Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/9kANxY9Tqzy0mOXqsKiGY7IBLDc.roa
File:                     9kANxY9Tqzy0mOXqsKiGY7IBLDc.roa (raw, json)
Hash identifier:          t+y1ktAZgV7+DVvkVDeRNWMPDtJRuN7TL/GAqc+kUHM=
Subject key identifier:   F6:40:0D:C5:8F:53:AB:3C:B4:98:E5:EA:B0:A8:86:63:B2:01:2C:37
Certificate issuer:       /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial:       01856D78991C06CEA7817B64B758742A0F5D
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/9kANxY9Tqzy0mOXqsKiGY7IBLDc.roa
Signing time:             Sun 01 Jan 2023 13:14:58 +0000
ROA not before:           Sun 01 Jan 2023 13:14:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209018
IP address blocks:        2a12:79c1:1::/48 maxlen: 128

Validation:               Failed, certificate revoked on Mon 23 Jan 2023 14:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:78:99:1c:06:ce:a7:81:7b:64:b7:58:74:2a:0f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
        Validity
            Not Before: Jan  1 13:14:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f6400dc58f53ab3cb498e5eab0a88663b2012c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:da:2c:0f:bb:2c:3c:39:bf:bd:cc:74:06:4b:
                    60:44:98:44:b5:52:8c:f6:f4:1e:eb:93:2c:7f:8b:
                    4c:9f:b8:03:4d:d4:20:af:5e:d5:1f:a8:7c:9a:cc:
                    c8:cb:ee:26:15:4b:08:63:45:81:7e:63:ca:14:dc:
                    97:f2:09:fc:16:5f:62:6b:5c:a9:bd:39:c2:ff:96:
                    30:ce:f9:b5:76:a2:93:22:67:fa:04:9e:78:59:90:
                    cd:db:fb:02:31:31:89:5f:57:95:87:a7:34:58:75:
                    ab:b1:8f:f7:34:73:35:29:82:d4:75:43:ca:da:04:
                    05:34:bf:e8:68:ef:bb:8f:07:26:ef:a6:6a:59:f3:
                    ad:d3:d7:fa:14:c0:71:d2:ec:38:5b:db:17:fa:af:
                    50:9b:3b:39:61:37:3b:e9:c3:f9:95:f3:4c:81:82:
                    55:ed:51:e3:2a:d0:d0:bb:49:0d:d7:10:6f:24:ce:
                    dd:9a:e7:8c:2f:3b:b4:6a:7c:af:dd:ab:db:d8:73:
                    2d:b2:c8:dd:b8:bf:4a:85:06:04:f9:b4:86:b8:9c:
                    ba:38:60:50:9f:46:ea:c7:7b:5d:51:2f:8a:ec:7e:
                    7d:77:cb:9c:60:06:29:b4:9b:4d:8d:7e:14:f1:25:
                    5b:5b:47:c7:b2:59:ed:d6:dd:63:41:e1:bc:f1:92:
                    23:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:40:0D:C5:8F:53:AB:3C:B4:98:E5:EA:B0:A8:86:63:B2:01:2C:37
            X509v3 Authority Key Identifier:
                keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/9kANxY9Tqzy0mOXqsKiGY7IBLDc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:79c1:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:0a:ea:ee:37:2c:41:06:b5:21:b4:82:3c:e2:99:19:bc:96:
         69:ad:55:54:25:a4:64:b4:b5:50:d4:d9:9e:b2:af:f2:82:3c:
         59:39:b0:38:0c:1a:cd:74:2f:bb:5c:93:e8:2d:fb:9e:ac:9a:
         48:a8:62:92:55:bc:37:7b:d2:bb:9e:1a:1d:4f:cd:f0:46:39:
         a9:cf:d7:83:0e:02:10:f6:b1:f4:ca:65:87:34:da:f0:fb:f3:
         e5:be:59:e5:dc:ee:ce:2c:c4:a2:1c:45:ce:83:e2:14:ad:99:
         36:b7:68:70:ac:9f:c6:a4:5c:df:fc:fe:4d:e9:ab:6a:7e:68:
         46:4f:25:9c:5c:2a:93:3a:ad:f3:e8:2e:79:be:2c:ff:c0:b3:
         4f:d6:6a:5f:63:62:2a:f5:80:ff:68:aa:67:b6:34:83:5f:10:
         63:a8:8a:57:df:e2:38:7e:2d:2e:06:51:fb:bd:2d:69:6f:61:
         bd:23:fb:0e:4d:40:c6:fe:63:a7:52:52:7d:82:fe:ca:ff:f5:
         97:76:de:e7:a9:95:5d:e2:ad:c5:b8:12:19:fd:05:21:90:c8:
         6b:02:69:44:84:ce:49:65:1f:1a:ce:58:8c:6a:a6:54:62:33:
         43:f7:2b:5b:38:82:e5:f7:ef:11:79:bc:25:d4:b4:ce:0e:40:
         d5:30:61:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:52 2024 by rpki-client on console-ams.rpki-client.org