Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/7fSpTFN9OXWvulp9FE32ttJ07Gw.roa
File:                     7fSpTFN9OXWvulp9FE32ttJ07Gw.roa (raw, json)
Hash identifier:          hZ8L26vXMe6zgKgkBVXhuVhnfz95PNXbqVi4cfJ8r7A=
Subject key identifier:   ED:F4:A9:4C:53:7D:39:75:AF:BA:5A:7D:14:4D:F6:B6:D2:74:EC:6C
Certificate issuer:       /CN=7a550c8065bf6033fcc6a3b03813ef9271924196
Certificate serial:       01856C41346F216049A0547E818F42E779C4
Authority key identifier: 7A:55:0C:80:65:BF:60:33:FC:C6:A3:B0:38:13:EF:92:71:92:41:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/7fSpTFN9OXWvulp9FE32ttJ07Gw.roa
Signing time:             Sun 01 Jan 2023 07:34:50 +0000
ROA not before:           Sun 01 Jan 2023 07:34:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35913
IP address blocks:        2a12:8940::/29 maxlen: 29

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:41:34:6f:21:60:49:a0:54:7e:81:8f:42:e7:79:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a550c8065bf6033fcc6a3b03813ef9271924196
        Validity
            Not Before: Jan  1 07:34:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=edf4a94c537d3975afba5a7d144df6b6d274ec6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:05:62:72:87:db:38:6d:66:55:04:3e:0e:2f:
                    db:9e:ac:35:91:18:39:16:09:60:9d:81:f7:c0:3c:
                    98:4f:89:04:c5:50:2b:bd:89:d4:9a:44:2d:11:68:
                    24:f7:7d:88:f7:e1:bd:00:16:f9:8a:43:57:66:a7:
                    97:41:b3:6c:78:ce:b0:7c:ca:bd:f8:52:28:52:f4:
                    40:d4:5d:6f:e5:2a:76:b3:7a:2b:08:73:b3:94:45:
                    ec:dc:22:22:2a:de:03:82:e4:cd:2f:b5:68:cb:34:
                    0a:92:db:d3:d8:8e:ed:d0:2f:31:27:f7:b4:e0:c8:
                    73:76:f4:89:3f:69:de:c0:f5:3d:8c:30:22:11:a5:
                    3c:2f:29:92:10:bd:29:3e:bf:aa:d0:78:b6:83:82:
                    d3:cc:54:f9:ff:de:2a:70:fa:20:27:25:98:76:ab:
                    72:06:4b:f3:43:e4:2d:51:98:15:d2:7f:c5:76:6f:
                    c6:c9:e5:21:27:b6:d6:17:fc:62:39:bd:6d:55:83:
                    09:f2:b5:ad:f6:71:a9:5e:de:b0:fe:95:04:7b:99:
                    d1:e6:6b:d1:56:0a:f9:fe:f0:fc:f8:cf:3b:d6:2c:
                    e8:01:8f:2c:29:56:43:93:57:9c:b7:2b:04:c6:fb:
                    2b:6c:61:1a:31:dc:88:48:ec:76:03:85:cc:5e:a4:
                    d4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F4:A9:4C:53:7D:39:75:AF:BA:5A:7D:14:4D:F6:B6:D2:74:EC:6C
            X509v3 Authority Key Identifier:
                keyid:7A:55:0C:80:65:BF:60:33:FC:C6:A3:B0:38:13:EF:92:71:92:41:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/7fSpTFN9OXWvulp9FE32ttJ07Gw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:8940::/29

    Signature Algorithm: sha256WithRSAEncryption
         48:1b:5b:d9:b7:01:1e:fa:af:79:42:db:b0:b0:b1:d2:67:f3:
         83:94:6a:56:09:f4:af:59:67:10:db:f2:70:41:0f:82:2f:b4:
         ad:2c:37:4d:b0:1d:47:d7:25:67:cf:3f:e8:21:41:68:3e:b5:
         4e:9b:af:ab:1e:68:e7:f2:9e:b1:e3:6c:01:2d:2e:a0:d9:ab:
         d7:76:39:50:38:e5:1f:6a:1d:7c:f5:6f:16:89:1d:e4:f4:42:
         12:49:a2:e0:77:61:86:17:e0:d7:60:15:70:10:15:6f:e6:41:
         79:8d:76:1c:7e:c9:30:4d:74:f2:9a:71:18:88:c0:d5:69:f0:
         85:9e:ed:88:f7:87:d0:d5:21:82:08:61:8b:b9:b8:b0:0a:75:
         f7:c4:ee:fd:d8:be:a2:8e:3d:3f:eb:38:27:b9:7a:07:80:43:
         bd:e2:77:f0:01:1e:40:66:27:74:6d:f8:3f:9d:6b:39:b6:b2:
         d1:7a:d6:6d:05:66:2e:1c:bf:c9:3d:9f:ba:4d:43:09:67:c6:
         62:4f:37:6c:ce:af:be:76:86:59:e7:ea:d2:d3:18:e0:14:f3:
         be:e3:7d:04:4b:22:32:32:d4:e5:a6:4b:40:eb:6f:9c:18:21:
         be:dc:27:e0:a8:7f:76:70:7a:74:30:fb:5d:86:51:46:41:9a:
         50:f8:e4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:18 2024 by rpki-client on console-ams.rpki-client.org