Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_sgFYvvMjIz4XVK2ktxEIUWWS_w.roa
File:                     _sgFYvvMjIz4XVK2ktxEIUWWS_w.roa (raw, json)
Hash identifier:          DvFUEo4eSfEaaEeMqYMGzcItPFWRM6y/Tbvp3LxviL4=
Subject key identifier:   FE:C8:05:62:FB:CC:8C:8C:F8:5D:52:B6:92:DC:44:21:45:96:4B:FC
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018A2645736942FD612215C1D4FC955ED045
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_sgFYvvMjIz4XVK2ktxEIUWWS_w.roa
Signing time:             Thu 24 Aug 2023 06:40:00 +0000
ROA not before:           Thu 24 Aug 2023 06:40:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29802
IP address blocks:        81.21.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 25 Sep 2023 09:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:26:45:73:69:42:fd:61:22:15:c1:d4:fc:95:5e:d0:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Aug 24 06:40:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fec80562fbcc8c8cf85d52b692dc442145964bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2b:56:8c:b2:e4:80:07:85:5d:c1:f0:eb:11:
                    67:35:da:05:5c:cd:d7:b5:72:20:b5:ad:96:b9:e4:
                    c0:f7:67:17:ce:eb:5c:d3:d0:95:77:2f:cc:1d:fc:
                    36:d8:24:59:e8:40:54:77:9c:29:44:9c:24:12:15:
                    c9:56:95:b3:d1:eb:22:ec:e7:e4:44:6c:c7:19:bb:
                    4a:d3:4f:66:16:7e:7e:9d:9a:29:98:ca:6d:ff:65:
                    cd:98:ab:ae:05:fe:b2:86:e0:24:d1:60:83:95:7c:
                    97:17:61:5a:cf:72:d6:f5:ff:1b:79:37:24:e6:e3:
                    cc:93:5a:af:bd:8a:f8:54:bd:47:6d:59:c8:49:35:
                    ad:9a:81:c4:53:fb:aa:a0:4c:65:91:28:61:fc:fd:
                    61:03:dd:bb:f0:c7:19:3e:a3:29:1e:1a:76:ec:60:
                    d6:e8:02:91:df:e2:25:87:06:25:ed:c6:7b:d3:a8:
                    c1:0b:82:16:7e:d3:33:af:16:17:a6:a0:96:cd:02:
                    02:6d:d4:bc:76:4b:68:a3:c3:ff:b0:d2:53:38:af:
                    3f:c3:db:0c:e2:a2:27:f7:ab:cc:f2:d8:7c:ec:62:
                    d0:30:cb:7e:a5:5a:c5:e0:e7:d4:79:0d:de:97:03:
                    8b:9f:07:49:d3:19:91:2a:00:3b:08:96:16:60:7e:
                    27:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C8:05:62:FB:CC:8C:8C:F8:5D:52:B6:92:DC:44:21:45:96:4B:FC
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_sgFYvvMjIz4XVK2ktxEIUWWS_w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.21.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:a5:2a:2b:b1:6f:da:e0:22:cc:df:f2:e3:26:e6:9c:8d:db:
         e9:6c:3f:40:e5:bb:db:1c:ff:77:79:d9:d6:41:be:fe:7a:af:
         57:56:57:03:52:53:ad:7e:3e:1d:83:90:75:46:c7:63:2a:34:
         80:15:9b:2e:07:e5:f4:ab:5f:2f:07:6c:5d:59:dd:e2:ae:a4:
         02:cb:41:5f:4b:ba:e0:be:9c:3e:7f:31:0a:3e:5e:15:9e:1e:
         ce:2e:e3:3e:ae:8c:32:6c:04:ba:f9:ab:a8:af:4c:48:73:81:
         77:32:23:94:ae:fa:23:bc:85:1b:ff:d7:96:1d:76:11:43:c1:
         5c:4e:5c:ae:fe:78:e1:c0:d4:0d:8d:53:57:98:39:99:63:5a:
         42:d7:d4:7f:a8:8f:6f:60:f9:5b:53:64:87:4b:f4:1f:47:6b:
         1b:b2:96:be:8d:82:ae:8b:b6:cd:cc:14:d2:a7:47:ca:a5:bc:
         5e:e6:62:61:38:47:8e:2a:d0:10:73:c8:0d:a4:13:04:e2:f5:
         81:47:31:76:17:69:54:a4:57:27:7a:01:85:25:61:69:e7:53:
         31:1d:c5:d3:83:20:57:b0:cc:1d:a3:26:d5:21:3b:b4:2a:4b:
         69:50:18:24:b3:05:fd:b6:f5:c6:8a:63:1d:3d:c3:10:9d:e2:
         61:65:af:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org