Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/nW6Glp16RFUuoQ_bsCTsDTbbvTg.roa
File:                     nW6Glp16RFUuoQ_bsCTsDTbbvTg.roa (raw, json)
Hash identifier:          Sd+6rW0rqacSNQAnUPGaXv2GzoFvSiUyeM9gUY2B0UU=
Subject key identifier:   9D:6E:86:96:9D:7A:44:55:2E:A1:0F:DB:B0:24:EC:0D:36:DB:BD:38
Certificate issuer:       /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial:       01857102D68626E0374AC416A4FCD116A914
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/nW6Glp16RFUuoQ_bsCTsDTbbvTg.roa
Signing time:             Mon 02 Jan 2023 05:44:49 +0000
ROA not before:           Mon 02 Jan 2023 05:44:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8308
IP address blocks:        81.26.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:30:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:02:d6:86:26:e0:37:4a:c4:16:a4:fc:d1:16:a9:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
        Validity
            Not Before: Jan  2 05:44:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9d6e86969d7a44552ea10fdbb024ec0d36dbbd38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:93:f9:ac:5b:0d:3f:61:2d:6b:8d:08:87:3b:
                    69:8c:d0:c6:0a:79:c9:e8:e0:82:24:bf:28:4e:8b:
                    e6:18:55:1e:56:4f:98:3c:08:d2:56:2b:7e:0b:82:
                    c1:f3:4d:c3:21:66:58:4d:d4:52:7c:b9:7a:75:07:
                    0f:42:48:e7:62:23:30:f8:94:9a:b4:63:90:f8:94:
                    76:f8:8d:87:d0:0d:78:46:ee:72:d1:81:6b:73:c3:
                    6a:aa:82:ed:82:bb:e8:9c:01:b9:79:9e:9b:c4:ec:
                    3b:98:fd:29:20:5f:8a:83:61:7d:7f:23:bb:65:09:
                    37:67:b3:8c:3c:e4:e8:c4:ed:d1:92:4d:05:97:33:
                    a7:a7:a3:05:9a:a7:55:c8:fa:3d:b4:c9:41:cb:9b:
                    d0:c0:69:6c:4a:01:86:05:01:0a:d1:cd:2c:37:14:
                    12:ee:e5:35:1f:fe:11:03:54:d6:c3:6a:5b:b3:ee:
                    d7:89:ae:85:85:7d:8f:e3:67:4e:df:be:1a:2b:ea:
                    09:ec:a7:2a:5d:f9:2d:8b:af:87:2e:56:3f:3c:32:
                    74:5f:6d:f0:20:64:df:f9:17:c9:08:a5:6f:23:c9:
                    86:5f:14:22:b5:22:49:eb:7c:6c:d2:07:28:76:88:
                    44:98:2b:0f:09:1e:02:09:99:ff:23:04:56:07:00:
                    ab:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6E:86:96:9D:7A:44:55:2E:A1:0F:DB:B0:24:EC:0D:36:DB:BD:38
            X509v3 Authority Key Identifier:
                keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/nW6Glp16RFUuoQ_bsCTsDTbbvTg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.26.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:d5:08:61:9b:8b:ae:19:0e:08:fb:74:74:f2:64:63:3b:0c:
         ca:25:15:06:a2:a4:07:c9:46:42:54:c8:5d:e3:06:dc:bf:6d:
         49:db:6c:23:46:d6:2d:c6:b6:68:14:d4:47:cc:14:fa:fb:a1:
         ad:c1:b9:cb:d4:8f:20:8d:dc:56:d9:a6:e9:c5:6f:bb:f2:13:
         cd:84:96:c2:bd:9a:7b:73:c3:d4:79:e5:70:8e:e3:c1:be:83:
         b9:81:a6:52:fb:87:15:df:50:4d:7b:93:5f:10:4c:df:bf:0e:
         af:61:12:cb:9b:74:c3:72:d0:f4:d4:36:54:5f:12:dc:bb:27:
         60:38:c8:da:96:78:89:c9:9e:8c:01:46:85:75:40:2f:71:f6:
         6e:d1:21:6c:6e:14:7e:41:05:a7:63:ea:cb:59:2f:25:55:76:
         ec:8f:84:d8:99:c2:7c:16:ee:3c:91:75:9b:cf:5e:d8:3b:9f:
         7d:50:20:90:15:8d:7a:ce:1b:ff:28:bb:3d:7d:91:33:a0:1f:
         83:43:68:26:19:85:0c:6b:92:2c:36:e0:54:bf:7b:bf:1b:d7:
         0a:2a:5f:14:fe:a5:c4:47:2b:84:4b:b3:56:a2:f4:5e:0c:25:
         57:a6:07:f0:7f:d5:bc:a6:e6:57:aa:97:26:1b:4b:0d:31:13:
         e3:5e:95:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:31 2024 by rpki-client on console-ams.rpki-client.org