Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/uXEeXP4ID9hHpSugC8L3TJOUq24.roa
File:                     uXEeXP4ID9hHpSugC8L3TJOUq24.roa (raw, json)
Hash identifier:          qOM5R02St4KwO1YHH0iqVuIjKeVzjOmWEtrQVd9O//c=
Subject key identifier:   B9:71:1E:5C:FE:08:0F:D8:47:A5:2B:A0:0B:C2:F7:4C:93:94:AB:6E
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       01856E38CF9C1C8177584285D118F3CE113A
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/uXEeXP4ID9hHpSugC8L3TJOUq24.roa
Signing time:             Sun 01 Jan 2023 16:44:54 +0000
ROA not before:           Sun 01 Jan 2023 16:44:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205656
IP address blocks:        212.111.205.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:38:cf:9c:1c:81:77:58:42:85:d1:18:f3:ce:11:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Jan  1 16:44:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b9711e5cfe080fd847a52ba00bc2f74c9394ab6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:83:8a:3f:08:4b:94:b3:32:d4:af:9d:f5:65:
                    46:3c:9a:c4:d7:fb:ff:f0:06:8a:d1:a2:d2:f9:48:
                    e5:a9:2d:b4:d9:15:f6:08:d8:f2:68:04:18:18:a2:
                    be:a3:5e:95:68:a5:31:a4:c2:b6:99:96:69:10:f1:
                    c6:de:11:1a:74:60:9d:e0:44:e5:1b:c5:a3:de:76:
                    fb:ec:19:a4:59:85:e6:7f:4d:9f:6e:7e:e6:9c:51:
                    91:98:2e:d9:63:43:9f:bb:fa:49:db:e0:2f:fa:16:
                    21:7b:79:4f:e4:24:fb:29:ab:4c:89:63:19:f1:e5:
                    02:80:8f:61:45:df:85:b4:b3:d4:f1:88:1d:6e:06:
                    18:06:3e:1e:94:e3:1d:7c:82:22:52:11:ae:37:0f:
                    e7:b6:dd:78:41:fc:2d:a7:88:64:d0:9b:e8:29:99:
                    b0:ef:12:58:42:c9:33:3f:7c:20:bc:0e:c9:a1:3b:
                    0a:b8:e9:a3:cb:91:1f:4c:58:22:f6:14:e1:a9:99:
                    c9:7f:4b:21:68:75:7c:ea:95:68:65:87:90:94:a4:
                    bd:87:bd:30:9a:8c:74:1f:d8:c5:7d:c5:55:b7:72:
                    bc:c5:44:37:21:28:64:d2:70:91:58:7b:f6:17:ea:
                    4c:af:4d:15:58:e9:83:2a:54:b4:d3:9f:17:82:1c:
                    34:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:71:1E:5C:FE:08:0F:D8:47:A5:2B:A0:0B:C2:F7:4C:93:94:AB:6E
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/uXEeXP4ID9hHpSugC8L3TJOUq24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.111.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:24:97:09:7c:ba:2a:19:e5:d2:1c:9c:9f:9b:35:25:a5:8b:
         c1:30:cf:33:a3:e3:f7:4d:5c:ee:47:39:4d:62:83:b7:bc:78:
         05:77:85:1d:49:9c:6c:34:43:39:b8:5f:fb:39:09:ad:73:85:
         af:43:bd:17:73:c1:50:d3:e3:37:47:44:90:82:31:db:5c:ff:
         05:cb:88:a1:41:1d:d3:2a:f9:45:24:b8:9d:e5:63:5f:37:9b:
         83:53:6f:3b:f9:01:dd:a8:fd:b9:53:71:c9:a1:38:f1:09:de:
         fc:73:6a:9d:1c:62:44:ab:e5:4f:d7:1d:a9:7e:fa:e1:f7:40:
         21:7f:93:ab:d9:8a:6e:44:09:85:66:27:04:da:26:b2:cb:2a:
         75:16:d4:2a:8b:9f:69:cc:de:22:27:2f:33:c8:c1:96:e4:96:
         d8:8e:73:5c:59:df:91:1d:7c:69:83:c5:95:a9:c3:95:8c:94:
         56:7c:6a:83:5b:d0:37:7d:05:ae:bc:47:00:b4:46:43:b5:b4:
         e3:6e:13:23:dc:83:a3:7a:8f:90:05:f2:15:4f:77:28:78:6f:
         2c:d5:53:5c:ea:21:db:2f:1b:71:30:9c:9b:44:a5:91:c7:23:
         06:13:61:98:96:c1:74:9b:94:be:50:e3:20:72:27:af:93:23:
         8e:9f:a3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org