Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/Eo13AV4v-wHUv_i5YE3egYRyBiU.roa
File:                     Eo13AV4v-wHUv_i5YE3egYRyBiU.roa (raw, json)
Hash identifier:          rVBtZ7RMG///ryKJ/66UOmyraGj0GXpYw3lYwoFwepQ=
Subject key identifier:   12:8D:77:01:5E:2F:FB:01:D4:BF:F8:B9:60:4D:DE:81:84:72:06:25
Certificate issuer:       /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial:       018572BA80637D70D9FF51BC1C608E9B1CB1
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/Eo13AV4v-wHUv_i5YE3egYRyBiU.roa
Signing time:             Mon 02 Jan 2023 13:45:03 +0000
ROA not before:           Mon 02 Jan 2023 13:45:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210522
IP address blocks:        2a0f:5707:abe0::/44 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:ba:80:63:7d:70:d9:ff:51:bc:1c:60:8e:9b:1c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
        Validity
            Not Before: Jan  2 13:45:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=128d77015e2ffb01d4bff8b9604dde8184720625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:45:1b:38:a0:2a:c2:28:6e:84:bb:83:41:ea:
                    ed:51:02:cd:7d:d3:c5:08:c9:29:89:6d:7f:df:f9:
                    1f:70:dd:fc:8c:79:4a:16:de:fb:8d:12:66:58:b9:
                    62:77:2d:8d:59:71:78:ae:7c:3a:b3:97:ad:4d:c4:
                    69:a1:df:bc:02:31:a5:77:bb:6f:1d:45:0b:ff:87:
                    75:48:ed:44:2e:95:ce:47:a6:a1:46:90:32:83:4c:
                    95:72:63:87:df:71:2e:48:42:d4:d3:f4:0c:68:5b:
                    42:74:83:4a:b0:8e:7b:b3:0d:31:5c:2e:1e:7e:5e:
                    98:d1:7b:81:70:90:f9:1a:4b:b1:e5:47:88:3a:34:
                    fc:7f:8d:05:7a:5e:63:3b:69:c9:98:19:53:1e:f1:
                    6f:a8:28:a9:b8:b3:4a:03:5e:b8:60:49:ae:53:0a:
                    2e:eb:30:1a:42:8c:f9:4f:73:c4:8a:37:c7:61:59:
                    f0:8f:18:5a:0b:88:9b:a9:af:7e:11:b1:cc:04:49:
                    0d:42:07:c0:78:00:a6:ca:08:66:92:6c:a7:43:de:
                    05:a5:d6:0d:39:80:c3:e4:ea:5e:3a:a4:e6:bb:13:
                    18:66:93:f7:ab:2d:9c:80:ad:db:05:43:73:fa:e6:
                    5b:32:ca:85:0e:9c:c5:b4:76:ae:9e:6c:35:87:ff:
                    9f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8D:77:01:5E:2F:FB:01:D4:BF:F8:B9:60:4D:DE:81:84:72:06:25
            X509v3 Authority Key Identifier:
                keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/Eo13AV4v-wHUv_i5YE3egYRyBiU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:5707:abe0::/44

    Signature Algorithm: sha256WithRSAEncryption
         ab:d5:2b:4e:7e:2d:fc:0d:dd:a9:21:73:06:24:1f:1d:68:9a:
         ec:02:fe:f8:b7:90:77:b3:ac:fd:b1:85:28:65:12:74:90:ca:
         f1:24:60:e1:4c:e2:cc:78:7e:a6:6b:f4:6c:16:cb:2e:79:5b:
         32:4d:48:27:17:ec:41:46:b5:39:f6:0e:7b:ce:9b:ff:4c:16:
         b1:9d:a8:43:81:1b:71:1e:8f:e1:0c:2e:52:c4:89:fa:56:69:
         53:14:a7:52:61:00:08:e1:0b:a5:83:8a:5d:f4:20:c4:31:65:
         ec:d6:62:f5:78:d0:f5:17:5b:b7:44:f7:53:9e:80:aa:31:c6:
         7d:57:71:36:92:8c:c5:60:03:51:e1:f5:04:e7:3b:4a:cc:92:
         3f:71:32:c4:d5:10:1f:69:e6:29:41:7f:0b:34:ac:0b:17:87:
         7e:2c:93:1e:31:cf:14:97:73:79:5a:47:82:17:10:81:8c:f3:
         79:ea:9c:db:4e:86:52:12:e3:40:fa:4e:8a:f3:b7:26:aa:3e:
         95:7b:23:ea:60:e7:01:44:f3:41:10:d6:f9:09:3a:77:7a:33:
         0f:3a:11:42:9f:1c:00:d9:6e:72:21:4e:e3:34:7a:8b:56:06:
         4d:d1:97:fd:b1:b4:76:39:3a:27:eb:cc:ba:22:ff:0a:6f:80:
         05:1d:4b:5c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVyuoBjfXDZ/1G8HGCOmxyxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk
NWFlZjAwHhcNMjMwMTAyMTM0NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjhkNzcwMTVlMmZmYjAxZDRiZmY4Yjk2MDRkZGU4MTg0NzIwNjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0UbOKAqwihuhLuDQertUQLNfdPF
CMkpiW1/3/kfcN38jHlKFt77jRJmWLlidy2NWXF4rnw6s5etTcRpod+8AjGld7tv
HUUL/4d1SO1ELpXOR6ahRpAyg0yVcmOH33EuSELU0/QMaFtCdINKsI57sw0xXC4e
fl6Y0XuBcJD5Gkux5UeIOjT8f40Fel5jO2nJmBlTHvFvqCipuLNKA164YEmuUwou
6zAaQoz5T3PEijfHYVnwjxhaC4ibqa9+EbHMBEkNQgfAeACmyghmkmynQ94FpdYN
OYDD5OpeOqTmuxMYZpP3qy2cgK3bBUNz+uZbMsqFDpzFtHaunmw1h/+fdwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBKNdwFeL/sB1L/4uWBN3oGEcgYlMB8GA1UdIwQY
MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt
Y2MxYzliNWY2NjQwLzEvRW8xM0FWNHYtd0hVdl9pNVlFM2VnWVJ5QmlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw
LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB6vg
MA0GCSqGSIb3DQEBCwUAA4IBAQCr1StOfi38Dd2pIXMGJB8daJrsAv74t5B3s6z9
sYUoZRJ0kMrxJGDhTOLMeH6ma/RsFssueVsyTUgnF+xBRrU59g57zpv/TBaxnahD
gRtxHo/hDC5SxIn6VmlTFKdSYQAI4Qulg4pd9CDEMWXs1mL1eND1F1u3RPdTnoCq
McZ9V3E2kozFYANR4fUE5ztKzJI/cTLE1RAfaeYpQX8LNKwLF4d+LJMeMc8Ul3N5
WkeCFxCBjPN56pzbToZSEuNA+k6K87cmqj6VeyPqYOcBRPNBENb5CTp3ejMPOhFC
nxwA2W5yIU7jNHqLVgZN0Zf9sbR2OTon68y6Iv8Kb4AFHUtc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org