Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/1_7PN0arvaSSq6svCwXbCHnd7K4.roa
File:                     1_7PN0arvaSSq6svCwXbCHnd7K4.roa (raw, json)
Hash identifier:          FEtabfB/2Uh67LIp9pEIUmT1Wq2Z5Z0SjiLBpGL/9e4=
Subject key identifier:   D7:FE:CF:37:46:AB:BD:A4:92:AB:AB:2F:0B:05:DB:08:79:DD:EC:AE
Certificate issuer:       /CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
Certificate serial:       018572DF0E34C2102B5C1CE558FF3FABAD88
Authority key identifier: 9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/1_7PN0arvaSSq6svCwXbCHnd7K4.roa
Signing time:             Mon 02 Jan 2023 14:24:58 +0000
ROA not before:           Mon 02 Jan 2023 14:24:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     13127
IP address blocks:        2a0c:9180::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:df:0e:34:c2:10:2b:5c:1c:e5:58:ff:3f:ab:ad:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
        Validity
            Not Before: Jan  2 14:24:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d7fecf3746abbda492abab2f0b05db0879ddecae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:53:ed:7f:ff:4d:60:05:4e:0e:57:87:f1:b2:
                    77:ce:c6:94:87:44:23:c1:4f:ea:0d:64:a9:fa:9f:
                    1d:21:f1:e6:cd:d2:4a:00:12:71:1e:0d:aa:a5:5c:
                    eb:36:69:e5:2e:93:10:ca:8a:94:a8:24:f8:70:59:
                    f9:5b:a2:e8:4c:f1:78:e8:f1:54:b2:9e:71:1b:eb:
                    59:21:37:09:19:44:6f:e4:6e:d8:7d:e0:bc:8c:66:
                    0e:4b:16:2e:98:a1:1e:a0:2a:70:56:9c:3e:97:d9:
                    93:9a:e8:4e:52:78:dd:61:79:ad:04:3f:f7:10:e3:
                    05:53:24:0d:21:6a:c1:65:58:23:ef:3b:59:e4:4d:
                    61:d8:90:7e:19:6e:5e:84:0b:74:c5:dc:a5:73:89:
                    08:28:a9:ae:8d:12:78:87:50:63:a3:12:54:61:82:
                    e6:19:58:34:e6:c5:bf:f3:c8:eb:b0:79:c7:86:d7:
                    ef:8c:7f:ff:19:df:7a:1e:2f:29:ca:ed:9f:39:23:
                    ed:20:85:7c:1b:74:f5:b1:d1:bb:bc:bc:01:03:2b:
                    e8:71:d0:fb:80:29:49:73:28:47:92:8e:f6:29:19:
                    9e:47:46:dc:28:f0:86:1f:70:94:17:2f:4d:80:00:
                    0b:06:66:df:18:71:c6:4f:b8:52:df:72:d0:79:a9:
                    d1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FE:CF:37:46:AB:BD:A4:92:AB:AB:2F:0B:05:DB:08:79:DD:EC:AE
            X509v3 Authority Key Identifier:
                keyid:9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/1_7PN0arvaSSq6svCwXbCHnd7K4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9180::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:04:c4:43:05:0f:49:d8:ae:59:b9:28:30:55:1d:82:65:19:
         7c:e8:6a:de:1d:55:ed:a5:23:c5:ee:40:85:99:85:40:a7:7c:
         13:fa:b5:bb:1d:48:e7:92:5c:04:60:14:31:2c:9c:2b:d1:f5:
         45:fe:69:ac:09:0e:a7:a3:2a:d6:10:d7:2a:9d:b2:92:ae:16:
         cb:e3:2e:fe:81:e2:56:ad:85:78:72:a5:29:37:49:44:28:ea:
         2e:9c:29:d0:5c:b9:28:b8:15:c9:87:e1:e9:03:74:ce:f5:3f:
         06:6b:43:d7:be:8e:9c:a7:1f:4b:62:b0:4a:7b:3f:66:6d:68:
         67:10:40:ba:9e:42:dc:62:13:d8:bc:b5:f2:0a:f6:04:23:6d:
         34:94:d1:ec:88:c5:90:40:4a:3c:4d:f5:e2:f3:19:8b:4e:b1:
         97:72:30:26:99:2b:ce:b5:93:6b:ba:af:84:b1:f0:aa:d5:c0:
         c1:2b:96:41:92:f6:d6:55:a0:56:ad:ec:23:0e:df:f9:e3:c4:
         b6:d8:60:4b:2e:d2:d2:d8:80:de:a9:13:1b:f2:bd:55:92:ff:
         1b:07:86:71:89:9c:99:7d:e4:78:2c:9a:85:ec:ad:13:a3:7c:
         1e:b5:ba:4c:56:69:56:02:27:06:4a:91:73:06:c6:ba:e3:94:
         98:af:db:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:59 2024 by rpki-client on console-ams.rpki-client.org