Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/TtaDJarcCf6hHciCZXnzT6ejUTs.roa
File:                     TtaDJarcCf6hHciCZXnzT6ejUTs.roa (raw, json)
Hash identifier:          VoRe7GLE0ykUvxq/u4uTEHvuzVI2wFUQlECJBUFk/Bs=
Subject key identifier:   4E:D6:83:25:AA:DC:09:FE:A1:1D:C8:82:65:79:F3:4F:A7:A3:51:3B
Certificate issuer:       /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial:       0187943D0C4825F885E0E92CC64338A31907
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/TtaDJarcCf6hHciCZXnzT6ejUTs.roa
Signing time:             Tue 18 Apr 2023 12:00:41 +0000
ROA not before:           Tue 18 Apr 2023 12:00:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59441
IP address blocks:        95.81.84.0/23 maxlen: 24
                          95.81.92.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:94:3d:0c:48:25:f8:85:e0:e9:2c:c6:43:38:a3:19:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
        Validity
            Not Before: Apr 18 12:00:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4ed68325aadc09fea11dc8826579f34fa7a3513b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ed:08:d8:55:93:6e:1f:96:01:2c:b8:97:77:
                    34:e2:9e:f6:8b:92:fc:bf:16:c2:59:57:23:54:7b:
                    87:d0:da:35:40:2f:bc:3a:e2:2f:c1:7f:b6:d1:ca:
                    46:55:24:54:15:03:c0:e3:81:66:f2:cc:48:08:df:
                    05:19:03:a5:f5:af:33:84:18:91:68:52:ed:cf:b3:
                    95:89:73:ba:76:2f:2b:38:8f:b1:f0:e8:8f:60:47:
                    b4:7c:ca:fd:78:87:cd:e4:f4:99:27:a5:27:a5:b2:
                    1d:5c:ac:ac:fe:45:bf:31:94:fb:ca:21:5f:05:a6:
                    25:69:25:10:7d:9a:11:59:b7:5a:1c:f0:2b:a5:78:
                    68:28:86:f0:58:f0:8a:5d:71:ca:1b:9c:59:b7:dd:
                    e5:41:04:78:8e:4a:e9:79:b3:c9:8b:7b:e9:0e:9a:
                    27:46:53:34:bd:40:b7:7d:0d:fa:f5:dc:2e:4a:ff:
                    f0:83:3f:ad:24:58:8d:ea:cd:17:d5:06:f3:41:d6:
                    f7:50:32:1e:41:46:85:0b:d1:e1:8d:90:57:8a:a7:
                    41:16:53:f2:b7:03:45:52:90:8a:82:bb:4e:a0:c8:
                    65:e8:89:bd:da:e0:16:54:1b:6c:b0:5e:ff:d9:e0:
                    0c:7c:df:48:d9:89:22:e8:c1:5c:1f:3e:24:f1:34:
                    fa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D6:83:25:AA:DC:09:FE:A1:1D:C8:82:65:79:F3:4F:A7:A3:51:3B
            X509v3 Authority Key Identifier:
                keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/TtaDJarcCf6hHciCZXnzT6ejUTs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.81.84.0/23
                  95.81.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:bd:4e:dd:ef:ea:28:f3:19:56:58:61:72:68:c7:2e:5c:b4:
         5a:19:c7:05:af:9f:90:dc:81:7f:6c:35:fb:34:7d:a6:5e:1a:
         02:ff:b6:89:a1:9e:31:e0:2d:d2:fb:2b:03:85:e3:f0:82:f0:
         16:4f:ee:11:36:22:d5:c1:b0:be:a3:40:c7:65:22:9b:e6:c7:
         63:7c:09:b4:43:2d:7a:9e:e4:69:c9:1d:38:c4:bd:ce:c8:1d:
         46:ef:3f:de:99:bf:bb:c5:be:c5:67:e8:cf:6e:82:30:76:fd:
         97:40:d7:8e:07:cb:9f:ff:7a:c6:32:07:e1:96:20:ef:31:86:
         6b:00:39:67:57:cd:75:e2:44:83:c3:13:1b:1c:4d:17:b7:b1:
         22:29:c8:5a:f7:59:b2:0f:04:ae:d6:63:15:e7:0e:af:b8:01:
         a3:31:50:e4:0d:44:73:1b:03:5e:51:e9:ef:3d:94:6f:d4:62:
         be:93:5f:95:21:87:35:e4:72:20:37:bf:79:f9:84:27:93:90:
         06:ac:6a:5d:54:51:8d:d1:33:6f:ca:cd:75:26:1b:4f:18:0e:
         64:89:af:24:f6:1d:5d:90:7f:b7:b1:ad:20:14:80:05:2b:6b:
         51:db:72:e2:36:67:e9:f8:aa:f8:fb:39:6b:26:9f:b2:76:0b:
         d3:0c:20:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:42 2024 by rpki-client on console-fra.rpki-client.org