Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa
File:                     326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (raw, json)
Hash identifier:          aitHUMn3BaVFpweLtUyrD64A4PUdW9oy1bQ7n2JsK1Y=
Subject key identifier:   BE:4A:7D:2F:6E:D8:BD:57:F8:79:ED:48:DE:45:1B:D9:2F:8E:F4:B6
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       0855CCD152E2E598F5AB54F049ECDC7C2D472BD6
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa
Signing time:             Sun 30 Jun 2024 12:15:18 +0000
ROA not before:           Sun 30 Jun 2024 12:10:18 +0000
ROA not after:            Sun 29 Jun 2025 12:15:18 +0000
asID:                     215069
IP address blocks:        2a11:f2c0:ffdd::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 19:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:55:cc:d1:52:e2:e5:98:f5:ab:54:f0:49:ec:dc:7c:2d:47:2b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Jun 30 12:10:18 2024 GMT
            Not After : Jun 29 12:15:18 2025 GMT
        Subject: CN=BE4A7D2F6ED8BD57F879ED48DE451BD92F8EF4B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:2d:6c:b8:97:3a:02:97:f4:fe:2e:9f:50:03:
                    77:83:3a:af:e2:aa:5a:d3:80:ad:6b:9c:8e:58:28:
                    7c:a4:ef:24:5a:db:49:04:52:33:0f:62:5e:61:8a:
                    f5:4d:c3:41:73:c9:e2:23:08:fb:ce:25:cc:9f:a8:
                    44:43:df:3e:70:86:52:ea:95:87:fd:67:eb:65:58:
                    a7:7c:88:ab:97:32:c6:57:32:67:05:87:27:65:51:
                    46:70:b1:fe:f8:77:55:c1:85:ab:ca:0f:2a:25:d2:
                    d5:41:cc:f3:8a:fb:ac:65:58:55:4c:6d:2c:ea:29:
                    b9:fd:e7:75:71:1d:23:f4:0a:02:34:a8:cd:34:5f:
                    d5:c6:7e:15:6c:00:be:a4:ee:65:64:34:20:38:54:
                    ef:db:10:c7:32:24:3a:41:b1:35:77:3a:63:d1:1c:
                    ef:97:a9:5b:00:d7:20:d4:4d:47:36:69:75:f8:64:
                    27:53:44:4f:aa:7c:44:57:42:ac:69:ae:64:14:5f:
                    8f:50:bf:d7:f3:7b:03:15:d0:c7:60:8b:89:5a:65:
                    d8:95:10:b0:79:b2:d9:15:9f:a2:c9:8e:4a:79:77:
                    bb:37:11:3a:e6:01:20:c8:8d:11:97:b3:12:14:5f:
                    dd:c3:de:e1:7c:28:b2:bf:fa:73:40:9f:5b:c5:0c:
                    bc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4A:7D:2F:6E:D8:BD:57:F8:79:ED:48:DE:45:1B:D9:2F:8E:F4:B6
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffdd::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:a9:84:d8:0e:43:c8:e1:be:5b:07:d8:cc:cd:17:2b:be:cd:
         fe:9f:39:bf:64:b3:3c:86:db:6d:f3:cd:a4:ca:25:8a:41:80:
         9c:23:d8:92:bb:b3:c4:9f:c4:0f:5f:e0:9f:65:48:f3:b9:9c:
         b1:13:ab:1c:25:a6:f3:fa:d2:bf:ee:53:4f:5f:7d:05:61:9c:
         6e:ae:ce:71:50:74:6c:53:d5:3d:ca:35:59:c5:4e:11:1a:29:
         fa:fb:91:df:33:87:3a:80:3b:64:05:32:fe:6b:0e:e4:bd:66:
         57:3d:eb:60:79:5f:66:4d:70:66:59:b6:f5:89:2e:53:b1:e2:
         2a:97:04:8b:8c:d7:fa:f7:f9:76:c3:f6:af:b3:2a:e8:1e:7e:
         46:2d:13:df:f6:66:a7:2d:1a:e7:6a:98:a9:7a:9b:d0:8b:69:
         ce:fc:65:2d:b5:53:3c:20:58:80:59:83:16:e4:48:53:a1:1a:
         23:d4:ed:cc:99:c2:8c:6e:16:15:96:0b:f9:eb:50:e1:92:3f:
         3d:fe:76:9e:bb:38:4e:53:f2:40:d5:79:74:aa:4b:ee:6c:df:
         83:8d:3a:f6:71:40:c5:ac:e4:08:a9:91:b3:e4:43:a8:38:fb:
         d0:3b:c6:49:f4:78:99:2b:79:b5:72:4d:8d:0d:26:ca:62:54:
         30:45:e1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:03:41 2024 by rpki-client on console-fra.rpki-client.org