Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/l82RUD0Uijsg9d7Aqde4hsRJOAk.roa
File:                     l82RUD0Uijsg9d7Aqde4hsRJOAk.roa (raw, json)
Hash identifier:          CLt2YuWoR3gjcNWBn/3+et+gNTdMlv1fB/eIiEHriGs=
Subject key identifier:   97:CD:91:50:3D:14:8A:3B:20:F5:DE:C0:A9:D7:B8:86:C4:49:38:09
Certificate issuer:       /CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Certificate serial:       018F6253E614A653B4E08B20602498941E28
Authority key identifier: D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/l82RUD0Uijsg9d7Aqde4hsRJOAk.roa
Signing time:             Fri 10 May 2024 11:46:56 +0000
ROA not before:           Fri 10 May 2024 11:46:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8075
IP address blocks:        2a12:62c0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 15:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:62:53:e6:14:a6:53:b4:e0:8b:20:60:24:98:94:1e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
        Validity
            Not Before: May 10 11:46:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=97cd91503d148a3b20f5dec0a9d7b886c4493809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f8:35:b9:36:9a:cb:9a:94:80:a9:50:fd:69:
                    f7:7f:2a:1a:99:fb:54:c7:fa:c5:0e:a9:41:4b:a1:
                    b5:b5:a9:02:16:23:a4:75:b6:65:16:b4:13:8a:f1:
                    9d:b1:02:0d:ce:56:5e:b7:10:37:67:88:f2:27:c7:
                    c8:2a:1e:63:25:9c:58:29:67:e3:74:a2:11:e4:1f:
                    3b:ea:45:c6:9a:0c:4c:76:02:72:09:a8:2c:5b:7e:
                    19:ec:31:c0:91:7d:90:24:4b:28:0a:e9:9c:b6:c0:
                    6c:6f:f6:24:bf:fd:9e:81:24:c9:b2:98:b0:a7:32:
                    86:a0:56:bf:5b:02:a9:8a:db:f6:07:fd:80:de:0c:
                    f1:c2:48:7e:fb:b1:f7:61:bd:93:06:cd:bb:b5:b3:
                    8f:4b:ee:b2:36:fa:79:93:24:97:fc:8b:c2:9e:12:
                    72:ec:bc:5c:03:63:15:77:6c:42:dc:63:e3:4f:40:
                    55:7e:6a:44:7f:7d:b3:ee:29:66:d0:86:1a:46:6b:
                    20:17:f2:61:ca:6a:94:c1:eb:bc:96:26:f9:43:78:
                    fe:8c:14:7d:d5:72:23:de:5e:6a:6b:32:af:a8:e0:
                    5c:47:34:75:6b:14:91:89:a4:fb:2b:dd:90:ba:7d:
                    15:4f:8e:57:59:52:8a:45:5a:48:ce:12:4b:dc:a7:
                    f4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CD:91:50:3D:14:8A:3B:20:F5:DE:C0:A9:D7:B8:86:C4:49:38:09
            X509v3 Authority Key Identifier:
                keyid:D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/l82RUD0Uijsg9d7Aqde4hsRJOAk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:62c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:28:95:2b:29:e4:9f:be:2e:9a:df:1f:c7:74:1c:70:85:85:
         52:4a:b8:82:5b:71:e6:dc:44:67:b5:f5:b1:69:e4:67:27:1b:
         75:26:f6:b4:54:3a:ec:0f:69:a1:48:25:55:f6:4e:0a:8a:5d:
         03:9b:ef:67:34:6c:2f:c9:2f:3c:a1:15:31:31:e9:f2:dc:c8:
         b4:b5:4c:53:a4:06:2a:d8:5b:a2:f8:4a:e3:fe:af:ca:0b:8c:
         0e:fe:ba:9d:a8:75:51:5d:38:6d:94:d5:53:ec:c7:1d:09:32:
         65:4a:6f:11:60:36:d4:a8:be:de:29:65:51:6b:b8:09:d8:ea:
         d4:d1:0a:64:2f:2b:81:09:4e:75:64:a2:ad:22:ee:83:c2:12:
         d8:a7:23:dc:98:b5:7c:e6:bd:40:a5:16:4f:68:88:80:83:13:
         24:8e:19:85:54:25:c9:e5:96:18:d9:b0:84:20:80:8a:69:b5:
         72:1c:91:45:09:67:ef:e2:61:87:3e:2c:76:9e:fb:7c:48:40:
         66:21:80:5f:af:8e:0d:3e:8e:08:36:ca:50:01:cf:03:23:59:
         38:10:b2:7e:73:63:30:12:9d:c6:ae:c8:59:c6:c4:fe:20:ab:
         e1:da:74:00:e1:0e:f3:06:84:aa:07:c1:aa:4f:91:f9:e1:50:
         dd:15:3d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:00 2024 by rpki-client on console-fra.rpki-client.org