Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/9az1_JJ_2M-DvSarFWE8v-vi-UI.roa
File:                     9az1_JJ_2M-DvSarFWE8v-vi-UI.roa (raw, json)
Hash identifier:          qeQ8wnfDvxroIHmFXSlRII4gBqch7KWcJGDHcT5AQ98=
Subject key identifier:   F5:AC:F5:FC:92:7F:D8:CF:83:BD:26:AB:15:61:3C:BF:EB:E2:F9:42
Certificate issuer:       /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial:       018571C31619909872126C1782FCAED81615
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/9az1_JJ_2M-DvSarFWE8v-vi-UI.roa
Signing time:             Mon 02 Jan 2023 09:14:48 +0000
ROA not before:           Mon 02 Jan 2023 09:14:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     31898
IP address blocks:        2a06:e881:116::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 02 Jan 2023 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:c3:16:19:90:98:72:12:6c:17:82:fc:ae:d8:16:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
        Validity
            Not Before: Jan  2 09:14:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f5acf5fc927fd8cf83bd26ab15613cbfebe2f942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ce:05:24:12:3c:17:f3:9b:0a:1e:67:e4:a4:
                    30:ea:52:c2:13:a9:a9:3e:dd:57:9b:46:0e:8b:1a:
                    96:4a:69:7d:22:72:65:ec:32:e0:28:93:dc:c8:70:
                    05:05:21:6c:eb:47:af:0b:db:68:c6:c2:86:27:f1:
                    5a:d4:67:66:43:70:2b:80:db:80:06:72:6a:1e:e7:
                    af:ef:c2:c4:81:cc:be:1d:37:49:c5:6d:db:bc:36:
                    2f:37:50:db:39:e5:6d:a1:1b:04:9d:3a:82:80:54:
                    97:aa:69:8f:ef:37:cd:5a:1c:c6:70:15:de:9f:a6:
                    5b:67:61:47:7b:31:0e:da:a1:13:60:89:0a:fd:97:
                    a4:9d:62:36:cd:cc:8f:6a:eb:0a:2f:88:63:42:64:
                    d1:48:29:86:d0:c7:c2:69:29:4a:b4:ab:00:aa:f0:
                    a8:54:55:d5:66:bc:5b:09:aa:b1:3f:1e:2f:93:8f:
                    78:6d:76:57:5f:a3:25:96:d7:33:7e:bb:3d:f9:56:
                    41:76:80:26:bc:38:8e:12:e8:cb:4b:78:31:5f:3d:
                    8f:33:87:e5:39:b3:f6:e8:0c:5a:77:a5:9e:0c:99:
                    e6:ea:f4:b5:01:02:c1:d8:dd:9c:a2:67:ab:2f:ba:
                    e7:e8:50:51:94:0c:ff:a0:27:4e:16:28:4d:f0:1d:
                    3c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AC:F5:FC:92:7F:D8:CF:83:BD:26:AB:15:61:3C:BF:EB:E2:F9:42
            X509v3 Authority Key Identifier:
                keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/9az1_JJ_2M-DvSarFWE8v-vi-UI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:e881:116::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:99:5c:91:f1:96:2e:25:1b:b9:19:ef:49:c0:9c:74:c6:46:
         cf:66:57:83:53:f1:98:13:c6:4c:23:4b:1d:08:f2:0b:81:b2:
         82:ae:0a:21:4f:7b:f2:fc:d0:ad:38:5b:28:34:de:b4:f6:6a:
         98:2e:32:d9:ba:7f:8f:bd:31:28:01:14:61:63:19:9f:c2:e7:
         df:18:22:86:d6:32:b8:c5:b6:92:7e:3e:13:33:20:fa:44:59:
         0f:df:e0:47:d7:3b:b6:5d:b5:e9:d8:6c:71:a9:41:f7:b4:a5:
         97:d7:d4:03:72:96:23:12:82:f2:ea:61:ba:b1:69:94:58:e1:
         47:46:92:a1:b9:88:d0:2e:2e:68:95:11:4f:85:28:52:a2:89:
         f4:c0:3d:c5:40:00:95:ae:c1:ea:02:4f:0f:de:03:9e:54:6a:
         e0:63:ad:77:fd:fc:38:99:7a:79:3b:0a:c1:92:fb:6e:5f:c8:
         a0:67:c5:3b:9a:bf:5f:ba:83:fe:73:d5:66:91:58:80:f0:4e:
         45:d9:5c:67:b6:8e:78:21:8c:cc:2b:03:4a:bd:5e:ee:8c:52:
         6c:93:a8:9f:09:05:dd:c1:af:72:3f:5e:9d:ad:be:07:b0:09:
         0e:77:cd:ae:71:83:32:d8:03:f4:fe:27:b2:bc:3b:03:fe:05:
         a5:7a:da:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:40 2024 by rpki-client on console-ams.rpki-client.org