Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/ESlbN5Hjr6kObfXlUWE96dxCFyk.roa
File:                     ESlbN5Hjr6kObfXlUWE96dxCFyk.roa (raw, json)
Hash identifier:          ObZiiUEBA3J6LnKRvRs0a9yyKt1poMvZ8oRseIqeRDQ=
Subject key identifier:   11:29:5B:37:91:E3:AF:A9:0E:6D:F5:E5:51:61:3D:E9:DC:42:17:29
Certificate issuer:       /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial:       018FF42AA99D2E07A593417D0D4BBD49F930
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/ESlbN5Hjr6kObfXlUWE96dxCFyk.roa
Signing time:             Fri 07 Jun 2024 19:26:27 +0000
ROA not before:           Fri 07 Jun 2024 19:26:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202044
IP address blocks:        2a13:d1c0::/29 maxlen: 29

Validation:               Failed, certificate revoked on Sun 22 Sep 2024 19:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:f4:2a:a9:9d:2e:07:a5:93:41:7d:0d:4b:bd:49:f9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
        Validity
            Not Before: Jun  7 19:26:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=11295b3791e3afa90e6df5e551613de9dc421729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:38:a9:b7:cc:64:2f:0a:5d:5d:d9:96:85:52:
                    a6:67:d7:7a:cd:d8:36:08:d4:31:21:f9:c5:3c:19:
                    ed:73:bd:51:52:67:87:7c:59:16:81:0d:aa:99:d3:
                    8d:2b:ad:27:9e:26:07:25:63:76:26:9c:22:c5:b1:
                    a9:c0:30:28:da:9d:4f:b5:db:2e:1b:a8:4e:8c:72:
                    11:4a:2f:57:9b:e4:2a:fa:61:84:28:48:ca:87:96:
                    7c:48:3d:dd:6b:e4:b5:6a:a3:46:ba:17:69:ce:85:
                    6b:1e:5c:09:81:a0:c6:12:fc:e9:c8:8d:93:f4:aa:
                    37:14:a7:7b:d5:59:1a:9b:3d:ba:a6:8e:18:af:0a:
                    1e:1d:60:13:0d:88:0c:91:ae:85:a0:67:82:3c:50:
                    91:bb:9f:06:4c:a6:df:b4:51:7d:09:2f:18:d1:a1:
                    a8:ea:93:1f:0d:1e:ac:1d:65:1e:be:de:dd:c5:8d:
                    8e:2a:37:18:5c:18:ba:dd:51:60:de:38:a8:c5:18:
                    c7:81:28:0a:f4:e7:a4:3a:de:d3:dd:f3:d2:a1:7b:
                    b5:ca:93:b9:03:54:ae:b4:f6:82:e0:bc:48:1f:89:
                    67:04:9a:f3:f2:8b:0a:25:4f:31:ef:5a:67:df:47:
                    6c:6a:60:ec:57:06:e0:87:6c:dd:03:ae:71:c5:5d:
                    ae:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:29:5B:37:91:E3:AF:A9:0E:6D:F5:E5:51:61:3D:E9:DC:42:17:29
            X509v3 Authority Key Identifier:
                keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/ESlbN5Hjr6kObfXlUWE96dxCFyk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:d1c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         9c:7b:22:1a:46:db:2a:ff:21:e0:9e:cb:7f:47:57:9f:e6:95:
         2d:b8:e8:31:04:7f:1a:65:9d:cb:2c:46:1e:29:0b:12:4f:e6:
         0f:c6:02:75:a8:b5:bb:b5:3a:0c:ff:68:36:ed:8f:b4:85:eb:
         c2:bc:c7:0d:84:d2:ee:f3:e2:18:2a:37:b6:7b:d2:c5:94:bc:
         8a:ec:90:07:2e:f8:74:02:45:e8:f7:26:64:28:8b:21:1b:3d:
         19:92:ac:6a:0a:f3:36:44:80:72:27:b1:f6:4f:25:95:b0:c8:
         55:5e:55:9d:bc:c5:87:d4:6d:03:c2:36:1b:37:57:3b:54:40:
         a1:c3:a4:4e:dc:eb:f6:d7:b0:51:45:e4:d5:83:12:76:1e:28:
         f5:a6:3f:8f:5c:d8:db:96:09:6f:d5:a2:68:f5:b4:40:a5:f3:
         0c:e9:94:4c:ed:bd:ed:87:f5:fc:59:6e:61:dc:21:41:7c:c4:
         d8:8f:54:3a:b9:2b:09:48:e8:37:97:9e:31:a1:3a:eb:51:59:
         82:12:98:f9:c0:55:26:38:11:0e:a1:e0:96:8b:61:39:c6:e0:
         2f:7d:19:b3:2b:4f:0a:08:26:22:45:96:8b:b4:65:24:e6:14:
         1c:98:45:c7:82:2d:7f:68:46:43:4a:91:0b:c6:cd:83:4f:b0:
         98:79:44:dc
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY/0KqmdLgelk0F9DUu9SfkwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjQwNjA3MTkyNjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTI5NWIzNzkxZTNhZmE5MGU2ZGY1ZTU1MTYxM2RlOWRjNDIxNzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzipt8xkLwpdXdmWhVKmZ9d6zdg2
CNQxIfnFPBntc71RUmeHfFkWgQ2qmdONK60nniYHJWN2JpwixbGpwDAo2p1Ptdsu
G6hOjHIRSi9Xm+Qq+mGEKEjKh5Z8SD3da+S1aqNGuhdpzoVrHlwJgaDGEvzpyI2T
9Ko3FKd71Vkamz26po4YrwoeHWATDYgMka6FoGeCPFCRu58GTKbftFF9CS8Y0aGo
6pMfDR6sHWUevt7dxY2OKjcYXBi63VFg3jioxRjHgSgK9OekOt7T3fPSoXu1ypO5
A1SutPaC4LxIH4lnBJrz8osKJU8x71pn30dsamDsVwbgh2zdA65xxV2uEwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBEpWzeR46+pDm315VFhPencQhcpMB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvRVNsYk41SGpyNmtPYmZYbFVXRTk2ZHhDRnlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhPRwDAN
BgkqhkiG9w0BAQsFAAOCAQEAnHsiGkbbKv8h4J7Lf0dXn+aVLbjoMQR/GmWdyyxG
HikLEk/mD8YCdai1u7U6DP9oNu2PtIXrwrzHDYTS7vPiGCo3tnvSxZS8iuyQBy74
dAJF6PcmZCiLIRs9GZKsagrzNkSAciex9k8llbDIVV5VnbzFh9RtA8I2GzdXO1RA
ocOkTtzr9tewUUXk1YMSdh4o9aY/j1zY25YJb9WiaPW0QKXzDOmUTO297Yf1/Flu
YdwhQXzE2I9UOrkrCUjoN5eeMaE661FZghKY+cBVJjgRDqHglothOcbgL30ZsytP
CggmIkWWi7RlJOYUHJhFx4Itf2hGQ0qRC8bNg0+wmHlE3A==
-----END CERTIFICATE-----
Generated at Mon Sep 23 00:52:45 2024 by rpki-client on console-ams.rpki-client.org