Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/xV6iUVrRU4N8-AU5qv_g9bAY4dg.roa
File:                     xV6iUVrRU4N8-AU5qv_g9bAY4dg.roa (raw, json)
Hash identifier:          CiPTK+APyXBu+JCweqHCGiSTUfeV1rmnqQUoakYYvBY=
Subject key identifier:   C5:5E:A2:51:5A:D1:53:83:7C:F8:05:39:AA:FF:E0:F5:B0:18:E1:D8
Certificate issuer:       /CN=81413f5afc6443e8d2343518ac0b19fd30ba3c12
Certificate serial:       01856F795AB546BF15EDE4A78C149F0D91AF
Authority key identifier: 81:41:3F:5A:FC:64:43:E8:D2:34:35:18:AC:0B:19:FD:30:BA:3C:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/xV6iUVrRU4N8-AU5qv_g9bAY4dg.roa
Signing time:             Sun 01 Jan 2023 22:35:02 +0000
ROA not before:           Sun 01 Jan 2023 22:35:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     999999
IP address blocks:        2001:678:d44:2::/64 maxlen: 64
                          2001:678:d44:100::/64 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:79:5a:b5:46:bf:15:ed:e4:a7:8c:14:9f:0d:91:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81413f5afc6443e8d2343518ac0b19fd30ba3c12
        Validity
            Not Before: Jan  1 22:35:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c55ea2515ad153837cf80539aaffe0f5b018e1d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e9:ec:c8:2c:f8:df:bf:b7:9e:8a:1c:b1:2d:
                    60:39:47:cc:34:45:5a:6b:be:14:51:f8:c0:41:ae:
                    a8:34:10:12:00:a4:61:18:63:41:d9:7d:b3:23:a5:
                    a2:76:6b:07:40:df:d6:bc:00:e2:39:cb:ec:f3:0c:
                    ff:7a:a0:db:24:c9:b7:57:79:a4:46:06:f9:7e:cb:
                    c3:f5:d4:22:e6:17:42:88:85:df:40:dc:ca:85:97:
                    79:69:83:c2:9e:3f:7d:e6:5e:eb:ed:eb:46:12:03:
                    b3:fd:a2:62:74:a7:71:40:1e:3a:10:90:c2:ca:f7:
                    fa:81:e2:30:ee:9d:47:2b:d1:24:1c:fc:60:7b:1b:
                    d9:9a:57:54:5e:25:5d:c0:a5:6c:aa:cb:da:cf:4e:
                    20:5d:88:da:84:46:f1:4a:92:6b:45:5c:06:68:af:
                    ef:6b:35:b7:80:d1:30:45:cf:e9:58:1b:4a:f7:7f:
                    4b:a8:00:3d:05:47:ca:62:a0:d0:29:9f:e8:d7:29:
                    17:d4:47:3f:cb:0b:9c:ad:3e:0e:0c:51:7d:8d:63:
                    3c:40:98:40:7d:d7:cf:71:54:3f:f3:b9:81:c8:17:
                    40:93:10:38:40:c8:99:18:ef:66:a3:d3:60:28:18:
                    44:17:45:0f:ff:15:48:5d:8d:97:3f:22:d3:97:26:
                    bd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5E:A2:51:5A:D1:53:83:7C:F8:05:39:AA:FF:E0:F5:B0:18:E1:D8
            X509v3 Authority Key Identifier:
                keyid:81:41:3F:5A:FC:64:43:E8:D2:34:35:18:AC:0B:19:FD:30:BA:3C:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/xV6iUVrRU4N8-AU5qv_g9bAY4dg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:d44:2::/64
                  2001:678:d44:100::/64

    Signature Algorithm: sha256WithRSAEncryption
         b8:6b:65:80:0b:23:21:d9:4a:98:67:a0:6e:ea:7b:2d:78:9b:
         38:86:b1:78:44:02:b3:5b:42:93:af:dd:33:2b:ef:c1:da:37:
         b5:9b:0f:bd:51:09:ee:56:cb:f5:de:0d:ef:4a:75:5d:d1:c6:
         aa:d4:eb:4c:aa:3c:71:fb:79:7b:b4:6e:fe:1f:c4:2b:55:ff:
         96:b9:35:bb:b8:11:a7:8f:9a:91:81:55:50:44:ab:43:b4:29:
         a8:f6:90:e6:94:1b:c9:66:cc:6b:ec:8a:c4:20:0c:19:af:88:
         f8:24:42:9a:01:1c:9d:00:87:23:8d:41:89:f7:37:87:3c:53:
         b1:f1:29:ad:f6:c8:b4:33:c8:7b:c1:50:cf:63:4e:35:57:8d:
         ff:94:e3:b4:2f:6c:47:94:ac:a6:3d:93:92:fc:de:5d:43:08:
         1a:e1:d2:75:3c:00:7a:82:61:79:86:09:5b:1a:b4:5c:e6:b5:
         13:d9:ef:c3:f8:01:6b:81:98:7f:d1:ed:68:fc:a6:2f:9e:8b:
         3b:9c:c8:ff:8c:c0:0d:7d:e6:8e:71:08:19:19:c2:d1:62:60:
         37:49:1f:6a:c8:67:59:20:ee:6f:61:4f:b0:16:4c:ed:89:97:
         64:25:d4:ed:5e:9f:bc:b3:fb:07:0d:6a:30:d4:b5:b0:de:69:
         e9:a9:74:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:20 2024 by rpki-client on console-ams.rpki-client.org