Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/dpl5_OX4WSvX4FnDXeKcHS68lUE.roa
File:                     dpl5_OX4WSvX4FnDXeKcHS68lUE.roa (raw, json)
Hash identifier:          hwEf/EyguM1XRr7izV+eGjjVrSJOLKlggHIlptXex6U=
Subject key identifier:   76:99:79:FC:E5:F8:59:2B:D7:E0:59:C3:5D:E2:9C:1D:2E:BC:95:41
Certificate issuer:       /CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Certificate serial:       01856FD52547B18CD3949B068E19548548E1
Authority key identifier: C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/dpl5_OX4WSvX4FnDXeKcHS68lUE.roa
Signing time:             Mon 02 Jan 2023 00:15:17 +0000
ROA not before:           Mon 02 Jan 2023 00:15:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39912
IP address blocks:        2a04:d200:211::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:d5:25:47:b1:8c:d3:94:9b:06:8e:19:54:85:48:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
        Validity
            Not Before: Jan  2 00:15:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=769979fce5f8592bd7e059c35de29c1d2ebc9541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:b5:09:8b:34:fc:78:dd:6a:56:ae:b0:ab:
                    a0:ab:d0:c5:c5:98:5e:1a:53:04:87:97:fe:2d:25:
                    46:49:08:ae:54:a8:34:86:94:b6:ed:a7:44:ce:43:
                    d8:7d:11:64:94:ae:e7:2a:69:81:71:0a:ef:fb:e6:
                    87:b2:a9:23:ef:d4:cd:f9:bf:80:68:6b:f4:81:03:
                    37:99:ba:d7:3c:8a:95:82:d2:c5:5d:0f:11:79:84:
                    f0:1f:58:b5:b1:68:74:44:51:2c:d3:72:7c:fa:4b:
                    99:bc:8c:36:7b:f9:63:c4:f3:41:67:1b:20:ec:46:
                    3c:b2:75:d1:b5:15:20:75:5d:8e:4e:c3:91:07:22:
                    7d:e1:a3:0f:fd:0e:11:92:f4:5e:ca:2a:59:1d:ec:
                    c2:0c:76:e7:40:c3:f9:ca:36:ee:2d:25:62:ee:9c:
                    11:41:df:01:8a:98:a7:f6:27:5a:a3:00:47:43:fd:
                    f9:b6:14:e5:bd:59:96:bd:90:5f:d0:ba:fa:b8:b4:
                    89:ea:9b:d9:98:55:c7:20:28:17:20:e6:eb:8a:1e:
                    db:56:be:4e:93:82:f1:dc:1f:c5:86:19:2f:aa:8c:
                    d8:a5:e1:7f:18:8e:e4:91:88:f5:dc:b9:3e:cf:88:
                    54:04:26:88:70:55:89:25:77:c1:41:14:f5:f4:b8:
                    5d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:99:79:FC:E5:F8:59:2B:D7:E0:59:C3:5D:E2:9C:1D:2E:BC:95:41
            X509v3 Authority Key Identifier:
                keyid:C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/dpl5_OX4WSvX4FnDXeKcHS68lUE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:d200:211::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:34:e4:5c:73:dd:82:01:d5:f9:42:e3:ee:5c:fb:36:79:9c:
         6e:63:9c:56:ef:3f:55:f7:e1:78:4c:6a:aa:a2:a9:48:64:64:
         c5:a4:ca:8c:98:64:35:ca:5c:d6:b6:c7:7a:62:78:f5:33:20:
         2a:db:14:c8:46:eb:f0:29:25:b3:f4:82:89:0e:b6:c3:92:8f:
         c9:5f:3d:d8:bf:b1:55:be:3e:32:ba:c4:d3:ca:b6:34:78:bf:
         ea:17:e6:26:5c:3f:0b:b4:fd:58:02:57:a8:51:45:a3:ed:b1:
         f2:48:17:f3:bf:3c:9c:90:a0:c4:a3:ac:e2:28:38:08:3c:48:
         6a:5f:e3:6d:f1:77:f7:2e:32:6c:70:b0:ad:85:45:e2:de:bc:
         63:c4:61:20:c8:73:d8:bf:84:b7:2d:71:0b:17:ed:20:a5:98:
         4b:d9:f1:ee:31:66:65:db:1a:bb:18:a0:44:3e:b5:d1:25:b9:
         56:39:e8:a0:f7:f0:7d:58:97:5c:52:d8:ab:58:a4:b5:c3:17:
         b9:f1:07:c8:e5:0d:58:33:3d:d5:e4:ef:9f:92:76:32:35:67:
         3f:b5:1a:c8:fa:8b:76:e5:c8:d1:a0:6d:97:cf:fa:87:a6:97:
         e3:3a:ce:31:77:f6:0f:ac:71:ac:19:ba:61:eb:d4:2c:0f:9a:
         46:6d:7b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:17 2024 by rpki-client on console-fra.rpki-client.org