Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/ZkurwoUHoru23teEy4Izc5Pc8_I.roa
File:                     ZkurwoUHoru23teEy4Izc5Pc8_I.roa (raw, json)
Hash identifier:          WwnLzlwLnUvnVHEgzjKIbKhLGRbHpjFMDklQN8pB+5c=
Subject key identifier:   66:4B:AB:C2:85:07:A2:BB:B6:DE:D7:84:CB:82:33:73:93:DC:F3:F2
Certificate issuer:       /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial:       018B432121DF0FD2EBF39233AC01FC110E88
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/ZkurwoUHoru23teEy4Izc5Pc8_I.roa
Signing time:             Wed 18 Oct 2023 14:12:06 +0000
ROA not before:           Wed 18 Oct 2023 14:12:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34984
IP address blocks:        2a13:e940::/29 maxlen: 29

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:43:21:21:df:0f:d2:eb:f3:92:33:ac:01:fc:11:0e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153f24183d6c95185919349e6e92533736437b94
        Validity
            Not Before: Oct 18 14:12:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=664babc28507a2bbb6ded784cb82337393dcf3f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:11:59:e1:42:48:5c:a4:46:a1:cf:b3:87:23:
                    18:26:65:0b:00:2e:f2:9c:cd:ca:35:73:94:b2:42:
                    d7:55:f6:98:0e:2d:2f:4b:c2:40:7c:21:b2:72:ae:
                    ff:f9:29:4c:21:ee:95:67:59:91:f5:77:ef:83:cb:
                    1f:5f:23:06:d0:f9:96:bb:49:5a:5c:92:2f:ae:88:
                    6f:e2:63:c4:c5:54:58:dc:c0:80:b0:dc:64:0d:85:
                    51:58:35:a4:9c:20:f5:bc:b8:dd:23:b8:db:82:e3:
                    c2:86:7a:ba:78:1b:0a:12:67:37:08:85:0f:03:c4:
                    61:5e:45:c2:52:f6:6b:f8:10:a1:67:df:79:12:c7:
                    ba:27:88:9b:3b:31:ab:8f:00:44:42:36:1e:5d:38:
                    38:0a:bf:fd:0d:2c:4b:ec:d4:85:13:73:a5:66:a9:
                    ca:18:d8:c9:53:73:4f:59:61:09:a3:62:dc:5a:7a:
                    9f:9d:0e:f8:a4:89:40:93:21:39:3d:f0:81:a9:24:
                    8b:3c:06:7d:34:f4:22:62:e9:a8:62:57:aa:19:3c:
                    6d:bc:fd:e5:63:ac:38:1f:37:2f:5f:5f:88:fd:20:
                    e8:6e:e4:89:8a:e4:91:c8:5c:07:3b:e2:bb:ee:65:
                    8d:36:e5:52:81:5c:ea:86:9f:b5:33:8f:af:0b:f9:
                    25:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4B:AB:C2:85:07:A2:BB:B6:DE:D7:84:CB:82:33:73:93:DC:F3:F2
            X509v3 Authority Key Identifier:
                keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/ZkurwoUHoru23teEy4Izc5Pc8_I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:e940::/29

    Signature Algorithm: sha256WithRSAEncryption
         45:39:b0:63:16:5e:ff:6a:7c:21:f4:33:5d:56:dc:f1:44:51:
         7c:ae:f8:f3:6a:b3:13:fa:eb:8d:07:4f:e8:39:15:7e:52:e1:
         d5:71:de:ad:0e:d4:0b:a0:9a:72:67:d0:45:e8:b6:28:6f:c7:
         54:1c:99:ec:82:98:7b:75:5b:4a:a6:88:7a:8a:6a:3e:eb:9d:
         db:0c:57:9a:bc:8a:5f:8a:13:a5:1d:e7:6c:47:3d:e0:a3:97:
         4e:2e:0c:61:d0:dd:16:07:22:d6:ae:19:d9:93:38:4d:85:86:
         46:51:c4:4b:10:11:e9:b4:c5:ef:d1:63:40:18:27:d1:08:33:
         55:5f:84:6c:63:62:19:62:d3:dc:6c:1e:ff:47:c4:b7:d1:70:
         a4:02:89:58:f1:0f:26:3c:af:80:cd:7d:32:c4:9b:19:7d:a4:
         37:93:ee:f0:5f:94:e9:3d:8a:55:58:aa:a2:f2:0d:06:93:38:
         b4:33:5b:d0:15:d1:12:82:04:5a:1c:21:cf:de:2e:6b:19:e6:
         ec:92:18:cd:3d:a6:07:4c:41:50:b7:37:37:79:4e:ad:47:8a:
         b0:ee:4a:26:b8:3b:5b:c5:6d:b6:0a:6c:4f:e2:a4:4b:f7:cb:
         de:7e:4f:fe:2f:b6:32:26:92:8c:d0:48:05:f1:b4:68:6f:f7:
         3b:20:e1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:11 2024 by rpki-client on console-ams.rpki-client.org