Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1nwimzhJE6fELhqVrNEg78oQA08.roa
File:                     1nwimzhJE6fELhqVrNEg78oQA08.roa (raw, json)
Hash identifier:          T/dgy1RaJ7cqFV8b2fAtxZfFNeFSh/gwmA0yAZPJlMY=
Subject key identifier:   D6:7C:22:9B:38:49:13:A7:C4:2E:1A:95:AC:D1:20:EF:CA:10:03:4F
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       018D7D9F1B225A679FD2AADD2612188AC8F8
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1nwimzhJE6fELhqVrNEg78oQA08.roa
Signing time:             Tue 06 Feb 2024 08:53:15 +0000
ROA not before:           Tue 06 Feb 2024 08:53:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212027
IP address blocks:        212.16.80.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 15 Feb 2024 09:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:7d:9f:1b:22:5a:67:9f:d2:aa:dd:26:12:18:8a:c8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Feb  6 08:53:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d67c229b384913a7c42e1a95acd120efca10034f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8b:b2:36:90:15:22:3e:4c:47:79:d5:89:d4:
                    cc:e7:2b:fd:19:f4:b9:d9:5d:3e:e6:dd:8e:a8:b0:
                    40:58:87:a2:c1:8f:a2:c0:be:77:b5:a8:78:f2:a8:
                    30:74:39:e5:53:77:a7:a4:65:75:7a:c0:ea:59:b2:
                    ca:76:da:ea:7e:6a:d1:89:fc:f5:51:2a:46:2c:dc:
                    97:e3:ed:93:7a:05:b3:5f:31:25:07:f2:13:57:85:
                    51:ba:ff:c1:39:77:cc:7a:70:eb:f5:5c:d9:c0:fd:
                    77:a4:68:60:fb:4e:07:57:a0:1e:aa:97:0d:63:39:
                    f6:4b:0f:a7:3e:df:3f:57:04:aa:4e:e1:75:24:e8:
                    c9:7e:36:7b:b0:0b:ba:60:b7:56:b5:e2:fa:7e:4a:
                    18:23:9a:b2:36:08:d2:cf:85:9e:05:19:e6:0a:2d:
                    22:b4:0a:cb:9b:8a:ac:53:d2:18:a9:fe:db:bf:23:
                    a1:5e:f9:b1:e8:ba:24:12:20:3f:de:18:95:ad:cd:
                    e3:5f:89:1e:51:de:84:96:49:cf:84:41:76:74:7c:
                    80:15:4a:a9:dc:65:f5:76:3d:41:f1:5d:76:e6:91:
                    b2:00:f8:72:69:31:07:45:71:1b:7a:72:6e:f0:6d:
                    56:d2:b1:94:18:e3:08:ea:06:41:7c:68:40:e1:08:
                    8a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7C:22:9B:38:49:13:A7:C4:2E:1A:95:AC:D1:20:EF:CA:10:03:4F
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1nwimzhJE6fELhqVrNEg78oQA08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.16.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:03:28:42:0d:ef:42:d4:a5:42:83:1b:84:29:11:d3:dc:ac:
         9c:e7:e4:31:bd:14:f4:1a:cf:a1:05:94:f3:b4:34:d9:33:b7:
         f6:28:f2:92:37:8a:7c:57:ba:0a:f4:ac:c2:93:3b:b5:2c:93:
         4c:93:4c:c3:cc:01:0e:53:cc:4d:c5:07:ec:b6:72:6a:23:9d:
         c5:7a:fc:4f:9a:6b:9a:cc:04:45:c7:6c:45:f8:56:dd:80:4d:
         81:66:3e:57:1b:00:6b:b6:80:25:04:ea:64:f9:e0:01:ed:40:
         ae:9b:00:cb:1a:4e:26:bd:0d:06:85:a7:51:f4:94:c9:c2:12:
         c8:a3:bb:52:f0:f9:84:f3:a0:cc:3e:79:42:b4:4a:6c:6e:05:
         74:e5:a7:e3:f2:e1:83:1f:16:ec:28:54:05:76:fe:89:bb:97:
         f1:74:88:81:1e:88:ae:81:c8:0e:96:87:0f:10:ae:49:55:e3:
         60:dc:a5:1e:57:11:d7:57:38:27:bd:0f:48:eb:04:35:0c:a3:
         1e:7f:37:ce:e3:af:9c:53:17:ea:da:69:15:d3:09:bc:53:44:
         b2:3a:36:29:cc:7d:14:3a:f3:8a:3a:a3:22:de:f6:24:90:71:
         7d:5f:fc:46:8a:e8:c3:cb:a7:5e:35:d9:a9:d6:b7:59:d5:89:
         54:73:a7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:06 2024 by rpki-client on console-ams.rpki-client.org