Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/t6jXHAfGgsAvtc1pCAADM9t7LgI.roa
File:                     t6jXHAfGgsAvtc1pCAADM9t7LgI.roa (raw, json)
Hash identifier:          7aR6YUdjDTAxGBScjeN0vIJ73I2tAKJ/8V5DIwlAntY=
Subject key identifier:   B7:A8:D7:1C:07:C6:82:C0:2F:B5:CD:69:08:00:03:33:DB:7B:2E:02
Certificate issuer:       /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial:       01856C53CE4CBBA6533C055861DDA87C8546
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/t6jXHAfGgsAvtc1pCAADM9t7LgI.roa
Signing time:             Sun 01 Jan 2023 07:55:09 +0000
ROA not before:           Sun 01 Jan 2023 07:55:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199231
IP address blocks:        213.135.92.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 Nov 2023 13:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:53:ce:4c:bb:a6:53:3c:05:58:61:dd:a8:7c:85:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
        Validity
            Not Before: Jan  1 07:55:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b7a8d71c07c682c02fb5cd6908000333db7b2e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:66:a1:73:8b:d3:b7:d3:9c:15:02:9b:f8:59:
                    d3:80:aa:a1:fb:23:6d:a2:53:2b:12:79:15:ac:4f:
                    8c:ef:9f:9a:04:5f:48:cb:e4:17:f5:c2:d0:79:ba:
                    90:e4:f0:3a:20:70:fa:c4:32:5a:54:48:f5:4c:46:
                    62:36:8b:09:2e:7f:18:23:74:81:f9:2e:43:6e:35:
                    6a:b3:5a:f2:cc:e2:c3:87:cf:a2:88:75:0e:38:90:
                    2c:a1:30:30:7d:eb:9f:af:5f:a0:4f:d9:30:e0:37:
                    70:24:42:d6:09:46:89:e0:67:6e:d1:48:36:07:6e:
                    08:72:db:fa:a1:1c:53:c7:ce:72:55:99:37:e6:cf:
                    30:f3:36:62:ff:bd:e5:ea:1a:39:8e:91:05:1e:1b:
                    bc:44:ce:17:c5:4f:7a:6a:82:90:9f:77:68:47:21:
                    cb:4b:37:c1:26:45:3f:92:2f:77:ee:91:92:fd:5d:
                    1f:27:9e:cd:7c:68:15:e0:c6:af:ef:df:53:f3:49:
                    6e:1e:95:5a:30:e4:c5:c5:83:6e:a8:14:42:82:8c:
                    ee:82:f3:4e:56:88:f9:37:91:56:e7:71:6d:d5:f8:
                    25:56:69:0c:cd:10:75:4f:4e:27:9d:13:71:e5:53:
                    a5:57:2c:81:24:25:96:e7:43:58:6c:39:a5:0a:22:
                    fd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A8:D7:1C:07:C6:82:C0:2F:B5:CD:69:08:00:03:33:DB:7B:2E:02
            X509v3 Authority Key Identifier:
                keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/t6jXHAfGgsAvtc1pCAADM9t7LgI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.135.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:39:58:dc:3c:04:f2:97:01:5a:31:46:bb:d5:f0:f0:79:01:
         91:d0:47:b2:02:ee:33:39:f1:9e:7e:7e:98:e4:44:35:03:f2:
         54:82:4b:ef:3c:c5:24:f0:aa:19:48:ae:05:c2:03:74:cc:5b:
         c2:7e:5c:9b:98:21:6f:92:89:ef:af:48:fd:a0:7b:7c:92:f4:
         ce:42:6d:78:49:9d:c8:31:5d:0e:76:fa:60:f1:de:85:d9:d3:
         9e:92:82:2a:e2:5b:80:37:0e:19:bd:c8:77:dd:48:29:55:e1:
         ee:ea:04:55:2e:02:00:5b:2c:e5:f4:d4:3d:d7:36:27:a3:c3:
         48:99:40:a9:f0:c2:69:65:ae:d2:e4:ce:01:9a:0d:02:91:d5:
         dd:d0:61:52:07:f5:a7:a3:b6:8a:30:ff:c6:2b:6a:90:ca:48:
         7e:22:0b:03:44:80:db:0f:f9:75:20:d7:76:0c:74:d9:c0:f4:
         c0:33:11:3c:53:bb:b4:0b:9c:22:49:4f:a6:90:5a:a6:c9:2f:
         cb:47:69:39:2a:34:45:cc:ee:1d:06:89:14:3a:fa:de:35:f5:
         45:85:0b:16:51:85:ae:1c:2c:df:ab:e8:d3:fa:66:e5:ac:7e:
         7e:1d:a4:2f:94:73:38:d5:3b:3d:08:62:fc:d0:f0:42:7f:8e:
         52:52:19:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:36 2024 by rpki-client on console-fra.rpki-client.org