Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/Vvr-I_Na5vrtqN9YcOiV1MBxLQ0.roa
File:                     Vvr-I_Na5vrtqN9YcOiV1MBxLQ0.roa (raw, json)
Hash identifier:          2q3I4a2hLTqOfQH4QxYM0u54MmMMU0Rj0Mcrp+/t6Dw=
Subject key identifier:   56:FA:FE:23:F3:5A:E6:FA:ED:A8:DF:58:70:E8:95:D4:C0:71:2D:0D
Certificate issuer:       /CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
Certificate serial:       01856D81CA8FE3ACF7B1C27F769D9EFA606A
Authority key identifier: B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/Vvr-I_Na5vrtqN9YcOiV1MBxLQ0.roa
Signing time:             Sun 01 Jan 2023 13:25:00 +0000
ROA not before:           Sun 01 Jan 2023 13:25:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16104
IP address blocks:        193.41.89.0/24 maxlen: 24
                          2001:67c:1684::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:81:ca:8f:e3:ac:f7:b1:c2:7f:76:9d:9e:fa:60:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
        Validity
            Not Before: Jan  1 13:25:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=56fafe23f35ae6faeda8df5870e895d4c0712d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:c8:be:e9:37:b1:ef:3e:77:27:7e:b3:de:
                    cd:1e:17:97:6c:c4:0e:d4:29:42:8e:a1:e9:3a:d2:
                    86:c1:b3:63:5e:92:55:a7:36:7a:db:1a:01:74:17:
                    73:b2:30:e6:18:6c:cd:b0:3a:df:ce:5e:2f:e1:e9:
                    86:3c:d7:07:24:48:5b:29:d1:f9:f0:8d:7c:c8:2e:
                    33:90:b3:e2:ec:33:af:58:92:1b:92:2c:e2:fc:2e:
                    4d:6e:42:e0:5a:b8:7e:79:9b:a6:75:b7:a2:10:dc:
                    36:42:53:59:47:c9:f9:9f:a5:cc:0b:b4:6f:fd:dd:
                    ae:70:fc:49:06:51:f1:a2:88:a4:e7:fd:92:f8:e5:
                    5e:ea:18:3e:53:03:c6:8c:35:18:1d:d9:08:bb:93:
                    50:96:7e:e8:4a:05:bd:c0:53:c2:ef:32:e9:31:08:
                    4a:10:83:38:b8:54:3b:6a:80:c5:b8:ee:b0:45:bd:
                    a1:94:9c:ed:ca:21:48:a5:dd:7b:d2:28:50:7d:ec:
                    a9:b7:3f:55:06:eb:2c:be:7f:4e:c8:8b:18:f1:07:
                    14:3c:09:12:c5:89:5f:78:dc:de:ec:64:b2:67:79:
                    84:59:99:08:e9:61:a5:37:98:4e:fc:93:c0:80:0d:
                    7e:14:b0:ab:ec:2d:4b:8b:1a:43:24:b2:42:0f:72:
                    ae:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FA:FE:23:F3:5A:E6:FA:ED:A8:DF:58:70:E8:95:D4:C0:71:2D:0D
            X509v3 Authority Key Identifier:
                keyid:B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/Vvr-I_Na5vrtqN9YcOiV1MBxLQ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.41.89.0/24
                IPv6:
                  2001:67c:1684::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:32:ab:a0:86:f4:70:6b:d2:aa:ec:1a:5c:fe:ef:87:38:f7:
         07:12:d6:fe:80:a5:70:81:96:9c:b4:a7:89:b4:b6:ac:24:59:
         30:59:5f:26:ed:0f:2b:3a:fc:42:da:9c:18:da:2f:97:d5:2a:
         4f:79:5a:35:36:b5:f5:bb:c6:b0:80:f6:29:59:9a:bf:2a:dc:
         ba:39:55:eb:1c:a6:84:0f:ef:33:b1:49:01:74:d0:95:23:59:
         18:f0:c1:55:73:ce:3c:2a:ef:49:a4:48:cd:ba:9d:8a:fb:dc:
         eb:4a:14:c2:06:ef:8a:67:f0:59:17:09:71:93:f3:bb:b3:e8:
         3a:86:e7:48:c8:db:eb:83:0f:2c:63:39:0b:5f:c3:a0:ac:6a:
         ca:9c:7f:de:17:3e:07:4d:fb:d5:40:0e:98:d4:39:35:ba:80:
         82:4f:c0:0a:dd:20:c1:7c:eb:7d:df:d6:a0:78:4f:aa:21:ed:
         cf:7c:3e:56:dd:f9:d0:86:60:b8:00:44:89:93:88:ec:97:50:
         26:c2:d2:7d:04:9f:90:d6:08:3c:63:3c:52:b7:b7:c6:97:e3:
         a7:e7:8d:ec:68:ce:62:95:84:b3:91:eb:b2:b9:fc:d1:34:3c:
         d3:25:e7:b7:4d:11:9a:7d:1f:62:c7:d6:06:46:e2:93:97:bf:
         ca:41:a3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:42 2024 by rpki-client on console-ams.rpki-client.org