Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/k7BqWiWcOzJOdMtVHnVHgKu4pMo.roa
File:                     k7BqWiWcOzJOdMtVHnVHgKu4pMo.roa (raw, json)
Hash identifier:          TjjnykPhQfLg2meOZhSLOlwyCQDM0xgz+4iaYIkVz6M=
Subject key identifier:   93:B0:6A:5A:25:9C:3B:32:4E:74:CB:55:1E:75:47:80:AB:B8:A4:CA
Certificate issuer:       /CN=544905eaad4cea6c3f2d650c08fae3d445186752
Certificate serial:       01856CAF1263E1263E76A769242F83CAFA08
Authority key identifier: 54:49:05:EA:AD:4C:EA:6C:3F:2D:65:0C:08:FA:E3:D4:45:18:67:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/k7BqWiWcOzJOdMtVHnVHgKu4pMo.roa
Signing time:             Sun 01 Jan 2023 09:34:50 +0000
ROA not before:           Sun 01 Jan 2023 09:34:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210941
IP address blocks:        2001:67c:810::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:af:12:63:e1:26:3e:76:a7:69:24:2f:83:ca:fa:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544905eaad4cea6c3f2d650c08fae3d445186752
        Validity
            Not Before: Jan  1 09:34:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=93b06a5a259c3b324e74cb551e754780abb8a4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f8:f9:4a:f0:ee:d4:f8:1e:8c:01:a9:6f:88:
                    8b:eb:c7:bf:64:b8:72:91:41:8a:03:c0:cc:fd:6f:
                    5e:ff:d0:e2:55:da:c1:7a:80:fb:18:d3:b7:0d:8b:
                    ac:c1:e7:af:0c:ee:83:d7:e2:10:b9:b0:8f:a2:b1:
                    12:8d:f7:3d:7c:ac:f6:4f:06:cf:c7:54:be:c0:e4:
                    58:b8:18:41:30:04:3c:c7:e2:f6:8e:0b:c3:92:b0:
                    7d:12:f2:43:29:d3:ac:34:f7:c4:f3:a3:f6:6c:65:
                    16:0f:63:a4:be:56:45:8c:93:75:f7:b1:2a:12:e4:
                    fd:0b:f0:f0:34:56:33:d7:fd:80:f3:94:cd:0d:4e:
                    28:e3:73:3f:bb:53:32:52:83:76:b6:ee:8e:f9:c8:
                    83:89:48:88:9a:69:fc:62:6d:f0:6e:fc:da:79:f0:
                    a5:fd:46:b1:ea:2a:ce:a5:5c:eb:8a:66:d9:19:82:
                    6b:7f:47:33:cb:75:de:e5:62:29:10:f7:85:e6:97:
                    c4:4e:43:12:78:86:11:43:af:ff:24:fb:78:54:95:
                    86:4d:7a:bd:ec:78:0a:4d:f6:a3:d6:5a:35:f8:ef:
                    06:84:18:c7:86:af:7a:1c:b2:f7:32:b8:55:ad:e8:
                    df:56:c4:28:33:60:54:95:15:3d:40:57:80:56:5b:
                    9b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B0:6A:5A:25:9C:3B:32:4E:74:CB:55:1E:75:47:80:AB:B8:A4:CA
            X509v3 Authority Key Identifier:
                keyid:54:49:05:EA:AD:4C:EA:6C:3F:2D:65:0C:08:FA:E3:D4:45:18:67:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/k7BqWiWcOzJOdMtVHnVHgKu4pMo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:810::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:ed:14:17:1a:ed:9b:4a:a7:45:0e:76:22:85:31:34:3c:4b:
         99:c6:20:5e:45:ca:eb:7a:18:4f:28:90:5d:d9:6a:fd:41:3b:
         98:91:4a:01:0e:e3:ef:de:4a:3e:dd:5f:21:90:0e:26:68:91:
         b4:2c:91:e9:ee:4e:6e:cb:ef:2d:59:1d:cf:64:f4:23:39:bb:
         9c:0f:ed:a5:d0:2b:5c:0c:59:eb:f5:bc:34:7d:0b:03:da:ab:
         94:e0:83:4b:64:62:5e:8f:a4:da:bd:27:b0:74:eb:68:72:57:
         7f:1b:f7:f4:81:26:3b:a4:ca:30:bd:42:c7:ba:76:23:93:5a:
         07:73:d7:74:6a:05:5e:b4:57:9b:71:d1:4e:ef:f4:6b:16:0f:
         ca:1a:d2:0f:f4:3a:8e:d6:ac:6e:03:11:43:ff:7c:eb:78:63:
         7e:9d:76:d4:80:63:64:52:28:5d:fd:63:ed:7a:58:78:96:0b:
         56:a3:2c:12:ab:2e:8e:31:44:95:0c:7f:81:e0:b3:dd:0c:35:
         40:7b:24:c5:04:ed:35:24:17:43:b9:ba:6e:12:f3:c0:9b:eb:
         65:86:f6:5d:10:ce:e5:53:29:dd:fb:4e:49:25:ce:4c:10:d0:
         ab:c1:d1:d1:b8:58:b9:5e:96:bb:db:4a:a0:a5:8b:73:18:c2:
         e8:1b:ab:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:36 2024 by rpki-client on console-ams.rpki-client.org