Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/b1vWPsooUrKEVfwhVsCIX6WKKRY.roa
File:                     b1vWPsooUrKEVfwhVsCIX6WKKRY.roa (raw, json)
Hash identifier:          vlRl3FoM+Xoz00uZElfauASA0EjvHM4NytrQdA6AHAY=
Subject key identifier:   6F:5B:D6:3E:CA:28:52:B2:84:55:FC:21:56:C0:88:5F:A5:8A:29:16
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       0189F94D2063A8189F0E78121BACF9F0C4EB
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/b1vWPsooUrKEVfwhVsCIX6WKKRY.roa
Signing time:             Tue 15 Aug 2023 13:05:28 +0000
ROA not before:           Tue 15 Aug 2023 13:05:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200088
IP address blocks:        85.209.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 01 Nov 2023 13:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:f9:4d:20:63:a8:18:9f:0e:78:12:1b:ac:f9:f0:c4:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: Aug 15 13:05:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6f5bd63eca2852b28455fc2156c0885fa58a2916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:25:55:c4:0b:b0:30:21:a7:ac:24:56:e9:87:
                    a4:a3:75:a3:09:3c:27:2b:56:65:10:0c:df:07:a1:
                    a3:10:03:b1:13:49:8b:ff:58:09:fb:a4:1f:43:e1:
                    a1:2f:0e:e9:6b:ad:22:4f:49:78:ec:3a:47:43:0c:
                    50:79:af:9e:ef:ef:71:37:7f:1e:ee:24:61:b0:34:
                    d8:56:ab:67:0b:e2:fa:b7:9c:8c:11:ae:85:98:6b:
                    f5:47:e8:3b:d7:0e:5f:a8:27:ae:e5:b8:b2:87:c4:
                    4f:7c:27:d1:0e:31:f1:f6:41:23:8a:ae:22:cf:3d:
                    45:93:2d:ad:76:1f:b4:86:99:01:99:08:95:64:f1:
                    ba:7d:68:ef:9e:52:35:5c:2b:de:81:0c:62:1a:32:
                    bb:82:85:47:88:c2:b4:eb:03:d9:d6:53:01:c2:cd:
                    01:32:64:9b:c4:b4:d6:e4:d8:2c:07:77:d4:dd:3e:
                    47:66:98:f5:71:0b:57:53:e1:aa:00:dc:a7:ed:ac:
                    61:c0:78:87:25:2b:bc:34:73:db:d6:10:71:a3:50:
                    52:fa:fb:96:d7:60:aa:e4:5c:35:a9:3c:4b:76:36:
                    c8:ea:6e:3b:e8:5c:31:7e:60:f9:31:01:20:37:e7:
                    11:44:07:68:e2:82:09:ce:74:68:41:a4:f4:05:c1:
                    39:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5B:D6:3E:CA:28:52:B2:84:55:FC:21:56:C0:88:5F:A5:8A:29:16
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/b1vWPsooUrKEVfwhVsCIX6WKKRY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:f6:30:65:7a:1a:a8:6a:aa:61:74:d7:fb:e2:d0:77:5a:7e:
         b9:55:cc:e9:54:f8:71:01:18:6a:c3:18:9b:b4:e9:cd:9d:d7:
         96:16:4b:b4:4c:42:22:d7:7d:9c:41:21:58:15:57:f9:ff:a2:
         08:57:9a:08:97:68:00:72:10:03:73:ef:6b:f0:fc:33:6d:c2:
         95:97:a9:3c:82:f1:d7:28:5d:1b:a6:16:38:3e:ac:0c:8c:1c:
         26:3b:3b:ee:9d:7c:7d:b0:20:e8:90:2b:33:99:7b:37:8a:47:
         fd:8d:ab:1c:14:8c:d6:51:61:bd:ea:3d:d0:73:91:01:1b:11:
         7a:50:df:18:2c:74:e7:57:21:28:0c:3f:ef:f2:88:c4:4b:8a:
         40:b0:3a:6d:57:8e:68:da:35:f9:dd:61:22:d0:f8:2a:45:5e:
         26:39:2f:dd:c8:80:7c:77:88:16:32:f4:0a:fd:92:a7:c0:10:
         93:5f:39:71:59:85:34:74:8a:ae:9f:d4:e1:59:ff:f6:13:d9:
         95:04:3b:b0:1a:3b:ec:45:6c:61:da:e8:e5:23:04:93:2b:7e:
         ab:81:44:54:05:d7:27:ea:fd:32:0a:e4:4f:48:78:17:e7:d8:
         ea:52:c9:ac:30:9e:d5:19:24:bf:59:2f:e8:c5:8a:d7:27:73:
         dd:74:fe:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org