Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/UwDDnJzY2nz-V97cOu9kLWxwWpA.roa
File:                     UwDDnJzY2nz-V97cOu9kLWxwWpA.roa (raw, json)
Hash identifier:          jbUxEt2TAu8DCt9lSG9ZB8+eUhPl2R8eSfKzeUAFiDo=
Subject key identifier:   53:00:C3:9C:9C:D8:DA:7C:FE:57:DE:DC:3A:EF:64:2D:6C:70:5A:90
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       01903BF07C2E0D5F155271E54133D5F2D986
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/UwDDnJzY2nz-V97cOu9kLWxwWpA.roa
Signing time:             Fri 21 Jun 2024 17:55:34 +0000
ROA not before:           Fri 21 Jun 2024 17:55:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     61164
IP address blocks:        2a0e:9440::/29 maxlen: 29

Validation:               Failed, certificate revoked on Thu 04 Jul 2024 18:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3b:f0:7c:2e:0d:5f:15:52:71:e5:41:33:d5:f2:d9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jun 21 17:55:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5300c39c9cd8da7cfe57dedc3aef642d6c705a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:4a:68:21:31:07:39:14:ba:36:ec:a0:bd:
                    3c:fe:a7:d0:c1:aa:a2:83:f4:70:61:e4:b8:fd:4a:
                    d3:03:c1:c4:e1:cf:40:7a:a8:b6:18:6e:71:f8:f4:
                    25:21:bf:87:60:5a:95:8e:58:16:fd:17:da:76:85:
                    5f:a8:b5:3e:d6:11:81:28:02:64:d0:d8:09:dd:a9:
                    04:85:cf:c6:4f:ff:bb:64:9f:7a:a4:ed:14:be:87:
                    19:ac:1a:1f:db:f5:91:3c:eb:0a:8d:be:27:66:b1:
                    96:9b:e1:b9:77:07:1f:6f:af:e0:c1:50:96:5e:20:
                    ee:1e:0f:18:ef:70:c6:6b:6c:00:e9:f3:58:65:56:
                    84:a5:2a:64:74:27:79:bd:4e:98:a4:88:cf:4e:36:
                    b5:33:00:0e:13:e0:0d:ca:1f:76:a9:5b:79:ba:81:
                    27:59:99:1e:c6:b9:7a:ad:52:cb:ad:19:16:05:19:
                    62:59:20:ed:4f:d6:4e:fc:af:2c:09:03:fd:f8:22:
                    e5:e5:21:62:ae:bc:9c:99:37:44:12:6d:19:c3:9d:
                    f0:94:eb:88:49:3c:da:ae:44:93:2c:74:6b:e4:24:
                    44:a9:bf:0b:ff:10:95:e2:5f:b4:77:6e:51:6f:1b:
                    5a:df:fb:57:ad:b6:99:08:1d:31:42:28:83:8a:df:
                    87:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:00:C3:9C:9C:D8:DA:7C:FE:57:DE:DC:3A:EF:64:2D:6C:70:5A:90
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/UwDDnJzY2nz-V97cOu9kLWxwWpA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:9440::/29

    Signature Algorithm: sha256WithRSAEncryption
         62:05:46:3f:92:9f:d0:ec:b3:af:16:0b:65:7c:ef:29:25:10:
         f7:5c:6c:52:56:70:54:e9:ab:f7:a7:ff:8e:61:f0:07:26:22:
         ea:e8:2d:97:ac:19:a1:a9:f8:16:62:ba:54:9f:5d:e6:0c:ac:
         42:88:79:06:00:9b:28:ea:d3:f6:ef:70:66:8a:e6:c5:21:00:
         2f:fc:12:da:2d:ff:4f:d8:76:24:35:03:c5:60:b8:56:f9:24:
         d2:8b:1d:76:85:26:bd:ad:17:ca:fe:c5:32:05:a8:96:eb:cb:
         4a:02:41:22:3f:74:31:f5:d9:d7:72:dd:6d:75:d9:8b:80:37:
         26:23:66:40:00:9d:62:11:e4:ba:22:ee:8d:f9:38:06:4a:ae:
         df:a7:7a:be:b4:a3:1f:b5:36:43:4f:82:ca:be:09:4c:43:58:
         43:96:82:6a:c1:d0:46:f2:c0:86:32:5c:2d:24:c3:07:de:f2:
         3c:f3:94:c2:1b:cc:bb:ba:0b:b4:99:65:19:f2:bc:04:7e:3d:
         9f:d7:f6:ca:29:d6:bb:cb:fc:26:93:d1:08:39:12:a1:c7:2b:
         ee:1d:82:33:e9:fe:ac:0a:3a:ce:d7:36:56:a2:df:53:91:07:
         e5:01:b7:f8:38:da:69:b6:bd:3a:8f:3f:5b:cb:00:e3:0a:d5:
         fd:a5:e9:ac
-----BEGIN CERTIFICATE-----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Generated at Thu Jul 4 20:25:19 2024 by rpki-client on console-ams.rpki-client.org