Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/0BAIYPmAiSvlUifkmz_cxiFKVO8.roa
File:                     0BAIYPmAiSvlUifkmz_cxiFKVO8.roa (raw, json)
Hash identifier:          lgiwoTalqq8YkqvEcaullIpX38xRGAZBdprmRvm/kdE=
Subject key identifier:   D0:10:08:60:F9:80:89:2B:E5:52:27:E4:9B:3F:DC:C6:21:4A:54:EF
Certificate issuer:       /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial:       01856D38674B60A89D51A2A8F577984F84C5
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/0BAIYPmAiSvlUifkmz_cxiFKVO8.roa
Signing time:             Sun 01 Jan 2023 12:04:51 +0000
ROA not before:           Sun 01 Jan 2023 12:04:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208626
IP address blocks:        95.181.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:31:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:38:67:4b:60:a8:9d:51:a2:a8:f5:77:98:4f:84:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
        Validity
            Not Before: Jan  1 12:04:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d0100860f980892be55227e49b3fdcc6214a54ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:31:f8:5e:5c:43:ee:61:c4:fa:0f:58:5d:45:
                    a0:7b:27:bc:5d:a1:4b:f4:d4:11:a8:01:bd:8e:22:
                    62:e2:f2:da:29:c5:e1:c3:b2:7f:16:d0:c2:48:9d:
                    62:dc:8c:de:66:42:04:93:37:8f:e0:e6:0c:b6:34:
                    c2:50:e4:6c:3e:e9:53:50:c6:76:a2:38:3b:62:e2:
                    88:f1:e1:ba:2a:a6:40:de:74:c6:2b:c7:da:75:2a:
                    e9:a5:78:22:6d:f3:eb:f3:96:14:0f:28:56:5b:3c:
                    ba:43:21:06:50:65:e6:31:d8:a8:68:09:de:7b:ae:
                    40:c0:7d:f9:d2:01:9e:fc:bb:df:0f:0c:d2:f7:ff:
                    de:d3:33:0e:97:a2:04:24:6e:9d:b2:a9:73:2b:aa:
                    86:70:a5:2c:4e:99:8a:c2:f7:d5:3c:0d:44:cd:e5:
                    51:21:36:c6:aa:0f:84:88:e2:e1:f7:5e:ab:db:d6:
                    c2:48:0b:08:44:bd:57:26:44:43:d7:da:36:5e:76:
                    5d:3e:c0:c5:7e:c2:17:4c:78:2c:79:85:39:67:50:
                    ce:d7:ab:56:c1:ba:8d:4a:82:fa:98:a9:39:71:41:
                    a7:0c:47:ba:4b:48:e6:05:d4:31:a4:fe:bb:68:ca:
                    e0:f0:70:90:42:c9:20:03:62:94:27:88:c5:8b:f7:
                    77:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:10:08:60:F9:80:89:2B:E5:52:27:E4:9B:3F:DC:C6:21:4A:54:EF
            X509v3 Authority Key Identifier:
                keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/0BAIYPmAiSvlUifkmz_cxiFKVO8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.181.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:b2:9f:a2:2d:d6:83:92:98:18:ba:14:09:3f:e8:8d:e0:1e:
         6f:24:ee:a2:b0:53:d0:c5:2e:d5:16:2d:c3:af:ae:68:71:7e:
         54:63:a0:1e:0f:6d:6f:73:fc:aa:91:c9:52:22:e8:fe:96:9f:
         f2:d9:19:c1:5f:af:3f:91:51:ff:6c:a1:41:63:fb:54:03:54:
         b2:6a:45:63:6c:67:98:a1:ef:56:c5:ea:28:01:e1:31:c3:6f:
         9d:eb:c5:97:36:a0:ec:0f:e2:ea:76:64:30:e2:5e:06:c1:73:
         de:5b:76:00:53:1b:2b:8f:d0:16:b5:5d:17:07:55:31:6c:4e:
         a7:9c:52:08:47:62:3c:0a:80:a9:e0:cf:c0:85:f1:2a:3d:4f:
         b4:8d:1a:fb:70:11:8a:3d:2d:b0:e6:6f:d3:b1:6c:26:f2:3b:
         25:01:2c:75:aa:e8:18:64:a6:2c:a6:ef:3a:1a:73:b4:81:ce:
         fb:85:af:9e:7c:e3:d3:26:ad:fc:09:04:7c:e4:72:c6:51:e9:
         51:6a:4d:59:d7:b7:21:64:f9:77:54:ca:45:29:f9:6b:4b:11:
         10:78:6e:6f:8f:2b:7a:a1:ca:74:ce:ac:08:a9:5f:86:14:bc:
         dc:3b:58:7c:5a:02:3d:11:30:71:9c:42:f9:9e:49:04:b2:f7:
         51:d8:c0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:34 2024 by rpki-client on console-fra.rpki-client.org