Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/aWwSfEKwtQCI11kNJFV29uIu_Dg.roa
File:                     aWwSfEKwtQCI11kNJFV29uIu_Dg.roa (raw, json)
Hash identifier:          AP2Jt5nYGf2FkVM3ME6CBTlmKrCSHS4kXQz88eT4ad8=
Subject key identifier:   69:6C:12:7C:42:B0:B5:00:88:D7:59:0D:24:55:76:F6:E2:2E:FC:38
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       018CC50077E522ECA11155685A91E790FDFA
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/aWwSfEKwtQCI11kNJFV29uIu_Dg.roa
Signing time:             Mon 01 Jan 2024 12:29:51 +0000
ROA not before:           Mon 01 Jan 2024 12:29:51 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     64458
IP address blocks:        212.80.8.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 09 Feb 2024 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:77:e5:22:ec:a1:11:55:68:5a:91:e7:90:fd:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Jan  1 12:29:51 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=696c127c42b0b50088d7590d245576f6e22efc38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:90:86:75:c7:85:c9:03:66:a2:45:fc:b4:
                    05:71:fa:8e:96:f9:7a:36:ca:d8:6e:e2:30:ce:61:
                    b3:6f:ad:c0:45:7a:6a:b3:d6:42:0e:1e:21:94:57:
                    7d:2e:d7:32:db:fe:ac:41:ab:af:cb:d4:fa:f6:93:
                    95:04:18:b7:31:17:75:c4:d0:bc:95:84:e7:67:35:
                    dc:ce:40:0b:2a:e8:aa:74:6d:13:89:dd:c5:a2:fd:
                    a4:88:80:e4:e1:6d:89:c3:dc:58:0f:b0:4f:33:bf:
                    e5:c6:47:3c:3d:61:90:57:c0:f4:a1:b3:e2:00:4c:
                    2a:8f:a5:73:ab:a7:e2:7a:a2:c1:73:67:02:e5:8e:
                    cb:80:19:3c:6c:ea:76:0f:52:38:c0:2d:e7:4e:db:
                    1e:62:e6:f0:0a:f7:fa:c9:22:ac:fb:c0:13:8f:4a:
                    40:21:21:7f:ef:ca:87:42:21:6c:e0:93:5b:4d:de:
                    d2:fe:f1:34:58:14:21:88:01:d4:7b:41:c0:89:7e:
                    e2:96:6f:47:27:f3:80:52:66:91:5b:80:49:ec:24:
                    b6:54:16:dc:3f:15:fd:1e:8a:5c:f6:a2:0f:15:24:
                    b3:8d:4c:d4:69:2d:3f:45:bf:e8:31:ae:2d:d8:8b:
                    45:0c:7e:99:11:81:37:69:55:50:19:11:5b:0e:22:
                    b5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6C:12:7C:42:B0:B5:00:88:D7:59:0D:24:55:76:F6:E2:2E:FC:38
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/aWwSfEKwtQCI11kNJFV29uIu_Dg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.80.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:1f:d5:7c:58:c5:9a:88:20:72:f0:9b:78:04:ce:26:e9:d5:
         24:cf:df:1c:1c:af:83:76:ff:3c:bd:28:c2:06:d6:33:81:d1:
         7e:d8:39:f8:26:27:0b:9d:34:e8:08:db:b7:40:dd:14:a6:1e:
         5f:9f:ca:b8:7c:ab:e9:ab:bf:c6:54:79:ae:dd:ce:81:a6:49:
         53:9a:e0:5d:83:1c:39:b5:0e:80:83:d0:17:9d:34:fc:b8:b1:
         0f:90:bf:ea:ca:c5:85:9c:49:36:5d:13:04:9d:73:d2:da:bf:
         d2:65:ae:a4:c0:f9:9f:25:c8:5b:2e:ed:5f:1f:ea:70:88:25:
         b1:3f:a2:f4:7e:49:75:1c:41:f8:ec:6d:8d:00:8b:67:c7:1b:
         43:e7:49:56:48:8f:47:4b:90:42:4d:a5:68:c8:a1:83:4f:55:
         58:bb:c5:ba:95:51:df:dc:a7:88:59:ed:c3:e9:26:f9:fc:9d:
         d0:ff:2f:92:e8:c6:9b:67:ac:7a:14:06:5e:6a:45:2a:2e:fa:
         06:55:d2:9a:b6:05:9b:bb:49:69:c8:5f:4a:cb:0c:51:5d:c9:
         25:6c:48:02:dc:13:06:8a:28:89:b5:8e:a6:7d:1b:a9:d3:6d:
         1f:12:b7:ed:7c:6a:75:a2:59:c8:bf:02:d5:8f:df:05:38:1b:
         84:ad:e3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:06 2024 by rpki-client on console-ams.rpki-client.org