Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aC6yvn7uRKsY0xZNCgkhiw4t8-8.roa
File:                     aC6yvn7uRKsY0xZNCgkhiw4t8-8.roa (raw, json)
Hash identifier:          nEKIDBFGc3uB7c7iqzLejF5iRaLNYnVi7wfT0AZzmT0=
Subject key identifier:   68:2E:B2:BE:7E:EE:44:AB:18:D3:16:4D:0A:09:21:8B:0E:2D:F3:EF
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       018CCA2A8E5A5DE543AF7C6D0BEB6132F3D0
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aC6yvn7uRKsY0xZNCgkhiw4t8-8.roa
Signing time:             Tue 02 Jan 2024 12:33:55 +0000
ROA not before:           Tue 02 Jan 2024 12:33:55 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211138
IP address blocks:        195.58.39.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 19:41:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:8e:5a:5d:e5:43:af:7c:6d:0b:eb:61:32:f3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jan  2 12:33:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=682eb2be7eee44ab18d3164d0a09218b0e2df3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8f:61:af:d5:25:ee:c1:25:ed:b4:e8:ce:7d:
                    04:1c:9f:86:ca:b3:27:1e:0b:a9:f1:0b:0c:1d:18:
                    39:90:4b:b4:0b:2e:15:ae:d5:f2:26:f7:55:2c:84:
                    60:4a:3e:db:cb:d3:90:65:aa:bc:2f:54:57:f5:52:
                    67:54:56:76:62:b1:ce:4a:80:52:00:cc:43:e8:80:
                    27:26:1c:39:26:55:92:8d:87:d6:36:eb:29:b1:1e:
                    6e:49:66:f5:74:2a:11:40:3c:2e:79:46:5d:08:d6:
                    75:fd:3c:d9:cb:0d:af:68:2b:01:43:ff:e3:d3:eb:
                    d1:a8:c0:1f:1c:d1:a5:d2:fb:66:87:b1:17:0f:0d:
                    dd:51:81:20:a4:f5:c3:70:8d:ff:b4:19:d0:4a:b0:
                    9b:92:73:47:b9:ff:95:d8:79:31:e5:c3:69:e5:09:
                    41:df:48:e8:5a:29:6f:4b:a2:26:b7:5a:1f:33:dc:
                    2c:73:72:81:b1:47:07:18:b8:5f:25:05:26:36:1e:
                    f9:d3:d8:8b:1f:17:44:bd:22:ba:26:5c:60:33:04:
                    b2:5f:18:9a:7e:dd:58:bb:4c:f8:89:e4:8b:d8:eb:
                    d1:a8:3c:8f:e7:4a:f5:ec:76:39:01:87:ec:1f:a6:
                    b7:bf:33:23:f6:c8:b7:12:ae:d2:36:8d:66:2a:1b:
                    b7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2E:B2:BE:7E:EE:44:AB:18:D3:16:4D:0A:09:21:8B:0E:2D:F3:EF
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aC6yvn7uRKsY0xZNCgkhiw4t8-8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.58.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:e1:20:43:04:5d:23:fb:2d:23:93:15:25:0f:3d:9e:98:33:
         94:54:27:dd:e8:cb:23:87:01:34:7f:c5:06:7b:3b:41:30:1b:
         f8:ee:6e:af:4c:6d:72:12:b6:66:0c:f2:03:75:9d:11:25:20:
         9b:94:3e:ef:fb:e9:9c:78:13:97:64:2c:9e:50:f1:94:ea:dc:
         1b:e9:af:07:39:72:ce:37:8e:56:33:40:fc:ba:a7:d8:79:b0:
         aa:21:a5:be:d3:b9:29:40:b7:fa:7c:e8:2d:b2:be:cd:1b:04:
         00:a6:90:7d:6b:f2:d4:5e:bc:bf:4f:b7:c0:da:df:12:45:93:
         9a:6a:e7:f3:84:d3:9a:c0:81:48:ac:87:7e:e0:bb:5b:ac:35:
         4f:b5:9e:ae:12:dc:57:d9:44:70:dc:76:de:de:af:7f:a1:f5:
         3a:cf:68:8e:41:f2:27:eb:ba:0a:7a:38:7a:6c:2b:1d:95:20:
         ba:e5:0f:a3:4f:c2:ac:f6:ad:a0:51:1d:80:fd:4f:a7:5b:4a:
         a6:d6:4d:c4:b7:83:bb:fe:65:0b:1e:3e:be:3e:9b:14:b4:cf:
         0c:c9:71:af:1a:84:f8:9b:77:94:ac:68:4e:ca:78:e5:8f:b8:
         43:8f:f4:19:3b:f6:87:32:70:57:c0:8c:e9:db:6a:c2:f3:99:
         93:b4:11:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 23:20:44 2024 by rpki-client on console-ams.rpki-client.org