Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/GcsWO-BEQWz_8w8YtC6YBZZ_cBA.roa
File:                     GcsWO-BEQWz_8w8YtC6YBZZ_cBA.roa (raw, json)
Hash identifier:          gcmTOGvlWrdsvbe8KK8Uds+c77E0+A3A8orSg/pRKKw=
Subject key identifier:   19:CB:16:3B:E0:44:41:6C:FF:F3:0F:18:B4:2E:98:05:96:7F:70:10
Certificate issuer:       /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial:       018571F9ED638FF76F1D24724FCCA3BCD544
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/GcsWO-BEQWz_8w8YtC6YBZZ_cBA.roa
Signing time:             Mon 02 Jan 2023 10:14:42 +0000
ROA not before:           Mon 02 Jan 2023 10:14:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211671
IP address blocks:        2001:67c:2978::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:f9:ed:63:8f:f7:6f:1d:24:72:4f:cc:a3:bc:d5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
        Validity
            Not Before: Jan  2 10:14:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=19cb163be044416cfff30f18b42e9805967f7010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:12:90:33:6c:58:3e:49:5a:50:f9:ee:fd:b9:
                    49:55:75:9e:bd:27:9a:3e:57:61:8d:59:19:a9:fc:
                    6d:6b:ad:9b:4f:88:18:f4:69:65:1e:19:69:65:88:
                    55:75:87:5a:31:54:e4:cf:46:d5:05:c5:23:2a:24:
                    56:f0:df:34:c4:f8:93:2a:98:9c:7c:e8:24:c2:63:
                    9c:bb:57:e2:8f:42:02:71:ac:a0:33:58:d0:f7:71:
                    73:ab:67:92:ab:52:77:ed:01:5d:2d:d4:12:b8:84:
                    fa:e3:f3:d0:fd:b3:2c:e9:75:20:47:83:42:3f:e0:
                    48:9c:5d:05:e7:a7:b7:0f:a7:05:1c:a7:f7:02:c5:
                    3e:f2:c3:70:bf:20:ad:82:64:fc:73:06:c1:1f:69:
                    3c:8b:2f:ce:8d:a3:23:78:0c:6f:7d:af:bd:3f:54:
                    f4:d9:6d:1b:7f:82:e8:0f:a6:c2:83:06:6c:06:39:
                    f2:25:6d:c4:17:24:a1:81:a5:b0:9d:09:e9:20:9c:
                    74:78:0b:6b:e7:b1:83:00:38:ea:9d:32:83:16:e8:
                    e5:bb:bc:ac:1e:47:93:33:8c:9a:b8:bb:18:dc:1d:
                    56:bf:f0:ec:01:95:5a:d2:7f:99:91:90:af:06:aa:
                    fb:04:a5:3d:8c:dd:50:f9:9c:66:06:d0:cd:1a:f9:
                    67:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CB:16:3B:E0:44:41:6C:FF:F3:0F:18:B4:2E:98:05:96:7F:70:10
            X509v3 Authority Key Identifier:
                keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/GcsWO-BEQWz_8w8YtC6YBZZ_cBA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2978::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:03:00:9d:ed:e1:64:86:8f:b7:cd:03:1f:bb:41:06:25:a1:
         57:69:f2:e1:70:bf:24:e7:ba:d5:c3:8c:eb:6b:89:c8:2e:a6:
         6f:ab:e8:ba:f9:9e:31:8e:86:6c:09:1d:67:20:07:1f:d1:ca:
         da:a3:fa:39:1c:f5:be:7f:e9:dd:33:07:c8:62:58:59:f0:ca:
         d5:95:7c:6b:f6:14:39:e9:e9:31:ac:0b:a3:22:94:e4:1d:08:
         01:8c:a1:25:c3:8f:60:55:e4:ab:0c:36:57:1c:5e:aa:ca:55:
         43:08:83:5f:44:77:0f:23:aa:43:01:2b:4a:e9:2c:34:4f:a0:
         db:a1:51:ee:96:c8:cf:14:8c:da:c6:ff:5b:5d:9f:ee:32:6b:
         19:6b:e8:5d:8e:11:54:92:59:99:e1:3b:2f:0b:8f:57:c1:ba:
         c5:28:9c:d1:1e:a9:2f:2f:5b:28:95:ca:8a:90:6b:be:92:33:
         bc:18:29:ed:2c:cd:15:c2:41:36:fd:06:51:1c:6f:7f:fd:a4:
         f3:4c:13:a2:d9:8f:e1:f2:06:83:76:d6:b0:df:c9:f1:49:38:
         c2:2d:e4:db:c9:6b:e8:71:4e:52:3c:52:e9:12:33:81:e3:68:
         62:a2:9c:f5:85:a2:1b:23:2d:3f:03:a5:54:c2:25:3a:9d:4a:
         5d:31:fc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:14 2024 by rpki-client on console-ams.rpki-client.org