Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/fyVkJmUoyiOekP62gSeMhlHgZoI.roa
File:                     fyVkJmUoyiOekP62gSeMhlHgZoI.roa (raw, json)
Hash identifier:          ssMTKrfNnH0fGyyxdEPffJnDLVQcQX8LDHyaKanzRGQ=
Subject key identifier:   7F:25:64:26:65:28:CA:23:9E:90:FE:B6:81:27:8C:86:51:E0:66:82
Certificate issuer:       /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Certificate serial:       0186554CF749A3A5E4501C24A8BCE1656E0E
Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/fyVkJmUoyiOekP62gSeMhlHgZoI.roa
Signing time:             Wed 15 Feb 2023 13:39:12 +0000
ROA not before:           Wed 15 Feb 2023 13:39:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        2a13:5941::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:55:4c:f7:49:a3:a5:e4:50:1c:24:a8:bc:e1:65:6e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
        Validity
            Not Before: Feb 15 13:39:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7f2564266528ca239e90feb681278c8651e06682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:15:91:c5:02:01:12:8d:bc:c1:45:f5:ee:e3:
                    64:5c:e2:83:9b:a9:20:fe:32:6a:19:13:bb:50:00:
                    90:d7:7f:96:0d:6d:09:e0:12:a2:4f:ea:c7:cd:73:
                    08:92:3d:89:2a:63:5d:25:fd:9d:44:f8:2e:71:8d:
                    a5:64:54:98:d9:f2:c0:be:d8:9f:62:cf:69:f5:14:
                    03:48:94:aa:e4:74:24:e2:68:18:94:14:39:45:80:
                    b2:01:ee:54:f6:b6:8b:47:0e:07:a8:bb:04:f9:0b:
                    17:36:57:77:ce:1d:3c:c5:ab:2d:23:67:f5:d7:dd:
                    b8:66:bd:5d:eb:d3:1d:a1:a1:35:21:68:bd:01:e5:
                    7c:44:64:32:a1:26:30:a5:4f:ab:2e:84:9b:8c:9b:
                    37:b0:33:26:07:06:cc:c4:d1:5d:a4:e0:1b:b2:ea:
                    de:17:76:b9:45:c8:9f:0b:f7:bc:d2:28:4b:71:c7:
                    ff:6d:34:f7:fb:15:8c:e3:9b:0f:22:9c:de:34:d0:
                    bb:20:6f:35:50:22:ea:89:aa:88:90:9c:d3:ef:f8:
                    d7:bf:8b:00:5c:37:77:49:e8:fe:da:e2:74:26:2d:
                    51:40:cb:9e:47:45:d1:cf:f5:f0:3d:db:55:bd:3f:
                    50:5c:af:2c:41:e8:1b:90:b6:ad:b0:4b:87:aa:8f:
                    8e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:25:64:26:65:28:CA:23:9E:90:FE:B6:81:27:8C:86:51:E0:66:82
            X509v3 Authority Key Identifier:
                keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/fyVkJmUoyiOekP62gSeMhlHgZoI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:5941::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:18:d5:68:40:de:ff:e5:ff:19:87:33:98:12:cb:c4:2d:fd:
         ae:8f:bb:b1:62:8c:8b:c3:a0:a2:63:fc:97:18:ad:58:18:07:
         f1:37:20:92:59:96:58:c1:a6:de:14:49:77:93:f3:ac:72:30:
         0e:9a:6a:18:02:8c:f8:ea:67:a5:1d:39:10:ee:83:35:67:d1:
         db:2b:92:e2:75:00:93:0a:8b:d8:3b:b6:df:88:3d:61:3e:a3:
         05:76:a3:cf:e6:11:00:ba:f0:47:9a:90:4e:ac:b2:bb:cf:e3:
         47:12:e1:a0:0d:56:d8:45:82:ea:19:3b:51:7b:c3:fc:0e:cf:
         b3:ca:14:a6:c2:1f:81:0f:d4:04:7e:ba:a3:73:8f:52:b7:54:
         e3:58:3a:05:eb:aa:ca:f8:c6:b9:c3:b0:8f:a8:22:e6:19:c2:
         53:be:15:56:39:a0:3c:4e:24:ac:f5:c7:6b:23:57:33:99:ad:
         60:3b:72:87:f9:97:86:80:e4:6f:d3:23:c5:01:c3:ca:3f:3f:
         68:ce:b6:1f:70:b1:6e:70:5a:03:38:d7:1b:2d:f5:67:f4:14:
         b2:c5:1f:73:91:82:2e:98:fe:5e:d8:80:e0:10:e3:13:02:1b:
         23:f4:d5:9f:14:66:97:c1:65:ae:dd:06:24:8f:54:1a:04:1b:
         d1:28:b3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:18 2024 by rpki-client on console-fra.rpki-client.org