Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/ikRwi7yNtMQPWpoRTRoF6Cu_OkE.roa
File:                     ikRwi7yNtMQPWpoRTRoF6Cu_OkE.roa (raw, json)
Hash identifier:          5UdY+/f0YfK4wx35jk8RxkO/KDb3XCxU1L4ubc/iUPQ=
Subject key identifier:   8A:44:70:8B:BC:8D:B4:C4:0F:5A:9A:11:4D:1A:05:E8:2B:BF:3A:41
Certificate issuer:       /CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Certificate serial:       01874A104AB51E295DBF8615179D6923ABC9
Authority key identifier: 8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/ikRwi7yNtMQPWpoRTRoF6Cu_OkE.roa
Signing time:             Tue 04 Apr 2023 02:19:54 +0000
ROA not before:           Tue 04 Apr 2023 02:19:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        2a13:a287:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:4a:10:4a:b5:1e:29:5d:bf:86:15:17:9d:69:23:ab:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
        Validity
            Not Before: Apr  4 02:19:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8a44708bbc8db4c40f5a9a114d1a05e82bbf3a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:f3:c5:63:3c:20:a4:da:6b:65:26:18:b2:
                    e8:6d:9a:81:34:f0:7b:ef:4b:44:04:36:9d:ac:4b:
                    d6:f4:8a:f7:fb:d8:3e:c4:b4:3a:f2:27:3a:0f:ef:
                    a0:02:86:b0:00:78:d4:33:cf:e6:2e:53:ce:8b:4b:
                    83:39:9e:ab:b1:3b:32:a8:9d:96:96:7e:d4:87:f9:
                    f1:d3:04:97:dd:ba:97:0c:98:da:c9:d2:16:10:2b:
                    b3:ac:16:6a:92:39:60:4f:5a:e2:5e:63:e5:df:cc:
                    f4:c7:0a:c2:c1:63:19:ac:e1:23:3b:fa:23:7f:e8:
                    d1:aa:fb:dd:89:ae:c6:81:29:98:47:55:57:28:d1:
                    3f:7a:ff:21:e2:f2:44:6d:17:b2:be:46:2f:02:2f:
                    39:4c:e8:a1:bb:b7:02:7b:8b:ac:09:e7:74:85:ce:
                    5f:39:af:68:10:95:6b:4d:bb:62:aa:39:61:06:43:
                    6c:df:81:18:b6:f3:90:0b:b9:c3:bf:52:53:2a:22:
                    5c:e3:9b:80:c3:60:d1:e5:cc:d5:cd:59:a0:4c:3d:
                    66:62:5b:3c:f0:88:a0:0e:b7:2d:a6:2a:b5:36:ae:
                    01:65:65:b2:be:9a:17:df:a2:da:5a:c1:32:4c:cd:
                    93:f6:6b:46:1f:e7:f8:70:87:e9:b2:5e:95:bb:df:
                    d1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:44:70:8B:BC:8D:B4:C4:0F:5A:9A:11:4D:1A:05:E8:2B:BF:3A:41
            X509v3 Authority Key Identifier:
                keyid:8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/ikRwi7yNtMQPWpoRTRoF6Cu_OkE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:a287:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         00:ea:6b:d3:07:96:81:72:48:5b:2b:c1:9c:8d:49:41:23:5e:
         39:20:68:58:fa:0c:56:8b:c8:a9:47:57:4e:88:c5:11:a0:2f:
         ae:62:bc:76:ca:c5:8f:b6:5d:73:2e:bc:44:52:93:69:79:66:
         6e:93:4c:d1:63:f9:e4:e8:3f:11:f7:54:d2:6b:e1:d7:6b:af:
         df:fb:6f:8a:ef:1d:6a:09:ab:6b:15:5e:5e:3b:f7:82:80:fd:
         06:6e:98:53:b8:4c:a7:f6:75:83:4e:e8:8f:58:bb:da:39:e6:
         a5:32:73:e1:85:96:cc:6f:99:7f:93:e6:22:a8:e2:e9:61:fd:
         86:3c:6f:46:54:ee:cc:d7:d0:0c:06:a2:84:ca:a9:ec:3f:43:
         27:ad:f9:02:f8:20:38:46:a6:c5:94:67:d3:61:8f:f2:77:8a:
         47:0a:6f:88:d3:f6:62:c8:84:ca:fa:81:94:a3:7b:0a:c9:3b:
         f4:19:a0:1f:0f:b2:e5:8b:bd:73:6e:92:44:26:c6:a8:f7:7e:
         5a:88:4a:a3:34:73:c6:f6:e7:d7:8e:a4:0b:ad:ad:e4:0b:07:
         fa:59:a8:ac:11:91:59:38:36:2c:c5:37:27:70:26:ec:00:4d:
         92:82:03:db:a5:c6:3c:70:6e:1d:01:e5:1c:4b:aa:f6:93:36:
         3d:2a:86:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:12 2024 by rpki-client on console-fra.rpki-client.org