Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BmxEAnoR-N1pD_SYOFwdu-F3Xe4.roa
File:                     BmxEAnoR-N1pD_SYOFwdu-F3Xe4.roa (raw, json)
Hash identifier:          kRC1mKco58gy0cX6Kg5MrvW4+eablXKRhNG/ZTMQva8=
Subject key identifier:   06:6C:44:02:7A:11:F8:DD:69:0F:F4:98:38:5C:1D:BB:E1:77:5D:EE
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       01856FF986CD0A3C6ADB3785CB6C410818DF
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BmxEAnoR-N1pD_SYOFwdu-F3Xe4.roa
Signing time:             Mon 02 Jan 2023 00:55:02 +0000
ROA not before:           Mon 02 Jan 2023 00:55:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201326
IP address blocks:        78.83.212.0/24 maxlen: 24
                          78.83.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f9:86:cd:0a:3c:6a:db:37:85:cb:6c:41:08:18:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Jan  2 00:55:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=066c44027a11f8dd690ff498385c1dbbe1775dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c1:1f:8a:1c:f7:45:e5:53:c1:1d:c5:cc:30:
                    fc:cd:b7:a8:04:fe:b0:fb:84:0e:0c:c2:54:d1:4e:
                    84:a8:d2:ad:b1:39:7e:46:3a:33:8f:2a:64:66:3c:
                    0d:3a:4a:d0:42:51:08:54:26:77:a3:90:99:ec:78:
                    4b:c1:19:53:8c:6b:d9:98:a0:34:d2:d3:04:48:d8:
                    a7:0c:12:4d:07:23:97:cf:78:ff:2f:56:24:6f:03:
                    4a:da:db:62:80:de:43:dd:cd:59:5b:5d:ff:32:52:
                    de:63:d2:5c:22:00:17:2f:88:ae:90:43:29:41:d2:
                    b1:3a:6c:0c:8c:4d:75:c7:06:43:18:b7:67:e9:9b:
                    23:ca:07:86:f0:16:85:8e:cb:31:c4:3d:56:83:20:
                    1a:73:41:ed:d5:ea:dd:5a:e5:b4:c1:25:b0:22:86:
                    eb:bd:1d:51:f6:70:11:43:f0:38:e7:35:8c:7f:35:
                    1b:f5:8d:f3:30:b4:60:70:19:ee:61:a1:73:f6:90:
                    cb:c6:c2:1d:b3:bd:cf:2d:cb:e6:bd:83:31:b0:65:
                    aa:5e:13:6f:12:b3:e0:62:c6:38:18:44:2f:30:0d:
                    86:c4:bd:2b:0d:e5:99:60:fd:14:29:36:15:af:0a:
                    ca:b9:39:fe:a3:6c:cc:b2:64:8a:11:67:58:76:8c:
                    b3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6C:44:02:7A:11:F8:DD:69:0F:F4:98:38:5C:1D:BB:E1:77:5D:EE
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BmxEAnoR-N1pD_SYOFwdu-F3Xe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.83.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:a4:d2:63:9b:4b:70:05:dd:62:4a:28:a3:bf:c9:22:39:64:
         58:98:bc:5b:ff:39:6b:cc:41:bb:4c:62:e1:60:42:a5:56:dd:
         2e:c8:a9:00:0a:73:79:1f:10:d9:f4:53:95:f9:8a:6d:b8:7c:
         08:18:f8:df:08:d8:cb:db:19:c5:a2:d4:43:e4:08:e7:3c:64:
         a4:60:4d:d6:d1:07:29:9e:e6:19:10:3b:d6:a1:df:e3:e7:bf:
         88:90:8d:94:90:eb:ce:48:9a:8f:4c:6f:e4:1e:46:be:05:60:
         12:88:b6:a1:06:04:a4:70:f9:fe:6a:ce:b5:7d:01:49:7c:13:
         c2:9e:86:71:33:0e:ac:76:1c:a7:aa:90:77:5a:4d:ba:02:24:
         f9:15:2d:49:12:91:cf:1b:89:6d:6a:a0:bb:4b:a4:38:2d:3c:
         50:18:e4:61:af:37:8b:e8:39:51:26:5e:8e:d9:ce:05:15:c7:
         8a:8b:39:1a:ba:10:14:33:85:82:50:a6:02:04:3b:05:af:6d:
         8d:fc:cf:55:cc:6d:e1:8a:66:ab:f9:30:af:44:b1:34:1e:79:
         3d:45:0f:ba:b6:6e:62:29:7b:5b:6c:43:57:12:fe:54:b1:db:
         92:10:9b:97:39:2b:99:b8:8c:d4:53:4d:70:7f:4b:f9:21:aa:
         7d:11:0a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:06 2024 by rpki-client on console-fra.rpki-client.org