Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/wPLEYWIFnmVpJ4IGYTfb8jMwi1E.roa
File:                     wPLEYWIFnmVpJ4IGYTfb8jMwi1E.roa (raw, json)
Hash identifier:          v/FDpaGf/ZTP7/VYuyq/jKyda+LNKD7Ms/IGWMA7tlM=
Subject key identifier:   C0:F2:C4:61:62:05:9E:65:69:27:82:06:61:37:DB:F2:33:30:8B:51
Certificate issuer:       /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial:       01856D01BB969578D2AF18D0A473163C0617
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/wPLEYWIFnmVpJ4IGYTfb8jMwi1E.roa
Signing time:             Sun 01 Jan 2023 11:05:08 +0000
ROA not before:           Sun 01 Jan 2023 11:05:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204333
IP address blocks:        2a13:5681::/40 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:01:bb:96:95:78:d2:af:18:d0:a4:73:16:3c:06:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
        Validity
            Not Before: Jan  1 11:05:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c0f2c46162059e65692782066137dbf233308b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:73:14:71:75:c1:6e:42:69:c0:39:08:36:5e:
                    6a:90:c7:d6:d3:b7:80:ed:f8:9e:40:c9:dc:63:b3:
                    7d:24:40:a6:01:22:c8:43:6f:69:e5:5b:ca:7a:5d:
                    3c:e1:b5:be:d4:6d:61:8a:b7:11:ca:f6:5d:17:d6:
                    5a:7f:e3:d3:dc:cf:db:56:24:89:4e:c6:9c:70:74:
                    2c:c3:24:81:64:fc:ba:21:e2:5a:a2:43:ab:67:05:
                    42:b9:c1:99:f8:a1:c1:2a:03:3b:14:7d:68:81:e3:
                    36:42:1e:af:d8:ce:8c:20:56:c7:ad:7b:aa:72:a1:
                    56:88:29:01:4d:ff:bc:15:c9:60:e0:01:cf:d0:55:
                    7a:d2:47:10:dc:29:b2:31:fb:5a:48:af:28:20:30:
                    f5:0a:4c:8a:30:ad:1a:ea:14:54:77:fc:0e:9f:33:
                    ff:ec:fb:4c:bc:ed:73:82:49:dc:11:f3:f7:4a:d4:
                    d8:10:35:7c:07:97:42:b8:f5:88:7e:3a:18:a0:97:
                    06:59:ed:bb:06:af:07:5c:4e:62:a3:91:b0:bd:61:
                    af:92:29:0a:e4:b4:3c:e1:c0:32:3a:9b:f1:b9:17:
                    0f:da:ad:54:d7:5e:c6:ed:f2:21:ae:69:03:d0:fe:
                    c6:c5:08:cd:4d:bb:64:f8:39:1d:32:f1:0c:c5:99:
                    8a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F2:C4:61:62:05:9E:65:69:27:82:06:61:37:DB:F2:33:30:8B:51
            X509v3 Authority Key Identifier:
                keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/wPLEYWIFnmVpJ4IGYTfb8jMwi1E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:5681::/40

    Signature Algorithm: sha256WithRSAEncryption
         5d:1c:e8:65:eb:e9:a7:47:57:ba:0c:50:0e:2c:26:6a:45:56:
         48:1c:cc:e4:7c:ac:33:5f:8c:92:1d:bc:75:de:9b:5e:01:f2:
         0f:46:e3:86:54:2b:dc:3c:d0:86:67:8d:f0:c0:b2:1d:06:75:
         b9:29:b7:fc:c7:e1:0e:01:b3:4f:83:86:73:6e:3b:93:61:1f:
         73:33:e1:78:e5:8e:2e:b4:c9:44:6e:7e:60:4c:46:92:87:b9:
         18:ec:f1:3e:12:94:f4:3f:3e:d2:ca:61:46:54:c6:d9:8d:99:
         6f:29:f4:4f:5c:98:fe:9e:6f:de:5a:28:b8:36:55:1f:c1:7b:
         78:5a:5d:d9:c0:3c:57:d6:44:d3:52:e1:c2:94:4c:ef:64:ae:
         34:c7:a4:96:39:b1:f3:1a:d2:42:66:44:8e:53:05:14:e8:ae:
         4e:60:ca:15:78:f6:66:bb:ff:3d:94:20:35:cc:25:4d:6a:d4:
         47:6c:68:86:fa:ee:3c:4d:17:a4:b0:a2:22:7e:68:99:de:67:
         7b:65:10:2f:93:e5:c5:26:28:77:87:a6:56:21:84:9f:70:63:
         fb:7a:62:04:ab:ed:0c:9c:4e:23:c0:9e:f2:88:68:38:81:ba:
         62:c4:20:2b:60:8f:53:53:58:5f:28:7b:cf:ea:12:55:7e:36:
         a4:fb:78:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:49 2024 by rpki-client on console-ams.rpki-client.org