Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/C6BpZ1wu-YvADjsOywq_QionUFU.roa
File:                     C6BpZ1wu-YvADjsOywq_QionUFU.roa (raw, json)
Hash identifier:          ZcDqV5XyXDKsNAOtQRxOHpz2dM8srXeGHTkbQJkjHsM=
Subject key identifier:   0B:A0:69:67:5C:2E:F9:8B:C0:0E:3B:0E:CB:0A:BF:42:2A:27:50:55
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018DCB6A18DA75AFBCD8B1E5EFD421704B0B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/C6BpZ1wu-YvADjsOywq_QionUFU.roa
Signing time:             Wed 21 Feb 2024 11:25:44 +0000
ROA not before:           Wed 21 Feb 2024 11:25:44 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        77.81.182.0/24 maxlen: 24
                          89.34.106.0/24 maxlen: 24
                          89.35.129.0/24 maxlen: 24
                          89.40.215.0/24 maxlen: 24
                          91.132.49.0/24 maxlen: 24
                          91.132.51.0/24 maxlen: 24
                          93.114.183.0/24 maxlen: 24
                          128.0.41.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 21:17:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:cb:6a:18:da:75:af:bc:d8:b1:e5:ef:d4:21:70:4b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Feb 21 11:25:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0ba069675c2ef98bc00e3b0ecb0abf422a275055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a3:74:7e:94:28:d2:68:b6:24:fe:50:d2:ec:
                    fb:c8:95:77:12:a0:5d:7d:12:c6:6e:23:7e:60:0a:
                    e3:57:90:f1:c7:ff:bf:db:f6:e9:fc:3c:dd:04:a7:
                    42:99:50:cd:e9:96:a7:f5:21:a9:9f:f7:00:ca:51:
                    cc:ad:f7:4f:a1:f3:70:7d:14:f5:df:b8:65:8d:1a:
                    bd:34:51:83:41:bb:5c:4e:3b:64:bb:56:00:43:ec:
                    9a:17:41:6f:85:bb:4c:60:a5:4a:38:66:64:d4:e0:
                    19:24:7f:0a:40:c4:14:72:04:08:d4:6a:40:73:d4:
                    11:34:02:d3:0c:d7:11:c1:6f:7a:ba:62:a0:82:e8:
                    9b:c5:bb:d8:c3:27:20:34:8b:fa:3e:3b:4f:a9:7b:
                    13:f7:d2:04:3d:90:10:77:73:88:a5:2c:a7:65:e2:
                    fa:ef:7c:e2:63:41:c2:71:7a:c1:9f:9e:83:16:5e:
                    59:b6:9f:77:60:d5:8d:04:3c:fa:8a:d3:6b:92:f1:
                    43:d3:c3:2c:7d:57:95:bf:f4:07:8a:5c:31:e2:21:
                    c6:61:b4:16:2f:ee:81:24:15:6e:fb:a4:f6:f0:df:
                    dd:b9:e7:64:f3:1e:94:e2:af:fc:eb:ba:b0:e5:09:
                    4d:b4:17:05:f0:2d:1f:c3:b5:ed:e6:c4:9c:4b:4f:
                    43:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A0:69:67:5C:2E:F9:8B:C0:0E:3B:0E:CB:0A:BF:42:2A:27:50:55
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/C6BpZ1wu-YvADjsOywq_QionUFU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.182.0/24
                  89.34.106.0/24
                  89.35.129.0/24
                  89.40.215.0/24
                  91.132.49.0/24
                  91.132.51.0/24
                  93.114.183.0/24
                  128.0.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:17:26:d0:7c:b7:21:fc:9c:e9:1c:c1:27:b0:d0:46:6c:9f:
         ce:4b:50:4e:56:a9:37:be:eb:1e:b8:0c:36:5d:2d:24:18:12:
         25:23:c7:c1:58:a7:d9:e9:6e:60:ac:45:a7:52:39:63:57:5b:
         7c:c5:5f:01:74:3a:55:67:99:f6:46:2a:c2:dd:4f:7c:52:2f:
         e9:87:db:cc:23:04:28:1a:90:86:d3:6e:9b:d5:f9:2c:34:53:
         7a:51:54:91:b2:3e:34:3b:d3:10:8f:9b:3d:48:05:ae:85:1b:
         eb:54:16:8c:15:43:d7:3e:55:f9:da:72:ed:51:2e:2d:38:5c:
         d1:08:1c:60:53:9f:77:1c:b3:1a:82:79:f6:36:1a:6e:87:87:
         95:8e:2b:26:1d:69:38:da:b6:d2:eb:19:2b:18:4d:97:5d:cd:
         f6:3d:d3:98:bb:a3:62:05:cb:78:6b:c4:fc:4a:67:91:86:81:
         e4:b6:a3:06:67:e4:5c:0c:d4:10:a2:b1:d0:74:92:a7:c2:ea:
         ac:1f:ee:49:60:fc:c6:1a:5b:cf:54:63:8b:56:f2:ab:6f:db:
         4b:5b:83:a3:5a:4e:dd:ea:bd:6b:94:f7:88:cb:9e:1b:de:6b:
         3a:69:71:11:11:a9:f6:b6:75:e9:50:9d:c5:4f:90:96:7b:91:
         99:75:85:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org