Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/gVtqPQ2Gf-zJw2dllHdUge9e5EA.roa
File:                     gVtqPQ2Gf-zJw2dllHdUge9e5EA.roa (raw, json)
Hash identifier:          LEd0z+3mS/t1T6akkqVYhiBeBazYoXf9mO2zA61e34Y=
Subject key identifier:   81:5B:6A:3D:0D:86:7F:EC:C9:C3:67:65:94:77:54:81:EF:5E:E4:40
Certificate issuer:       /CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Certificate serial:       01879EECA547D2556E57D9D09912FEFA4851
Authority key identifier: 6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/gVtqPQ2Gf-zJw2dllHdUge9e5EA.roa
Signing time:             Thu 20 Apr 2023 13:48:41 +0000
ROA not before:           Thu 20 Apr 2023 13:48:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61395
IP address blocks:        5.83.56.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:9e:ec:a5:47:d2:55:6e:57:d9:d0:99:12:fe:fa:48:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
        Validity
            Not Before: Apr 20 13:48:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=815b6a3d0d867fecc9c3676594775481ef5ee440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b2:5c:44:06:2b:77:ba:89:8c:ff:16:98:b8:
                    7b:61:9e:fd:81:e9:32:a1:97:51:cf:be:40:42:dd:
                    af:20:0f:a0:1c:03:95:c1:2c:92:ac:4c:6a:37:97:
                    6b:6a:02:ed:a8:f8:9b:14:75:d9:65:6d:49:ff:49:
                    d9:ad:03:e5:1d:57:c4:4f:dd:23:e2:4a:bc:71:91:
                    00:f3:9b:49:9e:c7:e3:26:9d:43:00:27:6f:4e:48:
                    11:22:90:d0:8b:2f:f5:24:5f:67:02:e6:97:45:ae:
                    f2:60:22:9a:dc:85:79:1c:12:47:43:24:09:d0:ce:
                    a2:0f:df:f4:4b:51:a6:07:ad:36:cc:09:e1:35:5d:
                    42:84:4a:66:32:4d:b2:85:bf:a8:2f:65:48:fb:96:
                    df:ee:b9:21:31:71:21:17:5b:3b:9b:44:9a:70:77:
                    f2:22:1e:c0:54:68:fb:01:e3:1b:dd:5f:1a:b5:3f:
                    f2:b8:b6:fa:f0:29:4a:61:9b:07:a7:ae:58:32:28:
                    ac:4b:da:c8:31:ca:85:6c:1d:22:ba:18:35:47:59:
                    42:b6:30:bf:00:6b:47:51:d3:8d:45:33:20:b5:6e:
                    ef:36:1c:d1:57:4e:62:0e:82:f8:1b:2a:47:d0:ef:
                    fd:63:a9:3a:8d:de:45:7a:44:78:89:4f:ca:a0:95:
                    31:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5B:6A:3D:0D:86:7F:EC:C9:C3:67:65:94:77:54:81:EF:5E:E4:40
            X509v3 Authority Key Identifier:
                keyid:6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/gVtqPQ2Gf-zJw2dllHdUge9e5EA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:dc:d4:33:15:0c:22:84:af:f9:7e:26:95:f9:17:d0:f1:c2:
         23:9d:b8:d3:b8:29:13:79:6e:e3:f9:38:1b:05:49:a3:e7:91:
         b9:72:2a:1c:5b:21:95:e4:ab:45:7d:ed:5e:da:92:3a:3a:0a:
         6e:39:00:cd:d7:47:ba:67:02:e1:82:f0:3f:c6:f3:1e:39:ea:
         71:3b:6f:c0:71:ae:a0:30:4c:56:d7:e4:01:32:6a:28:23:91:
         34:b8:a4:83:57:2a:3c:9b:a9:fa:ec:94:8b:b7:c8:06:80:17:
         d0:2c:a9:bd:9e:99:26:88:7c:07:1c:6e:3c:bf:a1:9b:c0:18:
         6f:44:54:e9:d2:3f:61:6c:50:67:00:d2:8d:8a:23:07:e2:9f:
         5a:b7:84:bb:79:0b:d4:d6:b9:6c:bb:f1:22:26:68:e5:be:d1:
         37:04:df:ae:2f:8b:9f:63:5b:5e:ca:df:c4:46:62:e7:29:12:
         6a:29:23:0e:75:b2:9e:66:70:56:30:31:18:b4:3f:99:5e:f1:
         ad:e0:93:97:21:a0:de:1f:59:48:06:c5:80:af:0c:70:be:2a:
         1a:e3:fb:9a:cb:31:5b:d9:bd:a2:72:8a:32:41:cc:21:2a:86:
         49:d4:cf:d7:94:4e:56:88:1e:8e:4e:49:27:73:7d:23:01:22:
         20:82:e0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:50 2024 by rpki-client on console-fra.rpki-client.org