Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/qWK0yQEhE6fF06IHs_Y0OLoijvU.roa
File:                     qWK0yQEhE6fF06IHs_Y0OLoijvU.roa (raw, json)
Hash identifier:          VWANRut0ykxrX4SPykFEPightAHVILXL+Cak86fQ0cQ=
Subject key identifier:   A9:62:B4:C9:01:21:13:A7:C5:D3:A2:07:B3:F6:34:38:BA:22:8E:F5
Certificate issuer:       /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial:       0185EB30AB4E0CDA6F09937167419D1AA95B
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/qWK0yQEhE6fF06IHs_Y0OLoijvU.roa
Signing time:             Wed 25 Jan 2023 23:08:33 +0000
ROA not before:           Wed 25 Jan 2023 23:08:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     133499
IP address blocks:        2a13:c44::/30 maxlen: 30

Validation:               Failed, certificate revoked on Thu 26 Jan 2023 07:54:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:eb:30:ab:4e:0c:da:6f:09:93:71:67:41:9d:1a:a9:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
        Validity
            Not Before: Jan 25 23:08:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a962b4c9012113a7c5d3a207b3f63438ba228ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a7:9f:fe:6c:c3:67:65:0c:c4:96:83:c6:22:
                    94:f7:af:be:dc:7d:8b:27:36:d8:24:28:c3:e7:5a:
                    11:3b:45:8f:7c:e6:56:83:7e:6a:a1:0b:22:a8:6e:
                    aa:b0:73:bc:7a:96:d0:85:5f:67:06:5a:b1:4e:48:
                    c2:05:3c:e4:c8:9b:97:f8:bf:60:57:da:85:a5:a4:
                    9c:45:b8:0e:86:9b:02:c2:70:fe:0e:2f:c5:d6:90:
                    7b:f3:27:4c:c4:35:4c:7b:fd:38:a9:06:20:7f:fb:
                    18:25:ea:9d:aa:b7:7f:d3:8e:cb:34:d0:95:4f:1e:
                    92:1e:26:02:a6:65:12:c8:38:23:22:fe:bc:f4:3b:
                    0c:91:cd:b7:e8:30:81:3d:79:2c:24:8a:89:32:d2:
                    8a:81:24:91:e2:e5:1f:23:70:ca:8f:5c:6c:b1:a0:
                    22:a2:52:0d:4d:00:3c:52:c7:25:eb:21:88:38:b2:
                    54:3d:9d:24:6c:9b:54:45:b2:77:ac:06:2e:29:d6:
                    10:44:2d:0e:83:df:1b:b4:62:59:0b:74:17:7b:9e:
                    b1:34:62:85:36:e3:11:01:99:af:0a:03:aa:78:e5:
                    a3:df:24:24:71:b1:c0:f9:8c:aa:b3:92:e3:92:a4:
                    8b:23:b5:58:c9:6b:5f:63:d4:bf:03:38:9c:1f:72:
                    6b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:62:B4:C9:01:21:13:A7:C5:D3:A2:07:B3:F6:34:38:BA:22:8E:F5
            X509v3 Authority Key Identifier:
                keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/qWK0yQEhE6fF06IHs_Y0OLoijvU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c44::/30

    Signature Algorithm: sha256WithRSAEncryption
         49:12:8c:9d:05:e6:df:58:c7:a0:24:3f:e2:6f:59:39:91:b7:
         b5:47:3a:12:92:7a:41:f3:21:e6:cb:9c:ce:45:be:b6:e6:e9:
         5e:9d:92:e3:98:dd:3c:93:60:38:bc:89:93:10:eb:8c:62:1b:
         3a:dc:10:86:a8:89:e1:01:92:57:6c:98:a1:fe:54:8f:cc:a5:
         11:96:d4:8b:66:0f:cb:5c:ea:27:07:21:17:f7:53:e6:00:a2:
         5d:fb:97:7a:91:29:ae:7e:26:8d:a4:f8:2a:20:c1:49:29:4a:
         3c:06:03:2f:1c:9e:e7:b3:58:51:63:a6:70:87:e4:28:65:90:
         7b:fe:bc:93:31:da:6e:ec:3b:66:6a:a0:2b:54:90:92:88:e7:
         5a:50:01:93:1a:5e:d2:51:37:cd:90:c0:5a:28:03:2a:55:20:
         7f:9a:50:32:61:eb:b6:2b:26:0a:8e:2d:ea:ce:67:10:85:e2:
         54:8f:64:6c:1e:4f:9f:48:ef:01:ec:0e:c1:87:e4:2c:10:2e:
         ea:29:47:ab:0d:26:83:70:e5:0c:5d:ef:17:1d:33:aa:b9:d5:
         5b:da:62:73:ff:b9:60:d9:84:53:0e:42:8c:9b:4f:60:b2:32:
         7f:0d:ef:13:9d:55:86:5e:43:18:12:95:b3:e8:31:09:19:19:
         79:6d:68:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:47 2024 by rpki-client on console-ams.rpki-client.org