Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/C6fvhzOTe2f_SbCVNwk4eiiOx9Y.roa
File:                     C6fvhzOTe2f_SbCVNwk4eiiOx9Y.roa (raw, json)
Hash identifier:          mcrPoGlopNgm14o8yKCua7KcLnydF1YZNfyvDyziZSs=
Subject key identifier:   0B:A7:EF:87:33:93:7B:67:FF:49:B0:95:37:09:38:7A:28:8E:C7:D6
Certificate issuer:       /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial:       018ABCDC4965DFCB08F9984E50820ADA7B3B
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/C6fvhzOTe2f_SbCVNwk4eiiOx9Y.roa
Signing time:             Fri 22 Sep 2023 12:27:47 +0000
ROA not before:           Fri 22 Sep 2023 12:27:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47843
IP address blocks:        87.248.128.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:bc:dc:49:65:df:cb:08:f9:98:4e:50:82:0a:da:7b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
        Validity
            Not Before: Sep 22 12:27:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0ba7ef8733937b67ff49b0953709387a288ec7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5d:2d:07:13:31:c3:d5:ef:d9:14:1f:a2:f9:
                    2c:b1:ac:77:62:03:c2:e4:9d:24:13:2c:3f:03:99:
                    42:11:c0:87:62:9d:bc:e3:c6:21:de:d8:24:b4:f3:
                    11:41:e5:c8:d9:f8:13:85:95:94:9b:93:07:a1:a0:
                    8d:6a:99:42:1d:05:75:6f:e4:eb:08:be:a3:f5:11:
                    61:13:35:81:6f:a8:ff:3d:1d:7c:bb:4b:b0:f4:29:
                    84:99:a4:6e:6b:ac:fa:8c:d6:57:70:5c:f9:9d:d9:
                    28:ba:a8:31:3a:10:4b:5c:eb:10:74:f1:0f:85:e7:
                    40:a9:78:a7:b8:13:d0:35:39:09:b0:eb:09:65:9c:
                    6e:2f:ff:23:66:07:5c:c3:1c:ea:a5:af:a6:d6:27:
                    f5:b0:28:9e:cb:b4:5f:93:52:b5:b1:f8:cd:cd:3e:
                    00:1b:f2:18:fe:b5:00:34:0e:dc:55:32:b1:a1:3c:
                    f9:8f:b2:e4:43:b6:3f:9c:61:76:fd:ed:85:b7:f0:
                    4a:ca:98:37:94:f3:e6:f0:84:8f:ea:18:05:c6:2d:
                    a9:66:8a:13:2b:ae:17:d5:a9:6e:cd:85:3f:28:6e:
                    be:55:10:3c:63:9e:d6:da:83:c1:a7:03:1e:5f:79:
                    69:54:1a:e4:21:08:85:b7:16:9d:ec:e4:12:5f:6f:
                    59:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A7:EF:87:33:93:7B:67:FF:49:B0:95:37:09:38:7A:28:8E:C7:D6
            X509v3 Authority Key Identifier:
                keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/C6fvhzOTe2f_SbCVNwk4eiiOx9Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.248.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:bb:d1:d6:a8:d0:68:0e:ac:0d:46:d3:f1:36:21:0f:d2:24:
         5d:53:8d:3e:1a:70:7a:fd:f1:b4:8e:54:13:07:ba:22:43:d2:
         9e:ff:b2:d2:0e:49:be:f3:45:e0:7a:31:07:3d:54:68:aa:f2:
         a7:19:86:a3:68:dc:34:84:2f:69:90:ff:18:5b:07:81:5e:ef:
         6e:f9:d2:0e:f8:d0:96:b0:8c:24:41:cc:7f:04:d0:3a:71:bc:
         4d:c1:77:ff:87:de:a1:29:a0:9c:f8:1b:73:9b:a4:8d:1b:c8:
         f9:0a:c7:96:c4:5d:92:a6:18:f2:23:67:1d:2c:72:a9:79:5a:
         03:b5:82:d4:9d:c7:3e:38:5d:38:66:8c:48:8e:f1:fe:32:28:
         8c:a0:bc:b2:8a:23:f1:dd:e7:34:a0:30:17:21:a5:90:c3:3c:
         17:a4:9c:03:d3:de:c3:4c:24:6e:7f:5e:0b:97:9d:b9:5a:9f:
         dd:10:29:b8:33:21:f2:45:86:2c:86:f4:65:78:bd:18:c5:7b:
         8e:3a:7c:a7:f0:97:2f:03:e9:92:a8:1d:d1:9d:f1:96:a3:e3:
         58:75:bd:3d:47:1a:2d:6b:b7:e2:90:18:99:71:65:ad:42:2c:
         5f:9d:5f:16:2a:34:e3:e4:ee:91:0c:5d:ec:cc:e7:b9:77:dc:
         0f:d1:49:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:35 2024 by rpki-client on console-fra.rpki-client.org