Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/n6n-CuvgmUQEjfi-TlNAJ7uK9Xg.roa
File:                     n6n-CuvgmUQEjfi-TlNAJ7uK9Xg.roa (raw, json)
Hash identifier:          4uP6PaKlDXKd06B+nQtp0zpH6iAMOHdMO8k47+bn45E=
Subject key identifier:   9F:A9:FE:0A:EB:E0:99:44:04:8D:F8:BE:4E:53:40:27:BB:8A:F5:78
Certificate issuer:       /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial:       01867921B44A39B965FC4792CA4841B0ABD7
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/n6n-CuvgmUQEjfi-TlNAJ7uK9Xg.roa
Signing time:             Wed 22 Feb 2023 12:38:17 +0000
ROA not before:           Wed 22 Feb 2023 12:38:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49981
IP address blocks:        2a04:92c7:16::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:31:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:79:21:b4:4a:39:b9:65:fc:47:92:ca:48:41:b0:ab:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
        Validity
            Not Before: Feb 22 12:38:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9fa9fe0aebe09944048df8be4e534027bb8af578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5a:4b:f8:55:df:2b:f0:ae:3e:96:04:05:14:
                    d6:93:69:6c:78:98:2e:94:58:01:0d:3a:38:80:ea:
                    a2:29:7f:0c:01:50:c6:d2:c1:40:e8:c5:8c:00:29:
                    b4:90:c6:03:36:a0:1d:b5:03:a0:87:64:5f:4b:5b:
                    3b:c6:e5:17:e9:69:6b:b4:20:2b:41:08:fb:77:da:
                    25:09:f8:9c:f6:df:02:dc:3b:c2:ab:67:09:f1:c9:
                    ba:3e:1c:57:dc:fe:0a:95:00:58:41:e6:9b:76:6b:
                    35:57:f0:b9:94:2e:af:b3:f7:65:48:3f:49:ae:45:
                    8b:43:33:af:d3:0a:75:42:84:3a:53:63:52:0f:33:
                    4b:d0:df:e0:41:fe:70:b6:76:d7:b7:29:13:59:a1:
                    1c:3e:9e:1a:d7:a9:27:ef:9f:9e:26:d7:ab:cd:81:
                    0e:bc:03:1a:c8:e1:6e:f5:6c:17:7f:d5:d6:2f:35:
                    bf:37:7f:c1:e7:59:7e:8f:b7:f1:4a:58:8a:f1:7d:
                    c8:c8:9e:3d:56:bd:fc:ad:0f:81:c9:de:d3:ee:1d:
                    49:1a:e1:7d:98:cc:3b:86:b8:8a:4e:de:71:88:c0:
                    e4:31:c9:8a:93:92:dc:1b:b2:54:48:7a:60:97:76:
                    5c:4a:0d:6d:94:32:08:95:4a:3d:f4:6e:9d:c7:c3:
                    62:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A9:FE:0A:EB:E0:99:44:04:8D:F8:BE:4E:53:40:27:BB:8A:F5:78
            X509v3 Authority Key Identifier:
                keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/n6n-CuvgmUQEjfi-TlNAJ7uK9Xg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:92c7:16::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:54:ab:a5:37:85:a2:ec:5b:1d:f6:08:27:44:c2:04:ac:84:
         22:70:1d:68:69:34:bb:6a:9e:a6:b9:25:e4:4b:31:f7:63:39:
         1d:54:84:51:2e:71:7c:bc:8b:7b:fe:2b:dd:d6:46:a4:45:73:
         f2:d7:dc:5c:5a:07:17:87:33:0a:43:4e:c7:d1:d2:70:e1:8a:
         ef:4e:27:7d:ac:f7:de:96:38:13:68:19:62:24:99:ee:2f:1b:
         7f:32:21:9b:a0:e7:e2:c3:66:5c:06:1b:c7:d6:97:09:39:2f:
         d1:7a:9b:7a:38:46:ff:d8:5d:ef:24:b1:57:75:d0:ca:05:5c:
         88:19:9f:76:44:1b:ba:8e:cd:71:e9:9f:6c:23:ea:61:2d:ea:
         9f:68:d5:19:ba:73:3d:4e:9f:91:02:3d:3e:e9:ef:57:e6:b4:
         6b:35:d1:33:2b:6c:ed:d3:07:3a:2b:61:ad:b5:7f:b6:ef:b0:
         44:f4:4e:f9:53:48:d7:66:3f:94:29:b0:dd:f9:4b:c2:bc:6d:
         ab:3c:9d:33:29:24:cb:10:13:0d:69:b3:54:ff:a0:0b:e8:09:
         d1:90:85:0a:72:0d:8a:7e:dc:be:01:e2:13:3d:e3:f0:46:3b:
         1e:63:71:63:e3:e9:eb:e8:6d:84:8c:15:b2:6d:0c:c7:17:5f:
         d4:72:67:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:52 2024 by rpki-client on console-ams.rpki-client.org