Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/2RvPad9r4iTuZ143-0AZeF3V6XM.roa
File:                     2RvPad9r4iTuZ143-0AZeF3V6XM.roa (raw, json)
Hash identifier:          HeEShDdgfQuVCXpSDtSHFYuuTfo4hc8wB4drTO3yQpQ=
Subject key identifier:   D9:1B:CF:69:DF:6B:E2:24:EE:67:5E:37:FB:40:19:78:5D:D5:E9:73
Certificate issuer:       /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial:       018CCA2A4E108109BC45022D93421659A0BA
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/2RvPad9r4iTuZ143-0AZeF3V6XM.roa
Signing time:             Tue 02 Jan 2024 12:33:39 +0000
ROA not before:           Tue 02 Jan 2024 12:33:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        2a06:e881:73ff::/48 maxlen: 48
                          2a06:e881:650f::/48 maxlen: 48
                          2a06:e881:9200::/45 maxlen: 48
                          2a06:e881:7340::/42 maxlen: 48
                          2a06:e881:9300::/44 maxlen: 48
                          2a06:e881:9700::/44 maxlen: 44
                          2a06:e881:9700::/48 maxlen: 48
                          2a06:e881:9600::/48 maxlen: 48
                          2a06:e881:9701::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 25 Jun 2024 21:41:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:4e:10:81:09:bc:45:02:2d:93:42:16:59:a0:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
        Validity
            Not Before: Jan  2 12:33:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d91bcf69df6be224ee675e37fb4019785dd5e973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0f:bd:c0:1a:08:a6:c8:db:c4:0a:58:3c:c8:
                    0f:21:e4:74:7c:f9:c5:67:07:08:51:ba:e6:4b:f6:
                    5a:51:37:e7:84:1b:c0:52:b7:e5:f1:38:45:30:e7:
                    2c:2b:55:af:62:ee:09:8c:91:86:65:85:89:0e:c7:
                    3a:19:67:da:52:a5:c7:5c:c6:7c:08:78:33:b2:a7:
                    7b:95:67:f8:6c:2c:48:9e:a9:09:02:66:31:93:60:
                    7e:92:53:d6:73:e1:d4:e7:12:fa:e1:17:3f:bd:c6:
                    47:13:bd:f2:19:fe:69:11:5b:fc:a9:6d:b4:ca:a3:
                    f3:0f:bf:84:24:e3:0e:51:aa:35:1c:dd:6f:f7:89:
                    32:4f:34:98:38:0b:f8:93:ee:14:bc:0c:80:3e:72:
                    19:fa:de:5f:5b:70:c9:02:15:5e:b5:0e:bb:ba:bd:
                    d7:f1:db:9e:14:83:17:67:fa:fe:5a:f1:d0:30:84:
                    e6:28:28:cd:3a:58:61:a4:ac:95:83:23:d4:40:c3:
                    39:7c:57:b3:bd:67:af:ef:14:ad:89:e3:22:3d:58:
                    1a:26:b7:92:39:4c:ed:ce:1e:77:1b:e1:95:1a:b1:
                    b3:bd:76:5e:ff:bc:10:70:ea:ac:72:14:43:b6:74:
                    5b:13:3c:52:1a:82:1d:10:f9:68:0e:8b:14:9d:bf:
                    1f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1B:CF:69:DF:6B:E2:24:EE:67:5E:37:FB:40:19:78:5D:D5:E9:73
            X509v3 Authority Key Identifier:
                keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/2RvPad9r4iTuZ143-0AZeF3V6XM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:e881:650f::/48
                  2a06:e881:7340::/42
                  2a06:e881:73ff::/48
                  2a06:e881:9200::/45
                  2a06:e881:9300::/44
                  2a06:e881:9600::/48
                  2a06:e881:9700::/44

    Signature Algorithm: sha256WithRSAEncryption
         72:a7:56:df:62:e0:33:16:b8:2a:14:46:15:e3:89:33:33:c5:
         46:3f:4f:46:2b:fb:76:66:ea:dd:1b:fe:6c:7c:bf:e6:a8:13:
         b2:9e:e5:30:03:ab:c3:14:3c:ec:4e:d9:b7:96:83:4d:8a:59:
         82:ad:fd:75:60:8e:98:e4:a2:c2:67:fc:78:a0:f3:63:14:bb:
         1f:37:cb:2b:05:fe:77:65:4a:a6:45:4d:a0:20:73:46:ef:7f:
         dd:5e:8b:a2:f4:59:92:d6:b4:9f:63:40:39:ab:37:3b:f8:90:
         cf:85:bf:d9:27:4d:61:36:63:29:c9:97:23:9d:ba:46:45:45:
         5b:d2:9f:24:51:13:b4:ce:41:9e:ba:e9:a6:0c:b5:08:8a:60:
         ad:29:f0:34:46:9a:08:b0:0a:08:3b:68:f1:aa:3b:ae:75:19:
         a7:0a:be:20:bf:8f:0c:90:69:b6:20:be:d8:d1:c3:c7:7e:31:
         6e:de:d1:d7:40:2b:44:83:f0:37:9d:07:75:89:60:35:24:d4:
         72:6b:e8:25:34:43:67:cd:e6:b0:2d:47:69:0a:a0:e1:9c:7f:
         bf:ef:27:46:2f:a7:63:69:13:da:78:b0:d1:b0:60:ae:58:68:
         31:48:40:41:33:4c:6f:52:db:48:8e:a0:d7:6d:70:3a:40:96:
         1e:c5:8e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----