Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/b8v_ffAvSd_ISDPdfLDeV8F5t70.roa
File:                     b8v_ffAvSd_ISDPdfLDeV8F5t70.roa (raw, json)
Hash identifier:          heWg67lZD54EALE0dguRsdV4ZgtaojSQE1sKCelppx4=
Subject key identifier:   6F:CB:FF:7D:F0:2F:49:DF:C8:48:33:DD:7C:B0:DE:57:C1:79:B7:BD
Certificate issuer:       /CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Certificate serial:       01856BAED310AAE36FAB35E525FA2E571AC5
Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/b8v_ffAvSd_ISDPdfLDeV8F5t70.roa
Signing time:             Sun 01 Jan 2023 04:54:57 +0000
ROA not before:           Sun 01 Jan 2023 04:54:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207084
IP address blocks:        2a12:8fc6:200::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:ae:d3:10:aa:e3:6f:ab:35:e5:25:fa:2e:57:1a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b
        Validity
            Not Before: Jan  1 04:54:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6fcbff7df02f49dfc84833dd7cb0de57c179b7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4f:f2:5b:a2:75:bb:85:fa:5a:a1:dc:e1:72:
                    30:67:58:28:26:af:f3:cf:a8:81:3a:cf:b0:e5:56:
                    8c:bd:b0:3d:5b:ba:3c:64:42:ff:ff:30:eb:55:ef:
                    a6:cc:e8:5d:ce:36:14:18:09:bf:c9:5c:8d:20:6e:
                    46:08:36:87:1a:c0:72:ba:b9:f0:13:8e:df:c2:11:
                    7b:a8:de:7b:16:30:1f:50:81:29:ff:b4:bf:a8:1b:
                    a7:ce:6b:d1:29:c1:1c:3c:b8:4d:ac:ba:f8:b9:6a:
                    c8:4c:31:cd:30:88:10:bb:20:ba:fb:fc:91:b9:31:
                    24:fa:10:d6:52:2a:79:2c:16:4d:c1:b8:74:20:86:
                    5b:d6:8c:e9:d6:b1:01:36:e5:5f:fd:d7:65:93:30:
                    a6:18:c9:b9:3d:0e:dd:fe:cd:49:91:c9:0f:ec:19:
                    6b:64:bd:3f:dc:f0:84:e8:58:2a:71:9e:75:8e:95:
                    e6:36:bd:db:18:9a:85:a2:de:83:46:92:e0:fe:e4:
                    0e:3d:f2:b7:56:22:bd:66:0a:3e:8a:b1:09:2d:85:
                    92:05:36:15:dd:c0:ae:01:9c:ec:a3:fb:22:23:13:
                    56:34:03:fb:23:7d:28:22:cb:03:3e:fb:55:ab:26:
                    cb:64:7e:b0:e2:1a:e0:5e:f9:03:c1:1b:0a:c9:c1:
                    24:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CB:FF:7D:F0:2F:49:DF:C8:48:33:DD:7C:B0:DE:57:C1:79:B7:BD
            X509v3 Authority Key Identifier:
                keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/b8v_ffAvSd_ISDPdfLDeV8F5t70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:8fc6:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:d7:7c:cd:9d:91:1f:b2:b5:26:a5:f2:31:5e:4a:9f:b4:f2:
         00:87:8b:c0:3d:b7:3b:5b:6a:22:f9:82:b9:3c:66:f3:4a:55:
         1d:4f:45:eb:b4:81:bc:cf:b5:5a:bb:3b:f5:e9:70:26:31:32:
         4d:bb:09:ef:dc:e4:a6:72:7c:82:1d:d3:64:2b:82:b2:11:ad:
         6d:bb:02:d1:4f:d8:e9:9f:1d:c7:fe:cd:78:3b:b0:34:24:46:
         81:93:6d:10:33:fe:71:3b:10:cf:9f:05:00:8e:8e:aa:f3:5e:
         df:55:cb:b3:03:81:6b:f6:06:c2:51:65:82:d1:20:a6:e8:7f:
         ee:93:09:5d:85:d7:34:d8:45:e7:b7:86:b7:9a:4b:c5:0c:a5:
         26:aa:33:bf:d5:f1:f0:b1:32:c6:77:32:6b:3d:f9:f6:ee:ce:
         69:76:41:4b:c5:c2:ee:8d:7d:0d:fb:9b:6a:e8:ff:12:98:5a:
         dc:2f:ac:21:47:71:56:79:a8:6a:ca:f9:fc:e3:3d:42:3f:89:
         ea:a4:9b:ff:39:a5:ce:e9:8b:03:cc:b8:53:92:47:af:7d:44:
         7c:db:2d:6e:b3:76:08:7e:57:6d:db:7a:ef:c9:58:f0:98:9f:
         27:ad:8e:45:8a:2a:eb:09:c7:02:63:f5:70:8d:54:98:81:21:
         94:72:0a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:13 2024 by rpki-client on console-fra.rpki-client.org