cc:dd:c4:17:f6:3a:0f:d2:c9:25:6f:1a:40:
         0f:6b:7c:23:f2:a9:d4:b6:4b:83:26:19:b0:04:cf:db:62:07:
         77:15:53:0c:21:6a:ba:9c:ed:c2:f7:3b:32:16:81:17:1b:d7:
         82:f3:59:a8:38:94:d2:9b:b4:2d:4b:74:00:3a:f0:e1:14:15:
         5d:30:c6:61:a6:23:56:27:1f:a9:12:3e:b8:b0:08:70:3b:55:
         d6:4c:fa:79:4a:18:ba:94:42:32:b8:b4:79:e8:26:a3:53:ea:
         5a:50:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org