Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/EMzICLRgzmTeh4i_n_ZMP5G1r7k.roa
File:                     EMzICLRgzmTeh4i_n_ZMP5G1r7k.roa (raw, json)
Hash identifier:          mvnb9enU0B7AWOKI985+lV+tNv6aNiqrGSr0x5W08Vg=
Subject key identifier:   10:CC:C8:08:B4:60:CE:64:DE:87:88:BF:9F:F6:4C:3F:91:B5:AF:B9
Certificate issuer:       /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial:       018D4B220E6FBE3146AA0A080DE256720D37
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/EMzICLRgzmTeh4i_n_ZMP5G1r7k.roa
Signing time:             Sat 27 Jan 2024 13:35:39 +0000
ROA not before:           Sat 27 Jan 2024 13:35:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16125
IP address blocks:        82.206.0.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 10:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:4b:22:0e:6f:be:31:46:aa:0a:08:0d:e2:56:72:0d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
        Validity
            Not Before: Jan 27 13:35:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=10ccc808b460ce64de8788bf9ff64c3f91b5afb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:35:0c:d5:11:18:ff:a7:13:17:24:35:ca:ac:
                    da:8a:cc:0f:f3:05:2a:a5:19:b3:c3:cd:39:49:eb:
                    58:85:02:81:66:1b:8c:d5:98:8d:67:91:77:5b:ea:
                    69:b1:be:9e:8e:d9:c4:75:fc:5d:33:ef:e0:b2:e3:
                    f5:85:92:56:9e:4d:74:e1:b1:56:fe:40:a1:be:32:
                    fa:07:11:c4:0e:f6:41:84:3d:95:70:c5:b7:18:22:
                    1a:81:6c:5b:64:41:25:1a:4e:91:96:c9:02:d6:f8:
                    e6:2b:4c:3f:06:42:aa:a4:bc:43:47:14:98:fd:7d:
                    2c:ff:57:41:43:97:17:f0:2d:ba:9a:5e:bc:8b:2a:
                    8a:12:b6:22:86:72:95:57:5c:a6:6b:05:71:55:53:
                    80:4c:a0:7c:05:51:37:94:f4:1c:77:d0:c7:12:db:
                    37:16:95:50:b4:2d:51:c4:68:31:08:fe:4e:69:c6:
                    ee:9b:d2:fb:33:11:2b:28:d7:e0:a3:ad:30:0a:4a:
                    03:06:5f:2a:d3:b2:0a:af:31:bf:0c:13:39:01:bd:
                    78:22:c7:e9:84:ca:7f:26:28:78:cb:ed:df:49:cb:
                    fd:c2:9b:1c:cd:19:83:18:85:16:8a:e5:48:09:a0:
                    7b:22:cf:a7:11:e7:7b:1f:e7:39:e4:7d:1e:e7:15:
                    f8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CC:C8:08:B4:60:CE:64:DE:87:88:BF:9F:F6:4C:3F:91:B5:AF:B9
            X509v3 Authority Key Identifier:
                keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/EMzICLRgzmTeh4i_n_ZMP5G1r7k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.206.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:12:b0:40:8d:0c:1a:b6:b2:82:78:93:b8:6e:dd:ed:67:f3:
         e2:ce:a8:6e:9b:ea:29:93:fb:13:53:70:96:af:2c:e9:b9:9d:
         0f:b0:86:63:5c:65:84:83:b6:10:44:51:90:69:a1:22:08:92:
         8e:ce:30:15:bc:86:e1:20:e2:13:44:1b:dd:f7:9c:9b:4a:0c:
         6e:c4:22:1b:2f:34:2b:76:46:b1:77:8e:95:7e:19:25:3f:0d:
         e5:48:18:ea:f0:a9:0a:86:93:49:73:80:50:00:54:9f:35:31:
         67:37:00:f6:d5:48:50:ae:18:d4:0d:4b:46:9c:aa:05:aa:6e:
         97:9c:31:9c:be:6d:4e:34:ef:b7:3f:01:35:df:3e:af:ea:97:
         81:f3:55:f9:07:f9:94:df:5b:de:6f:13:f5:50:7b:3d:80:d0:
         9c:63:99:42:63:ab:98:a7:f7:33:62:1a:04:10:e3:99:10:56:
         43:e8:76:bd:74:4b:f2:bf:57:39:4e:4a:c3:4a:a5:58:0d:aa:
         f3:cc:96:1e:af:1c:d5:0e:0a:bf:25:21:69:b2:52:43:be:a8:
         0a:1b:9d:a0:81:31:76:dd:d1:03:72:9a:6b:1b:d9:39:cc:8a:
         b1:76:09:e6:39:f3:cc:cb:68:c9:fa:a8:e3:3e:74:76:99:69:
         b4:bf:62:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:08 2024 by rpki-client on console-ams.rpki-client.org