Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ebHTjBTy4HFrNTxAYp8REibVyn4.roa
File:                     ebHTjBTy4HFrNTxAYp8REibVyn4.roa (raw, json)
Hash identifier:          YiQ9SPbMPmb8soBFEgwLBKpw3qw2v2AFiIZ5t5tgfkU=
Subject key identifier:   79:B1:D3:8C:14:F2:E0:71:6B:35:3C:40:62:9F:11:12:26:D5:CA:7E
Certificate issuer:       /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial:       0193B45449A1EF0BB59F066F0D35D9115721
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ebHTjBTy4HFrNTxAYp8REibVyn4.roa
Signing time:             Wed 11 Dec 2024 06:07:22 +0000
ROA not before:           Wed 11 Dec 2024 06:07:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44812
IP address blocks:        2a09:6284::/32 maxlen: 32
                          2a09:e5c0::/32 maxlen: 32
                          2a09:e5c1::/32 maxlen: 32
                          2a09:e5c2::/32 maxlen: 32
                          2a09:e5c3::/32 maxlen: 32
                          2a09:e5c4::/32 maxlen: 32
                          2a09:e5c5::/32 maxlen: 32
                          2a09:e5c6::/32 maxlen: 32
                          2a0e:b140::/29 maxlen: 29
                          2a10:4103::/32 maxlen: 32
                          2a10:4104::/32 maxlen: 32
                          2a11:4b46::/32 maxlen: 32
                          2a11:4b47::/32 maxlen: 32
                          2a12:a343::/32 maxlen: 32
                          2a12:a344::/32 maxlen: 32
                          2a12:a346::/32 maxlen: 32
                          2a13:93c0::/32 maxlen: 32
Validation:               Failed, certificate revoked on Thu 02 Jan 2025 15:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:b4:54:49:a1:ef:0b:b5:9f:06:6f:0d:35:d9:11:57:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
        Validity
            Not Before: Dec 11 06:07:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=79b1d38c14f2e0716b353c40629f111226d5ca7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3a:9e:bd:42:a1:aa:a3:e7:07:c2:3c:51:ea:
                    80:e4:6b:4b:d1:07:85:a7:a0:a1:6a:f0:68:a7:de:
                    b7:74:51:f5:09:4c:a9:cf:ea:d5:12:5d:ac:ca:13:
                    41:cb:4b:06:04:46:d6:af:a4:7b:69:8d:3e:1a:8c:
                    43:e0:aa:c2:48:5d:e8:fd:7b:be:ac:c3:9a:ac:a7:
                    b1:ac:fd:34:13:e4:10:87:cf:4a:83:f1:2a:fb:59:
                    64:43:f8:8a:75:52:6b:8f:83:99:5b:7b:92:53:9b:
                    60:d2:d3:95:a3:6c:fc:8b:25:10:41:af:71:e6:d5:
                    01:50:a6:c6:65:e0:34:7b:d5:f5:95:df:d0:b1:4a:
                    e9:a3:50:16:ae:f6:c1:a0:f7:cd:1c:fc:5d:87:34:
                    09:f2:30:9c:8f:09:c2:07:64:d7:6e:e8:9b:d0:a1:
                    47:cb:04:df:8b:c2:16:98:01:22:6d:cd:e0:0f:c5:
                    48:9c:83:82:9a:63:38:0d:a5:c2:98:37:ba:9a:a7:
                    a4:32:80:7f:1f:e9:9e:55:27:85:9d:c8:7e:ba:1d:
                    bd:f9:38:c0:37:01:34:b6:68:2c:1b:4e:56:f8:f7:
                    9f:04:d1:91:a8:0a:8e:cf:a6:50:f8:3d:d8:89:ae:
                    7e:5e:10:d2:d1:17:83:36:59:94:07:f2:45:34:56:
                    f2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B1:D3:8C:14:F2:E0:71:6B:35:3C:40:62:9F:11:12:26:D5:CA:7E
            X509v3 Authority Key Identifier:
                keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ebHTjBTy4HFrNTxAYp8REibVyn4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:6284::/32
                  2a09:e5c0::-2a09:e5c6:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0e:b140::/29
                  2a10:4103::-2a10:4104:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:4b46::/31
                  2a12:a343::-2a12:a344:ffff:ffff:ffff:ffff:ffff:ffff
                  2a12:a346::/32
                  2a13:93c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:38:5a:d1:85:e6:fe:cf:9c:14:98:5e:92:75:e2:86:d2:9c:
         03:ac:bd:86:e7:75:66:07:99:1f:fe:11:91:2f:1e:9f:fa:3c:
         b2:d5:b6:8e:5a:19:a2:df:8a:4e:1e:3b:49:43:23:8d:3e:1e:
         ce:58:55:25:76:da:c9:f0:2a:e7:a2:3f:24:16:2f:ad:a7:74:
         97:5d:a0:3c:a3:24:86:ae:d2:0e:c7:60:50:4e:ff:82:c2:e9:
         e6:74:29:80:d8:db:ef:5e:52:97:17:23:df:23:49:b7:6a:d4:
         5b:8d:48:74:a5:ce:f3:28:5e:ba:55:ce:de:04:9b:ae:ef:5d:
         f5:fd:29:c5:8e:3d:5d:1f:8b:df:09:08:e0:aa:cd:25:34:c8:
         ca:a6:a0:7d:d0:72:a7:72:d0:7b:58:44:64:fd:97:6c:fe:a9:
         99:51:d6:42:c5:99:ac:4f:0a:ed:d0:bc:21:be:86:be:49:c3:
         44:ec:16:93:73:d8:e5:5b:1c:49:09:10:0e:98:08:7c:84:2d:
         51:08:2f:07:7b:f9:6d:13:ba:ad:c0:ff:8a:62:75:b6:5a:79:
         86:4a:86:41:59:46:b4:1e:43:34:63:a2:30:e0:4f:65:98:e2:
         0d:a4:ff:96:6f:c3:aa:5e:47:1f:a9:c4:74:93:0d:ac:53:d4:
         f6:62:20:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----