Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/sNZ_eznt64EWnpHrOS0EHEHh0xI.roa
File:                     sNZ_eznt64EWnpHrOS0EHEHh0xI.roa (raw, json)
Hash identifier:          TuweFOUFk5pemnN+/Tey7Rki5jAcX4s6XQ6w4fL5YXU=
Subject key identifier:   B0:D6:7F:7B:39:ED:EB:81:16:9E:91:EB:39:2D:04:1C:41:E1:D3:12
Certificate issuer:       /CN=26af6a0e490d980cd4bc0f8b0dfa105b497fe545
Certificate serial:       018572B42406D578D4800ED4DA01969827C9
Authority key identifier: 26:AF:6A:0E:49:0D:98:0C:D4:BC:0F:8B:0D:FA:10:5B:49:7F:E5:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/sNZ_eznt64EWnpHrOS0EHEHh0xI.roa
Signing time:             Mon 02 Jan 2023 13:38:06 +0000
ROA not before:           Mon 02 Jan 2023 13:38:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        2a12:9780::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:b4:24:06:d5:78:d4:80:0e:d4:da:01:96:98:27:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26af6a0e490d980cd4bc0f8b0dfa105b497fe545
        Validity
            Not Before: Jan  2 13:38:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b0d67f7b39edeb81169e91eb392d041c41e1d312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2b:64:93:eb:89:98:ab:01:8a:63:c4:19:40:
                    59:8e:17:2e:30:a3:19:a0:18:8d:a5:e6:d6:5b:31:
                    17:88:01:b6:f8:7d:9e:37:79:3e:e9:a1:a9:f8:00:
                    2c:4f:29:62:7c:93:63:f4:fb:e0:12:d2:6a:c1:f7:
                    13:5d:7b:1e:c8:7a:a2:df:28:ce:e9:86:c4:eb:28:
                    a2:c5:ff:82:f9:09:c4:d7:08:1f:87:4c:da:97:28:
                    a3:31:b1:ca:72:0b:cc:92:4c:39:ef:bd:c9:c6:ec:
                    49:e1:e0:a2:3a:70:c5:ce:ca:a2:fb:dd:e5:52:0b:
                    6e:a7:0f:9f:fc:b9:02:dd:11:4c:bf:71:e2:20:0d:
                    a3:20:59:1f:81:5c:b8:67:d0:96:9c:a3:16:67:31:
                    1a:2f:b7:63:ca:88:e8:a2:41:5e:bf:0e:bd:ef:bd:
                    2d:db:27:65:76:8d:78:ff:23:e8:33:42:7b:cd:55:
                    ba:50:96:04:cb:2d:d7:67:90:2e:97:07:85:34:3b:
                    cd:df:e9:2b:1c:06:9e:c7:1f:fa:85:f6:2d:cc:f5:
                    2a:2d:35:85:6d:63:bc:7e:0c:27:74:b4:f0:84:67:
                    b2:1c:75:f2:16:6d:9e:af:07:08:f9:bf:9b:73:1e:
                    6c:8f:2f:3f:34:ce:a8:dd:c6:76:44:3b:b5:19:21:
                    1b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D6:7F:7B:39:ED:EB:81:16:9E:91:EB:39:2D:04:1C:41:E1:D3:12
            X509v3 Authority Key Identifier:
                keyid:26:AF:6A:0E:49:0D:98:0C:D4:BC:0F:8B:0D:FA:10:5B:49:7F:E5:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/sNZ_eznt64EWnpHrOS0EHEHh0xI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:9780::/29

    Signature Algorithm: sha256WithRSAEncryption
         b8:65:99:18:53:fa:d4:2b:67:3f:cd:64:50:bf:db:0b:5b:18:
         44:82:a5:df:3c:b6:ba:be:4a:82:5b:e5:8e:62:75:e4:2f:6a:
         61:80:c2:5a:7e:de:35:b4:ba:cf:d8:5d:d9:b8:3b:e2:66:72:
         12:17:2d:bb:31:e9:3c:25:12:06:48:68:bf:35:db:1f:f1:f2:
         1b:c2:63:2b:9f:d5:b5:39:c7:99:97:d1:6b:22:77:a1:46:12:
         40:a8:68:e2:86:33:44:c1:84:00:d9:b2:e7:bd:25:0e:37:1b:
         1b:57:dc:09:2f:e6:a5:e6:62:c9:5d:3c:09:d4:b1:a1:58:50:
         0c:65:a1:49:ff:81:e0:f1:d8:a4:d3:dc:ac:f1:a6:45:28:b1:
         7e:82:d7:d7:fc:0b:9e:32:bd:8f:63:5e:58:68:4d:5d:c5:70:
         83:89:c4:c6:88:ea:6d:96:e3:11:2e:ab:2a:88:21:e5:4e:0b:
         5e:cb:a7:fa:3e:f6:3b:36:3b:fb:ee:81:b0:8c:ef:b7:9e:e9:
         77:36:ae:ca:59:44:32:91:c7:2f:33:53:78:9d:7d:c2:34:34:
         3a:7f:cc:99:86:a3:04:e0:38:15:36:26:db:0b:7e:e8:01:c6:
         3e:2c:88:67:8e:77:ce:c6:77:3f:cd:7c:fe:dc:b9:4f:a1:d1:
         c1:ac:a5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:35 2024 by rpki-client on console-fra.rpki-client.org