Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/gPOVqSFjbnxxbejA6aRKlCNSi7M.roa
File:                     gPOVqSFjbnxxbejA6aRKlCNSi7M.roa (raw, json)
Hash identifier:          06wIXg23UJz92XUogpoa4U3ZWffMwiwH/g9BhWmTn4s=
Subject key identifier:   80:F3:95:A9:21:63:6E:7C:71:6D:E8:C0:E9:A4:4A:94:23:52:8B:B3
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       0188AA62AB006389B7956F7C7803BAF4C19C
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/gPOVqSFjbnxxbejA6aRKlCNSi7M.roa
Signing time:             Sun 11 Jun 2023 12:16:12 +0000
ROA not before:           Sun 11 Jun 2023 12:16:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7018
IP address blocks:        79.175.95.0/24 maxlen: 24
                          79.175.96.0/24 maxlen: 24
                          188.255.128.0/24 maxlen: 24
                          188.255.144.0/24 maxlen: 24
                          79.175.67.0/24 maxlen: 24
                          188.255.212.0/24 maxlen: 24
                          109.121.38.0/24 maxlen: 24
                          109.121.36.0/24 maxlen: 24
                          109.121.37.0/24 maxlen: 24
                          109.121.33.0/24 maxlen: 24
                          109.121.43.0/24 maxlen: 24
                          109.121.42.0/24 maxlen: 24
                          109.121.40.0/24 maxlen: 24
                          109.121.41.0/24 maxlen: 24
                          109.121.39.0/24 maxlen: 24
                          109.121.47.0/24 maxlen: 24
                          109.121.45.0/24 maxlen: 24
                          212.69.11.0/24 maxlen: 24
                          178.253.237.0/24 maxlen: 24
                          109.233.185.0/24 maxlen: 24
                          109.233.184.0/24 maxlen: 24
                          77.105.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 15 Jun 2023 08:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:aa:62:ab:00:63:89:b7:95:6f:7c:78:03:ba:f4:c1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jun 11 12:16:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=80f395a921636e7c716de8c0e9a44a9423528bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0e:bf:33:f4:c0:8e:f4:eb:3b:26:fd:da:b8:
                    14:f1:70:d2:d5:6f:af:10:e2:ed:64:e2:d7:52:f6:
                    74:d0:8d:f3:d7:19:db:80:bf:d3:0a:32:5b:23:2f:
                    95:42:43:9f:15:f2:5f:ba:89:5b:14:52:fb:b0:c3:
                    39:9e:b9:71:6f:e0:29:d4:36:18:c7:f0:37:cb:e2:
                    77:2a:35:ab:13:21:14:20:97:90:b8:d9:a9:7d:df:
                    3f:aa:14:e5:cc:e0:07:9b:34:bb:ab:0b:a1:3d:7a:
                    1f:ee:06:82:c6:c2:e0:da:76:1a:85:fd:19:a2:5e:
                    17:58:48:ff:d0:b0:78:67:85:07:b8:2d:df:6f:93:
                    07:b0:b2:18:df:c7:73:89:a1:ce:b4:39:a9:74:18:
                    7e:ca:f8:78:1c:5b:90:f4:6e:6b:cd:d5:96:40:c6:
                    25:cd:3d:5d:18:1d:95:8e:eb:2e:5d:f4:6f:1a:62:
                    78:44:3b:8a:56:4c:45:97:10:0c:6c:d5:2b:17:cc:
                    cf:5d:2f:ea:6e:02:6d:c1:a5:8e:7f:7d:08:34:14:
                    08:cd:3b:0e:b9:a6:5d:ab:2c:e8:c3:b6:39:99:59:
                    f2:b8:58:ed:fd:bb:5c:1c:62:37:5c:40:1d:5c:f3:
                    8d:74:b2:a5:5a:2c:b7:a8:6c:7a:b0:70:e0:3f:58:
                    59:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F3:95:A9:21:63:6E:7C:71:6D:E8:C0:E9:A4:4A:94:23:52:8B:B3
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/gPOVqSFjbnxxbejA6aRKlCNSi7M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.8.0/24
                  79.175.67.0/24
                  79.175.95.0-79.175.96.255
                  109.121.33.0/24
                  109.121.36.0-109.121.43.255
                  109.121.45.0/24
                  109.121.47.0/24
                  109.233.184.0/23
                  178.253.237.0/24
                  188.255.128.0/24
                  188.255.144.0/24
                  188.255.212.0/24
                  212.69.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:77:38:fe:30:d5:61:f4:75:42:cd:2d:f1:01:23:1a:29:e9:
         ff:59:87:36:92:40:22:dc:2e:e1:44:ea:e1:99:55:24:67:16:
         71:19:04:e2:b4:38:94:1c:e8:49:e5:d9:c4:7c:b7:f0:73:2a:
         c0:a0:72:78:4f:fa:19:d7:66:fe:27:92:53:c0:05:ee:1d:a2:
         30:90:48:20:41:3c:be:ec:b5:3a:54:db:e0:45:28:a6:34:5d:
         4e:37:b5:75:19:18:b0:3f:69:a0:2d:71:36:aa:97:48:2a:a6:
         d9:ca:d4:09:0d:84:4b:b6:2f:2b:8e:d7:3e:f9:e4:45:6a:a9:
         f7:c3:73:a0:89:4e:db:d5:85:54:5f:b5:b8:52:0c:71:84:af:
         ee:15:26:c1:e1:96:dd:de:6c:87:80:dc:03:b7:97:84:be:87:
         47:73:4e:68:c3:46:8d:3d:e2:0b:15:c3:95:99:2d:e6:de:61:
         dc:d2:c9:14:a9:f0:9d:3f:00:8f:2c:cd:b9:bc:1f:23:dd:e7:
         4e:6a:d2:26:14:eb:83:fc:4d:95:b4:7b:34:57:dc:44:f5:c0:
         d1:31:a8:3a:64:a5:a1:d1:d8:f3:f3:31:86:a0:7a:2b:28:c8:
         f3:17:2a:6d:a9:c5:b8:53:fd:e1:12:84:a4:b0:85:0b:3b:a1:
         5f:28:74:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org