Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/6Jr-wWozSzDeGT8v_n-Q_WVq7f4.roa
File:                     6Jr-wWozSzDeGT8v_n-Q_WVq7f4.roa (raw, json)
Hash identifier:          N+y7pSfSx9mnrJXzw/Xu5a5R+1dJAFC9WAlIvWm1LJY=
Subject key identifier:   E8:9A:FE:C1:6A:33:4B:30:DE:19:3F:2F:FE:7F:90:FD:65:6A:ED:FE
Certificate issuer:       /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial:       018C681E9E3290BC8E00285E1B3E08AD9B53
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/6Jr-wWozSzDeGT8v_n-Q_WVq7f4.roa
Signing time:             Thu 14 Dec 2023 11:38:06 +0000
ROA not before:           Thu 14 Dec 2023 11:38:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     215889
IP address blocks:        2a09:a740::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 19 Dec 2023 13:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:68:1e:9e:32:90:bc:8e:00:28:5e:1b:3e:08:ad:9b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
        Validity
            Not Before: Dec 14 11:38:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e89afec16a334b30de193f2ffe7f90fd656aedfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:33:fd:8d:c2:f0:2b:ba:bc:87:9f:39:d1:c0:
                    19:21:6d:ec:2c:26:34:52:32:38:24:b3:6c:97:c2:
                    af:55:4f:3c:24:d1:4d:5e:0c:5e:0c:bf:9e:60:67:
                    04:21:cd:19:6d:bc:b9:df:b1:50:aa:83:38:0b:2d:
                    93:ce:d2:80:de:e5:00:d0:92:46:a2:58:8a:c7:ba:
                    a3:ca:26:19:47:47:a4:63:65:ab:fa:8d:df:67:fa:
                    93:9d:b6:24:60:fa:9c:04:e9:f2:cc:73:20:71:eb:
                    71:5c:31:7a:28:a3:a3:79:93:23:f7:35:3b:a3:0b:
                    ba:ab:7f:11:26:16:d2:f8:52:64:78:cc:64:0e:82:
                    ab:c6:fc:77:da:73:6c:f1:d9:91:23:1e:e6:33:19:
                    57:cb:d5:a3:6f:6f:41:e1:c4:84:a0:ab:39:80:69:
                    ef:38:36:1a:e5:2c:f5:0b:ae:b0:89:ee:dd:9e:54:
                    50:55:7d:3d:85:77:c9:97:fd:cb:5f:12:5e:69:e3:
                    93:b6:3a:11:d7:20:e1:f1:5d:6a:27:02:ee:85:8d:
                    0b:9e:96:0c:84:1b:bd:e3:aa:be:69:d1:f7:e7:3e:
                    f9:08:a1:77:03:7a:d7:ee:ce:0c:20:60:ac:f1:36:
                    1c:10:9e:53:94:94:ba:f5:68:3d:a4:3e:be:dc:52:
                    3a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9A:FE:C1:6A:33:4B:30:DE:19:3F:2F:FE:7F:90:FD:65:6A:ED:FE
            X509v3 Authority Key Identifier:
                keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/6Jr-wWozSzDeGT8v_n-Q_WVq7f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:a740::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:f1:1b:c6:21:38:7d:7a:74:bc:e2:bb:38:7e:9d:50:ec:2c:
         6c:01:50:a9:5b:5a:27:f9:6e:5d:65:3e:5f:86:92:3e:4e:04:
         54:8a:dd:69:3a:bb:dc:1f:27:e7:98:a5:46:71:ec:41:7f:29:
         a7:87:cf:39:6f:3f:7b:9b:76:90:d9:3a:5d:98:73:2f:c3:85:
         a6:46:b8:15:a6:75:7b:53:81:c3:bc:9e:df:da:af:2d:78:9f:
         24:ea:26:c6:2d:89:0a:d3:59:4a:3b:6b:b4:fc:ee:46:d1:0d:
         c3:49:c2:91:e8:73:79:c6:31:08:5b:e2:2a:d4:07:83:13:72:
         97:85:d1:84:81:55:96:74:2d:18:cd:d3:f9:18:82:11:69:ee:
         f5:37:e8:90:82:22:6a:9a:17:f2:cb:9a:7c:63:39:ae:16:2b:
         63:3b:f7:7c:cb:1a:99:3b:ee:8b:ed:c4:c6:d9:e6:d8:48:a7:
         42:e7:e9:4c:d6:1b:4c:48:56:86:17:4d:7d:fa:1b:74:30:86:
         bd:9b:b3:42:e0:5e:99:46:77:4a:15:98:72:cb:45:df:59:16:
         cc:9e:d6:37:52:21:c0:0f:51:ef:a1:ef:3f:e8:0c:23:d3:54:
         e2:7a:c7:ec:aa:63:2a:20:57:b8:f7:5b:2b:3c:cd:61:6d:e8:
         ad:b4:52:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:59 2024 by rpki-client on console-fra.rpki-client.org