Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/CAVbu_qs_gXysy4ELaerI6ITc2Q.roa
File:                     CAVbu_qs_gXysy4ELaerI6ITc2Q.roa (raw, json)
Hash identifier:          UP6ypBqheM6gZH+y2KtIxR2vYbfAclkZ7izd8VLpHi8=
Subject key identifier:   08:05:5B:BB:FA:AC:FE:05:F2:B3:2E:04:2D:A7:AB:23:A2:13:73:64
Certificate issuer:       /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial:       018E3C3980FAC907455921E78D0DAB84E436
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/CAVbu_qs_gXysy4ELaerI6ITc2Q.roa
Signing time:             Thu 14 Mar 2024 09:09:45 +0000
ROA not before:           Thu 14 Mar 2024 09:09:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     62359
IP address blocks:        2a12:79c4::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 06 Nov 2024 08:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:3c:39:80:fa:c9:07:45:59:21:e7:8d:0d:ab:84:e4:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
        Validity
            Not Before: Mar 14 09:09:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=08055bbbfaacfe05f2b32e042da7ab23a2137364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:27:cb:c1:2b:c8:34:53:24:5b:0c:fd:fc:b2:
                    7e:ae:5e:76:dc:bb:a1:00:52:b7:b9:a6:18:49:03:
                    92:05:6a:28:e3:14:72:59:06:a7:19:f3:a7:62:4c:
                    5d:19:01:87:cc:9e:55:a1:91:86:6c:36:08:b9:a0:
                    1b:cf:d6:69:a9:32:fc:67:ab:57:ca:de:57:4b:3c:
                    27:20:7c:30:57:3b:f6:dc:48:0a:26:ef:33:f3:f6:
                    cb:e1:38:b3:f7:79:30:61:37:0c:8d:4c:3b:91:96:
                    e5:28:40:63:f2:1e:13:68:eb:35:35:b4:78:42:08:
                    a2:82:06:04:50:0c:dd:50:ea:b0:dd:6f:62:0f:2d:
                    23:54:c4:ef:c4:0d:2b:b5:47:b1:4b:62:f7:39:a8:
                    a7:2b:a4:79:92:75:48:be:a7:2a:12:a6:cc:25:04:
                    be:fd:6c:2d:4d:4b:33:0f:62:07:6b:09:c2:60:0b:
                    00:82:60:c5:d3:30:9e:e0:d6:17:ad:1d:71:4f:99:
                    d7:e7:13:25:2e:5a:89:1f:ff:ea:b0:bb:91:8d:53:
                    aa:d1:d1:3f:8d:71:f2:23:36:f7:89:4d:ad:9f:5a:
                    f9:06:a9:49:dc:45:21:a3:56:97:a2:d9:43:2f:a8:
                    69:a8:5a:85:00:19:ae:cf:20:30:a7:d7:79:3c:30:
                    fa:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:05:5B:BB:FA:AC:FE:05:F2:B3:2E:04:2D:A7:AB:23:A2:13:73:64
            X509v3 Authority Key Identifier:
                keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/CAVbu_qs_gXysy4ELaerI6ITc2Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:79c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:c4:4c:9d:2f:49:db:24:71:15:da:1c:40:bc:ae:e0:60:6a:
         80:78:85:8c:a9:ca:ee:68:9a:00:18:d4:20:c7:34:2b:9a:b7:
         72:c6:78:eb:7a:5d:a3:fd:cb:2f:41:45:19:2c:72:ac:60:91:
         67:3b:2b:eb:3c:43:22:ff:17:95:61:95:ba:b9:6b:d3:9b:a4:
         1d:3e:7b:d9:56:13:f8:b1:16:e1:44:f7:ad:9b:de:02:3b:5f:
         9e:fd:9a:c3:d4:5d:e2:cc:b6:cf:06:de:d2:75:0a:0a:d2:45:
         8c:da:2b:51:ac:72:57:dc:1a:1e:93:62:c2:d7:03:a7:cc:91:
         11:2c:61:87:f9:59:10:5e:6a:d9:25:6b:53:b4:cf:64:7d:80:
         e1:a9:78:a8:5c:19:66:ff:14:be:7a:7f:44:ce:a5:6f:0e:50:
         e4:18:cf:99:14:1a:96:85:60:1a:0e:cb:df:b7:cd:d4:3e:85:
         0f:1c:88:ab:42:4f:5f:af:aa:9d:f7:c5:09:09:6a:52:3a:f5:
         0a:cb:b2:31:9e:12:c5:b6:ab:da:e7:d4:2b:8a:81:f0:98:aa:
         3b:f4:e8:df:97:0d:2f:0a:b2:4d:ba:9c:3f:ea:2b:a6:20:07:
         8d:f4:85:fa:a4:fd:cc:68:85:f2:7d:b4:34:a2:bf:a5:f3:62:
         dc:56:5e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 10:44:28 2024 by rpki-client on console-ams.rpki-client.org