Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/gSjmcDLYK2CRkY2EFyVSF9yRkmM.roa
File:                     gSjmcDLYK2CRkY2EFyVSF9yRkmM.roa (raw, json)
Hash identifier:          9bte7YZf0nPPX3bbRobPDrMZBg2XCB852fynH+nghUI=
Subject key identifier:   81:28:E6:70:32:D8:2B:60:91:91:8D:84:17:25:52:17:DC:91:92:63
Certificate issuer:       /CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
Certificate serial:       0189788E1E0DF73816818EA5831C8538B61D
Authority key identifier: 6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/gSjmcDLYK2CRkY2EFyVSF9yRkmM.roa
Signing time:             Fri 21 Jul 2023 13:05:26 +0000
ROA not before:           Fri 21 Jul 2023 13:05:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     30720
IP address blocks:        80.85.175.0/24 maxlen: 24
                          80.85.160.0/24 maxlen: 24
                          2a01:6a40:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:78:8e:1e:0d:f7:38:16:81:8e:a5:83:1c:85:38:b6:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
        Validity
            Not Before: Jul 21 13:05:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8128e67032d82b6091918d8417255217dc919263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f3:4a:5a:e6:a7:2b:b2:f8:7a:13:31:db:cf:
                    ac:b5:7f:9d:ab:c9:e5:d5:f9:69:14:17:16:a8:77:
                    9e:01:7d:fb:14:93:17:92:bd:a4:d3:e0:27:ed:28:
                    23:7a:94:ee:b2:7f:13:5b:be:43:00:be:10:9a:a5:
                    c7:49:05:04:62:ff:fc:44:0d:77:20:ad:cb:7a:64:
                    62:56:bd:99:73:21:1c:b1:22:34:d1:54:3c:4e:16:
                    0a:ad:d4:9c:5c:89:44:89:2d:71:be:01:5e:f3:2b:
                    4c:c9:f3:d7:5b:ec:e4:b2:74:e7:3f:d3:20:f3:6f:
                    2d:36:01:7c:d0:d5:81:2a:b1:3f:f8:57:52:7a:71:
                    6d:18:b9:f8:02:a9:f9:da:6d:12:42:4a:a4:a3:82:
                    98:a8:55:89:01:eb:78:b1:98:b8:56:1f:59:a4:ca:
                    3e:eb:09:c2:9f:71:d7:fb:57:33:fb:af:d4:72:ea:
                    20:2a:ed:0d:53:3c:ce:89:97:2b:c8:45:5e:02:47:
                    10:c4:52:3e:8f:58:f3:da:b5:4b:e2:45:1b:f1:43:
                    21:c6:3f:7f:a3:00:2c:d3:12:7e:ad:af:48:8a:26:
                    7d:ce:ac:c9:1d:e6:56:8d:60:a1:cd:10:d4:1f:c9:
                    6a:35:ef:6d:8b:48:63:4a:d1:be:3f:bc:e4:59:ca:
                    e2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:28:E6:70:32:D8:2B:60:91:91:8D:84:17:25:52:17:DC:91:92:63
            X509v3 Authority Key Identifier:
                keyid:6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/gSjmcDLYK2CRkY2EFyVSF9yRkmM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.85.160.0/24
                  80.85.175.0/24
                IPv6:
                  2a01:6a40:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:39:01:16:e7:ec:4b:eb:2e:7e:14:0f:d1:f1:bc:05:fa:24:
         f0:ca:88:99:c2:fa:d1:a4:ef:77:6b:ad:f9:1b:5d:9b:d3:cf:
         aa:91:06:46:9b:05:90:c0:c7:64:af:29:a9:d5:bd:65:b7:5b:
         df:7c:c3:a6:8e:dc:45:af:fc:84:1e:b0:57:d9:c8:db:c5:57:
         98:c3:a8:30:2b:31:2a:3c:f7:39:10:3c:ab:74:f4:f5:b8:12:
         55:f5:c9:4c:9f:f8:4b:00:a3:1f:6b:99:19:45:03:b1:c0:d7:
         87:f2:5e:f1:c9:fe:5e:9b:bb:85:f5:7a:00:5b:23:a5:04:09:
         46:9b:be:59:a6:12:08:37:ea:ca:f7:e3:da:7b:8b:12:4d:23:
         d8:fa:38:39:c5:7c:e5:59:b5:1a:7e:78:7b:eb:4c:31:09:23:
         d2:22:ca:fc:93:9e:a3:73:4c:82:88:84:5a:31:71:ab:fa:71:
         f4:e1:b3:90:5f:05:d2:56:49:ee:23:d7:ef:92:40:4a:63:03:
         ce:0d:13:cf:67:0d:48:64:54:f4:79:bd:1a:6d:49:3f:8b:cb:
         d4:d0:35:3c:c7:8b:b8:1d:73:d1:f0:71:f8:f7:0a:e6:4f:61:
         c5:4f:b6:5c:71:70:c3:3b:06:0c:a5:4c:77:23:8b:e4:08:16:
         68:ae:fb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:21 2024 by rpki-client on console-ams.rpki-client.org