Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/MoLXoSjqggY824IVBJvF4EDZmGI.roa
File:                     MoLXoSjqggY824IVBJvF4EDZmGI.roa (raw, json)
Hash identifier:          612zhzXZxSvehjRCR1CAXE4wEttJ5p4KsmdOl73Hwj4=
Subject key identifier:   32:82:D7:A1:28:EA:82:06:3C:DB:82:15:04:9B:C5:E0:40:D9:98:62
Certificate issuer:       /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial:       0185EDBE9384B126E2E84C7CCCEB225B251C
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/MoLXoSjqggY824IVBJvF4EDZmGI.roa
Signing time:             Thu 26 Jan 2023 11:02:47 +0000
ROA not before:           Thu 26 Jan 2023 11:02:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16175
IP address blocks:        2a00:e08::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ed:be:93:84:b1:26:e2:e8:4c:7c:cc:eb:22:5b:25:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
        Validity
            Not Before: Jan 26 11:02:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3282d7a128ea82063cdb8215049bc5e040d99862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:da:eb:cf:81:ff:c1:8a:40:68:6d:22:f8:15:
                    04:e9:c7:33:cf:c6:48:1a:ad:c8:ec:42:99:c7:50:
                    8c:fe:d9:f1:77:63:6c:16:41:bb:32:ea:4a:be:5d:
                    a8:9c:0e:8a:b5:68:34:0a:1b:e8:e0:37:bb:ef:82:
                    54:1a:50:b0:a2:ef:57:53:04:1d:f1:cb:75:c7:a5:
                    1c:3e:ae:34:49:69:3f:bf:df:04:ea:9c:b1:75:ff:
                    d1:ff:fc:f0:10:dc:01:19:5b:56:9c:90:e2:f0:08:
                    7a:f4:1a:a6:9f:aa:34:df:fc:41:01:83:0f:19:6a:
                    b3:cc:14:67:2e:44:2e:47:0e:ac:75:50:78:04:df:
                    1c:ad:69:73:15:b0:51:3d:7c:06:53:58:3b:8d:0b:
                    5f:91:02:8f:2b:e0:72:c8:6b:cb:da:13:b0:91:0a:
                    bc:b0:ca:dc:52:b4:d4:87:4b:34:20:c7:05:7d:25:
                    20:e6:e7:d3:6a:4d:87:82:26:d0:0b:18:8b:fc:94:
                    9b:43:f4:c8:04:6d:ae:51:19:ee:76:63:02:55:c4:
                    7e:28:b6:2d:18:f4:01:7f:cb:52:88:f5:23:81:bd:
                    cd:06:ba:36:ae:76:dd:12:31:8b:d9:09:53:b5:01:
                    7d:d5:3b:53:ab:41:7f:8f:5f:fe:02:be:51:4d:6c:
                    8f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:82:D7:A1:28:EA:82:06:3C:DB:82:15:04:9B:C5:E0:40:D9:98:62
            X509v3 Authority Key Identifier:
                keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/MoLXoSjqggY824IVBJvF4EDZmGI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:e08::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:6b:44:cd:30:ee:29:f7:5a:2b:24:1c:f7:31:39:8f:03:38:
         2b:03:87:f7:c6:a3:a9:a9:37:4e:c6:c1:a6:23:2f:3c:0a:27:
         84:db:7d:0d:e0:78:a0:ed:c1:89:36:a4:59:44:44:54:78:9a:
         92:49:9c:ae:53:c1:7b:e1:a2:27:39:54:10:89:22:94:b3:0f:
         80:ee:4a:44:55:9f:38:6f:ef:60:d1:e4:6c:77:17:51:4a:0b:
         ed:86:9c:3c:9f:ab:90:75:37:0e:7c:f9:5f:de:00:ea:02:49:
         67:66:f1:d6:b3:a9:42:82:3d:87:3e:ff:f0:bc:29:78:eb:15:
         96:e0:c7:65:89:17:51:a2:d8:56:ad:25:66:41:24:81:91:e9:
         15:36:5c:a3:81:04:10:fc:41:63:b4:91:01:06:9e:7c:06:02:
         1d:91:84:d8:be:2e:b5:c8:47:1a:9b:9b:08:94:56:03:05:84:
         33:b0:75:63:99:3a:25:86:42:a9:02:3e:11:9d:b3:45:9b:9a:
         34:e1:34:d2:b9:5e:82:fd:31:30:74:d6:bc:68:d3:19:94:67:
         d2:4a:a8:59:16:a6:2c:48:2d:8c:d2:b7:ee:4c:d8:32:96:2b:
         4c:0a:88:0c:a5:6b:c2:e3:e7:1d:d4:1b:4f:8e:bf:88:b7:f6:
         d2:f1:eb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:09 2024 by rpki-client on console-fra.rpki-client.org