Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/fv-yMcu7sqhd7oLL7nwbWwlxoeU.roa
File:                     fv-yMcu7sqhd7oLL7nwbWwlxoeU.roa (raw, json)
Hash identifier:          Fq0M7FocAIw5KFXBrPoK4AIhvMu8IPzQqire1f7bXcQ=
Subject key identifier:   7E:FF:B2:31:CB:BB:B2:A8:5D:EE:82:CB:EE:7C:1B:5B:09:71:A1:E5
Certificate issuer:       /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial:       018EA900512FB64A951688F259BA48FB80AB
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/fv-yMcu7sqhd7oLL7nwbWwlxoeU.roa
Signing time:             Thu 04 Apr 2024 12:05:54 +0000
ROA not before:           Thu 04 Apr 2024 12:05:54 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        82.206.64.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Fri 05 Apr 2024 10:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:a9:00:51:2f:b6:4a:95:16:88:f2:59:ba:48:fb:80:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
        Validity
            Not Before: Apr  4 12:05:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7effb231cbbbb2a85dee82cbee7c1b5b0971a1e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:10:f9:b4:ca:53:07:25:d3:d1:e2:16:e4:cf:
                    bf:cf:46:05:03:f2:43:73:fe:a6:16:8b:be:ac:55:
                    1b:51:28:65:b5:90:39:ee:1f:87:d2:9c:76:38:3f:
                    47:06:c1:b9:58:59:69:76:2a:ef:29:25:20:7f:6a:
                    83:ba:6d:56:72:bc:31:16:c9:2d:6e:48:8b:9b:08:
                    a3:0b:b2:75:8b:90:e3:63:7d:c1:18:f6:5d:a0:09:
                    6d:50:f8:a1:a7:cf:4e:31:a3:d2:28:8c:a1:7d:84:
                    58:2e:bf:8f:e6:68:84:11:a1:54:f5:9b:51:d4:fb:
                    51:67:83:b2:a9:e5:9a:58:db:e3:26:5f:3e:21:7c:
                    b1:ea:b2:e8:d0:fa:c2:ac:18:e6:9c:5c:4a:19:c0:
                    8e:78:17:f6:9e:19:f6:20:29:c2:ed:28:e0:82:01:
                    ce:0d:a5:d3:6e:53:8a:8e:3c:32:14:54:6b:43:2c:
                    7b:29:27:32:a3:8a:93:e5:c0:b1:83:81:17:2f:10:
                    c7:9b:3d:7a:85:a8:e4:85:7d:b7:6f:36:81:01:c8:
                    ab:6e:3e:95:ff:1f:56:44:d1:bf:1d:d8:17:ea:3f:
                    df:84:0c:11:68:81:69:5d:ec:26:69:bc:b6:bb:94:
                    54:06:e1:6c:3d:0e:cb:98:75:11:8f:6c:ac:3d:7a:
                    69:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FF:B2:31:CB:BB:B2:A8:5D:EE:82:CB:EE:7C:1B:5B:09:71:A1:E5
            X509v3 Authority Key Identifier:
                keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/fv-yMcu7sqhd7oLL7nwbWwlxoeU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.206.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:d7:37:ab:15:39:20:84:72:a1:2e:d8:bd:9a:79:29:1e:df:
         13:5d:97:7a:16:33:d0:25:69:77:ab:42:50:28:ea:86:2c:e5:
         43:25:0b:82:30:63:be:ec:ca:2b:39:00:4f:99:93:e5:f3:2e:
         67:d3:76:72:9d:ee:01:da:38:48:8b:c1:4a:90:5e:17:bf:e0:
         e0:4e:46:63:8f:22:9a:83:bd:d8:ba:a3:eb:81:2d:71:28:1e:
         b6:40:2d:2b:f1:bc:2e:e9:f6:3e:9f:67:de:37:26:e5:00:1b:
         13:e4:89:36:e8:c9:11:b8:c5:08:ef:2d:66:1f:4c:b4:fa:a6:
         2e:3a:d7:dd:bc:01:48:9f:04:e7:af:34:c6:7f:8b:f2:90:df:
         86:44:db:18:b5:76:7d:25:21:f9:64:13:bd:55:67:33:c7:88:
         16:41:94:70:28:ba:1f:f5:07:b5:b7:0f:7b:0b:54:bb:e6:29:
         11:f8:e7:cc:d8:23:45:21:9c:8d:ba:d9:f1:f7:29:c5:21:61:
         b5:17:13:af:4d:08:01:9b:46:a7:36:b4:95:5a:16:5b:c6:f9:
         89:9b:06:b7:26:76:68:58:2c:e7:97:17:bf:d4:3c:56:26:c7:
         c1:9f:32:51:6a:02:3d:df:92:51:c7:cd:fc:f0:ca:38:c0:c6:
         02:45:b2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:08 2024 by rpki-client on console-ams.rpki-client.org