Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/a6uZjP--IZuMSJZhxzi0Qf0AG5c.roa
File:                     a6uZjP--IZuMSJZhxzi0Qf0AG5c.roa (raw, json)
Hash identifier:          DyH/ly/QA+FmBkCqMBR/xoGV4UY2lxKaw0p8Q1cJ4d0=
Subject key identifier:   6B:AB:99:8C:FF:BE:21:9B:8C:48:96:61:C7:38:B4:41:FD:00:1B:97
Certificate issuer:       /CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Certificate serial:       01856E38B522E3FB8CC63F5A808F8029A731
Authority key identifier: 2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/a6uZjP--IZuMSJZhxzi0Qf0AG5c.roa
Signing time:             Sun 01 Jan 2023 16:44:48 +0000
ROA not before:           Sun 01 Jan 2023 16:44:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200044
IP address blocks:        195.22.123.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:38:b5:22:e3:fb:8c:c6:3f:5a:80:8f:80:29:a7:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
        Validity
            Not Before: Jan  1 16:44:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6bab998cffbe219b8c489661c738b441fd001b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:27:84:45:07:ec:83:ae:f2:a0:ea:17:54:7e:
                    77:fd:59:84:75:18:e8:5a:44:b7:55:a4:79:24:62:
                    a7:56:08:56:1a:d0:49:7f:70:b5:f3:80:10:67:c6:
                    f9:11:9e:ce:39:59:e0:67:60:e4:28:43:9d:5d:fd:
                    6e:e8:cb:e0:32:2c:7a:52:cf:2c:29:b8:a5:f6:08:
                    d0:e7:fa:8d:78:c1:04:d3:7d:66:46:9a:2c:87:c0:
                    51:65:bf:96:26:c2:8e:0b:88:10:b7:8c:59:7b:76:
                    b8:23:5b:ba:24:31:ea:38:15:61:d0:82:6d:17:c1:
                    d9:94:ca:75:d3:a0:7a:71:03:f8:14:b7:30:3f:11:
                    26:b6:7a:4c:a3:d8:26:34:dd:1b:78:ee:b4:b5:a5:
                    ef:f8:a3:5a:a1:eb:df:da:7c:79:75:79:09:bc:ab:
                    4d:72:74:42:6a:0f:4c:61:72:d0:b6:5c:33:a0:6e:
                    29:35:32:65:f2:f1:28:77:d2:0d:ab:b6:8d:2a:d7:
                    c9:d2:f3:62:58:8e:14:0f:76:b0:6b:e8:c4:5d:c4:
                    03:1d:b2:19:be:9a:0b:b6:51:28:a0:c9:2d:1c:99:
                    50:54:21:4e:cc:96:12:45:75:22:48:9d:ba:84:00:
                    b4:56:8e:e5:d1:61:de:2b:ee:d6:d1:f1:3d:b3:12:
                    c1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AB:99:8C:FF:BE:21:9B:8C:48:96:61:C7:38:B4:41:FD:00:1B:97
            X509v3 Authority Key Identifier:
                keyid:2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/a6uZjP--IZuMSJZhxzi0Qf0AG5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.22.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:fa:35:6e:33:ae:c6:ee:e9:4d:8e:54:ac:a4:40:93:56:31:
         4d:6f:17:22:33:8d:88:da:33:d7:39:75:18:05:cc:89:1a:c5:
         a8:cf:e9:44:8b:02:04:99:b1:0c:22:e5:54:3f:4f:26:76:28:
         24:1a:1d:f6:c5:23:16:c6:17:f2:d3:f9:c8:02:c6:d9:5d:72:
         ba:27:0f:c8:9f:8b:aa:d3:47:c7:ad:72:b5:bb:2e:a2:87:a7:
         cb:81:61:b9:ae:ad:cd:28:1d:f6:58:da:b8:df:ed:f5:3c:06:
         b3:0e:d4:50:87:0c:62:6d:0d:f0:5d:31:45:7c:96:6f:3b:67:
         fe:89:2d:99:c7:d9:7b:d8:1d:c9:05:03:98:77:21:69:76:17:
         11:7e:d5:03:b2:68:8d:68:c9:be:96:96:59:77:e6:ba:7c:69:
         3a:46:34:cb:f7:fc:ba:b7:09:58:5f:45:f4:b6:cb:39:f6:d3:
         47:77:90:00:21:78:4a:2e:7e:a3:2b:cf:68:19:2a:3f:b9:3e:
         e2:ee:6e:d4:2c:27:53:76:88:f1:18:af:f2:d5:4e:51:b5:05:
         99:69:58:c8:2f:66:02:17:4b:8f:93:17:33:39:7c:fa:98:8f:
         b9:57:f3:6f:b3:88:92:95:5b:54:f4:30:71:3b:68:41:62:7a:
         fa:dd:a1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:05 2024 by rpki-client on console-fra.rpki-client.org