Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WAgbU7ByvRtb6ymD_25d5LUrI-8.roa
File:                     WAgbU7ByvRtb6ymD_25d5LUrI-8.roa (raw, json)
Hash identifier:          A+mHlwmgFgDk0xIdNihTXZsaEokUcNpcgl62C4//QNQ=
Subject key identifier:   58:08:1B:53:B0:72:BD:1B:5B:EB:29:83:FF:6E:5D:E4:B5:2B:23:EF
Certificate issuer:       /CN=5b0329066138bb5564571fc3c29ee953e5c1c7a3
Certificate serial:       018FC926B30CFD807F1CE822ADCE64B4AD3A
Authority key identifier: 5B:03:29:06:61:38:BB:55:64:57:1F:C3:C2:9E:E9:53:E5:C1:C7:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WAgbU7ByvRtb6ymD_25d5LUrI-8.roa
Signing time:             Thu 30 May 2024 10:58:27 +0000
ROA not before:           Thu 30 May 2024 10:58:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     64286
IP address blocks:        2a0a:7744::/32 maxlen: 32
                          2a0a:7745::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 17:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:c9:26:b3:0c:fd:80:7f:1c:e8:22:ad:ce:64:b4:ad:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b0329066138bb5564571fc3c29ee953e5c1c7a3
        Validity
            Not Before: May 30 10:58:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=58081b53b072bd1b5beb2983ff6e5de4b52b23ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:83:c6:87:f6:cb:80:07:01:00:ba:d9:aa:31:
                    b2:e4:5b:c0:5f:f8:17:b5:23:03:95:f4:ab:b7:a2:
                    4a:73:e0:cc:26:48:23:1e:ed:19:2a:f5:30:0a:87:
                    d6:d0:1f:08:a1:4f:6f:a5:da:1e:e7:aa:94:88:e9:
                    03:de:ab:00:b7:88:27:9c:01:c9:3a:8e:5d:8e:32:
                    ce:00:fa:f2:4f:d9:61:62:34:d2:70:8a:b3:42:92:
                    00:93:63:20:3a:8c:e5:ea:7c:6e:b6:ed:55:35:f5:
                    82:c1:d8:cf:f5:3b:e0:74:bb:52:5e:43:4e:c6:4b:
                    04:45:2a:5e:0b:ae:d6:1f:69:de:8f:e9:09:e4:e7:
                    f3:ec:13:53:6f:7b:aa:cb:09:a2:04:78:69:c6:40:
                    dc:94:f0:25:73:45:d8:8f:da:0b:05:40:04:9b:40:
                    64:5e:60:55:e8:c6:61:7d:1e:e7:fb:44:27:fa:bf:
                    42:16:70:7c:b5:b1:c9:5b:c5:37:c8:f3:a2:bd:cb:
                    c2:7a:7c:01:e2:ea:b6:bc:62:0b:cc:74:14:96:61:
                    c0:60:ae:f2:bc:a6:e1:11:fe:67:0f:29:51:37:e2:
                    4e:15:6b:b5:14:5e:e9:04:94:11:ce:b0:a0:98:9a:
                    de:b9:cb:74:26:7a:11:21:8e:22:0f:f5:80:f8:07:
                    1c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:08:1B:53:B0:72:BD:1B:5B:EB:29:83:FF:6E:5D:E4:B5:2B:23:EF
            X509v3 Authority Key Identifier:
                keyid:5B:03:29:06:61:38:BB:55:64:57:1F:C3:C2:9E:E9:53:E5:C1:C7:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WAgbU7ByvRtb6ymD_25d5LUrI-8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:7744::/31

    Signature Algorithm: sha256WithRSAEncryption
         98:86:18:1b:14:b3:9b:90:a7:0e:1c:22:1a:f0:16:a2:be:cb:
         75:6d:b7:33:8e:f9:f9:48:4d:a2:f4:68:ed:c3:3b:16:d8:8c:
         68:9a:43:16:35:86:45:f7:6f:1e:14:6e:a6:38:57:9d:f4:04:
         d5:97:49:6c:32:d1:02:60:21:44:38:a1:e4:63:23:31:2d:82:
         4d:05:a9:11:34:e9:65:7d:d7:9a:69:9f:0f:b8:40:39:9b:fa:
         e1:2a:66:17:8c:8d:1e:52:8e:db:d8:dc:50:a5:21:ad:1c:22:
         1d:61:de:71:36:25:46:8c:9f:78:1a:98:ae:78:5a:ab:a9:2a:
         c3:e7:5e:f8:55:de:dc:cc:ee:0b:d5:17:84:a3:32:c4:d5:92:
         fe:12:ea:f9:b5:56:7d:12:d0:d5:f5:4e:cc:1a:8d:69:55:f1:
         40:2f:28:9b:3e:51:9c:01:ba:03:1b:cb:bb:03:06:eb:71:59:
         21:1c:2f:da:17:58:cd:06:77:53:46:26:8f:b4:00:d7:6d:41:
         b0:59:5f:dd:ca:b4:99:a3:90:ef:e3:69:7d:dc:67:98:3b:7e:
         99:8b:31:0f:6a:f7:a7:80:3d:3a:a9:ad:10:b9:b2:75:62:9e:
         6e:fd:3f:ee:fc:cf:14:e9:5c:bd:d0:78:d3:17:51:68:d0:53:
         b8:b2:ad:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:41 2024 by rpki-client on console-fra.rpki-client.org