Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/6qwQIPvprx_A2q4GogHyAARkg80.roa
File:                     6qwQIPvprx_A2q4GogHyAARkg80.roa (raw, json)
Hash identifier:          AOZJQoJGEZPRD8seX5ucAwnUiv2Nrtyqh/UqhyMOqa8=
Subject key identifier:   EA:AC:10:20:FB:E9:AF:1F:C0:DA:AE:06:A2:01:F2:00:04:64:83:CD
Certificate issuer:       /CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
Certificate serial:       01856C1C93B72D1F2AA52FF62762DDF5904B
Authority key identifier: 83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/6qwQIPvprx_A2q4GogHyAARkg80.roa
Signing time:             Sun 01 Jan 2023 06:54:50 +0000
ROA not before:           Sun 01 Jan 2023 06:54:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62168
IP address blocks:        141.105.118.0/24 maxlen: 24
                          2a01:8f80:100::/40 maxlen: 40

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:1c:93:b7:2d:1f:2a:a5:2f:f6:27:62:dd:f5:90:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
        Validity
            Not Before: Jan  1 06:54:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eaac1020fbe9af1fc0daae06a201f200046483cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:44:e4:56:40:6d:91:15:44:7b:f4:1d:17:f7:
                    6b:a1:25:0c:03:b2:d0:31:28:00:ee:7b:71:11:4f:
                    e3:e7:db:f1:4f:08:ca:b9:d8:14:48:ce:cc:64:5d:
                    41:a7:f7:11:52:6b:cb:d6:ca:54:6d:53:07:b2:d4:
                    a5:30:2f:62:91:dd:cf:e6:4c:e1:4e:d0:ea:05:22:
                    3b:7d:5b:26:22:ec:44:55:18:b4:f8:e7:58:b8:11:
                    68:5b:27:a5:72:24:2c:5e:cf:1f:36:2b:0f:88:97:
                    10:4c:47:03:65:64:01:d0:de:38:ed:41:e1:2f:7f:
                    01:03:8b:d5:da:41:f0:e3:48:66:af:3e:26:3c:c1:
                    75:8b:0f:83:31:8b:da:06:ba:7d:77:08:eb:a0:04:
                    78:99:f3:8f:9c:fc:60:7b:fb:8a:26:5c:db:8f:ec:
                    f9:e1:b7:80:ca:fd:50:c4:bd:76:d1:11:c6:55:94:
                    48:7a:6c:81:f7:09:9e:00:df:26:69:7b:f6:b0:3d:
                    83:91:74:2e:1d:be:2a:b9:a6:51:83:0d:83:67:f9:
                    08:45:a9:fc:d3:fe:50:62:eb:16:c6:f5:b1:52:0f:
                    47:92:95:d1:fc:05:eb:63:41:12:6f:3e:88:1b:bb:
                    fa:b7:de:28:4f:39:80:4f:0d:b4:56:61:7e:fe:20:
                    70:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AC:10:20:FB:E9:AF:1F:C0:DA:AE:06:A2:01:F2:00:04:64:83:CD
            X509v3 Authority Key Identifier:
                keyid:83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/6qwQIPvprx_A2q4GogHyAARkg80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.105.118.0/24
                IPv6:
                  2a01:8f80:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:b7:ec:8a:bf:e5:ae:d7:1d:7e:5e:e5:5d:74:fc:61:e9:a5:
         29:d0:30:12:aa:b7:03:3a:8f:b8:e2:d9:0c:79:8e:6b:18:83:
         73:ab:7b:74:d1:b9:9b:04:7d:25:03:75:00:c4:51:af:1b:68:
         f8:d3:d3:ae:e2:cd:09:98:e5:0e:61:0c:12:a0:55:ca:68:03:
         54:e2:60:99:1b:42:8c:36:61:56:72:78:20:0d:37:82:9e:85:
         bf:33:4c:06:db:85:53:e7:07:4b:dd:d7:5f:9d:af:e6:5f:db:
         2c:e4:eb:af:2c:6a:b9:3e:52:56:1a:f7:c1:c7:ab:fe:3d:9c:
         96:71:d5:90:55:e4:e1:07:a6:44:ba:4e:d4:02:4d:36:e9:b7:
         44:1d:0d:15:d6:75:8a:e9:31:b1:52:71:07:d6:86:2b:9f:2b:
         24:32:41:98:92:0b:6c:9b:df:8f:be:5f:19:01:41:dd:fa:ae:
         33:d0:e0:81:0f:0c:66:44:2c:f1:f3:0c:e1:f8:fb:56:14:31:
         e5:4f:21:3e:d2:2e:d8:ec:93:8c:97:e5:31:1d:d3:32:24:81:
         4a:60:5e:2b:a6:55:8d:45:e2:23:b5:c4:a4:06:5d:0d:c2:50:
         ef:50:e9:df:26:05:80:5a:ec:55:09:77:8d:08:6b:06:9a:d2:
         1a:83:ec:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:46 2024 by rpki-client on console-fra.rpki-client.org