Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/w2VO0-1htfH2aNi2O4d_VhnHfp4.roa
File:                     w2VO0-1htfH2aNi2O4d_VhnHfp4.roa (raw, json)
Hash identifier:          XXMOu+fGrPxIFzH0BQohxn+PEUTYcsEnuzns+I7nG3c=
Subject key identifier:   C3:65:4E:D3:ED:61:B5:F1:F6:68:D8:B6:3B:87:7F:56:19:C7:7E:9E
Certificate issuer:       /CN=98418cc6550dfdb1899969a6027e435a1b0b1341
Certificate serial:       01857355EC08765D982791018F49C0D85D80
Authority key identifier: 98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/w2VO0-1htfH2aNi2O4d_VhnHfp4.roa
Signing time:             Mon 02 Jan 2023 16:34:48 +0000
ROA not before:           Mon 02 Jan 2023 16:34:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47610
IP address blocks:        2001:67c:a20::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:55:ec:08:76:5d:98:27:91:01:8f:49:c0:d8:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98418cc6550dfdb1899969a6027e435a1b0b1341
        Validity
            Not Before: Jan  2 16:34:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3654ed3ed61b5f1f668d8b63b877f5619c77e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:da:c4:88:84:50:c3:66:24:24:31:2d:db:f9:
                    2b:b1:eb:e2:d6:53:8e:a8:54:6c:4b:5b:77:33:a6:
                    3d:22:81:d6:13:94:94:28:ba:71:03:7a:56:7f:b1:
                    28:4c:f4:b6:af:c0:e9:62:10:da:f7:25:6f:d6:e1:
                    e2:6c:4f:77:57:97:5f:4f:1c:28:9d:0b:fd:e9:36:
                    54:ef:5b:68:be:a9:21:ab:e6:21:2d:53:f3:ce:5c:
                    db:79:68:c3:59:ae:cf:18:2c:d4:a7:ee:a2:8d:9a:
                    09:dc:58:d8:d3:a9:8e:8e:73:1c:c6:f3:81:e8:68:
                    f6:87:b8:15:5c:2b:47:aa:80:78:75:c9:23:57:46:
                    4a:59:83:20:a8:ed:4f:22:7e:de:c1:5d:76:ec:cf:
                    8e:03:57:a2:5c:97:c6:53:53:fe:30:ec:80:72:d9:
                    a6:39:01:0c:a4:29:63:a6:2f:66:11:e6:19:4b:03:
                    1c:61:7b:30:5e:c5:f6:cc:dc:55:56:a5:bd:b5:e7:
                    bb:6f:0b:1e:73:e5:19:de:83:c4:c9:57:a1:fa:97:
                    8f:a0:0e:6c:19:9c:19:0b:8c:0d:33:22:50:eb:e7:
                    1d:5d:fb:3d:7f:25:3c:91:ed:de:84:27:81:fb:65:
                    a5:b5:dc:28:52:38:f7:f1:16:4e:af:81:cd:30:a9:
                    c0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:65:4E:D3:ED:61:B5:F1:F6:68:D8:B6:3B:87:7F:56:19:C7:7E:9E
            X509v3 Authority Key Identifier:
                keyid:98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/w2VO0-1htfH2aNi2O4d_VhnHfp4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a20::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:6d:2e:0b:08:c5:3a:ef:86:8c:09:c1:3c:b6:08:ab:c2:b8:
         38:9a:ec:05:99:17:be:e2:81:59:74:26:d4:5d:dc:e7:a8:3f:
         35:a7:37:a7:45:f5:f3:d9:f4:16:fa:97:b1:fa:cd:92:3a:65:
         0a:99:f7:8a:36:d4:56:31:2c:ab:f8:ca:d2:4d:01:81:7f:4a:
         3e:e8:5f:02:41:4d:b8:b9:ea:07:77:2b:11:cd:e0:1f:94:0c:
         75:92:b7:4f:02:ab:7f:94:07:38:a2:d4:ba:98:92:ce:11:dd:
         e5:44:e1:7e:e0:e3:19:25:1a:0c:c8:fe:e9:b7:d4:ff:ac:ac:
         77:59:67:03:02:73:e2:9c:dc:b8:e5:4a:f7:d5:1f:a1:88:26:
         c7:89:de:2c:d0:4f:f6:b2:23:1d:c8:44:c2:62:41:4f:6a:93:
         36:6e:5c:be:6b:de:1c:9e:98:22:08:ed:6a:85:68:2c:ce:03:
         64:cd:47:8e:86:15:d2:1e:91:cf:8a:a2:0d:d1:e3:87:00:b1:
         c4:28:7a:82:ce:f5:d4:2d:4f:48:2c:a9:0f:51:5c:86:4b:84:
         61:33:11:49:79:46:07:c7:71:fc:6b:fe:6d:c1:7f:7d:b6:c5:
         5b:76:ea:db:ce:2e:79:4a:90:15:be:1c:34:38:3b:8a:33:ba:
         78:2c:ec:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:25 2024 by rpki-client on console-ams.rpki-client.org