Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SVEL_CJyPnNfsxyTf1Jg9NiaGas.roa
File:                     SVEL_CJyPnNfsxyTf1Jg9NiaGas.roa (raw, json)
Hash identifier:          om5d+N/VKWYBnns66W5AkGqoU6oxvwpwXPv1wDG+9HY=
Subject key identifier:   49:51:0B:FC:22:72:3E:73:5F:B3:1C:93:7F:52:60:F4:D8:9A:19:AB
Certificate issuer:       /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial:       018FCB7D74C1327D73A216F893E71F099140
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SVEL_CJyPnNfsxyTf1Jg9NiaGas.roa
Signing time:             Thu 30 May 2024 21:52:27 +0000
ROA not before:           Thu 30 May 2024 21:52:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215052
IP address blocks:        2a12:bec4:11d0::/44 maxlen: 44

Validation:               Failed, certificate revoked on Wed 26 Jun 2024 04:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:cb:7d:74:c1:32:7d:73:a2:16:f8:93:e7:1f:09:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
        Validity
            Not Before: May 30 21:52:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=49510bfc22723e735fb31c937f5260f4d89a19ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:32:85:0f:41:4a:98:ff:9f:c3:da:a9:13:d5:
                    0c:38:54:e1:8e:fb:d9:88:67:00:be:5e:5d:d8:1b:
                    91:6c:fa:75:89:28:d2:c8:5e:28:29:67:64:41:1b:
                    00:1f:e1:4f:70:19:9c:d8:94:a5:f4:01:0d:08:dc:
                    13:81:af:94:7f:26:77:c8:5d:97:6f:8b:ac:8d:fd:
                    30:d4:3b:b1:c2:b5:af:2a:e7:70:13:44:3c:76:b2:
                    f4:be:52:f1:b7:b1:72:06:51:72:2d:a1:be:b9:07:
                    aa:99:9c:68:6d:69:e5:37:cc:90:ad:e0:37:78:a8:
                    14:9e:78:cb:64:ab:2e:d9:35:a5:8f:e2:be:ee:39:
                    52:f0:3d:f2:e4:6e:93:26:25:84:b6:a6:72:1f:0e:
                    98:41:cb:d1:8c:75:d1:80:24:24:96:17:33:5a:3e:
                    eb:35:03:58:fc:73:2a:eb:fe:53:c3:3e:6f:e2:ca:
                    49:c8:10:f5:15:46:cc:4c:ca:86:b9:c7:25:41:d9:
                    e0:51:22:6b:bb:a6:52:8d:f2:1f:ff:21:c3:07:7f:
                    26:6f:71:19:90:dc:38:ea:9d:da:04:98:95:b0:63:
                    e7:f2:31:c4:5a:e7:eb:7d:4e:61:90:69:80:05:ff:
                    41:04:9b:01:4b:ca:49:2e:5f:6a:ac:49:f8:82:c6:
                    b8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:51:0B:FC:22:72:3E:73:5F:B3:1C:93:7F:52:60:F4:D8:9A:19:AB
            X509v3 Authority Key Identifier:
                keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SVEL_CJyPnNfsxyTf1Jg9NiaGas.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:bec4:11d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         7f:bd:78:40:70:fa:7e:e0:cc:ab:0e:34:e9:95:77:5f:69:6b:
         bb:1a:99:f4:4b:f7:56:30:28:95:89:f9:14:d8:89:5a:f9:21:
         ce:78:fc:ff:4f:6e:88:12:f0:d8:cf:4c:cb:61:8b:29:fd:66:
         7a:db:53:50:4b:25:ba:23:a6:91:60:98:f0:a7:df:0f:be:37:
         7e:8f:04:5f:fc:94:9d:e8:5f:09:73:75:f7:be:54:37:d4:8d:
         56:6c:cb:8f:8f:27:6c:cb:31:51:46:a8:8e:a7:a7:b6:60:1b:
         80:66:be:4c:73:09:9f:64:58:93:3b:f9:c5:05:41:e0:fb:7b:
         11:65:b0:da:cf:28:00:e8:77:fe:c4:99:22:11:3b:63:f0:28:
         fa:6c:c2:33:82:1e:ff:5e:31:90:69:08:d2:bd:aa:ec:bb:88:
         a0:3a:96:d2:65:45:00:53:8d:b7:75:9e:5b:44:d5:22:d1:7a:
         34:00:83:84:c2:02:a5:73:a6:d5:23:08:91:3c:55:40:6b:af:
         a1:fb:2e:f4:91:74:f8:22:e8:34:49:d0:1a:4e:00:5d:41:be:
         e4:a5:5c:2f:5f:ff:62:91:e3:2a:5e:2e:3c:64:a8:38:94:38:
         8d:83:21:33:ec:a1:6b:6b:22:a0:47:58:49:cd:a0:86:42:92:
         91:67:41:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:28:56 2024 by rpki-client on console-fra.rpki-client.org