Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/qPCEP8E3pJjufVnq4e3nozPvTgo.roa
File:                     qPCEP8E3pJjufVnq4e3nozPvTgo.roa (raw, json)
Hash identifier:          s6OQ8Nj/nBEnUuxQ2Rtnvq6FzytGc912cse6edVv+OY=
Subject key identifier:   A8:F0:84:3F:C1:37:A4:98:EE:7D:59:EA:E1:ED:E7:A3:33:EF:4E:0A
Certificate issuer:       /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial:       0185719568AC48958B7A48426AF54B6BCCA5
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/qPCEP8E3pJjufVnq4e3nozPvTgo.roa
Signing time:             Mon 02 Jan 2023 08:24:55 +0000
ROA not before:           Mon 02 Jan 2023 08:24:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6905
IP address blocks:        145.30.124.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:95:68:ac:48:95:8b:7a:48:42:6a:f5:4b:6b:cc:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
        Validity
            Not Before: Jan  2 08:24:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a8f0843fc137a498ee7d59eae1ede7a333ef4e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:93:53:f8:07:80:ea:ee:51:17:83:2d:4e:0b:
                    3f:0b:4c:71:f2:46:88:16:ad:a8:dd:0e:aa:06:0d:
                    99:6e:33:48:bd:3e:d7:55:81:59:eb:2d:a9:08:99:
                    88:f5:4c:3c:ff:e8:65:64:2e:3a:87:24:07:9b:4f:
                    6e:ab:be:26:86:39:7f:da:26:1f:61:ac:3a:ec:60:
                    94:41:49:f0:3a:5c:6a:2c:db:38:39:19:77:ea:25:
                    27:08:46:20:b7:d6:3b:e1:9d:71:48:4b:6e:39:91:
                    52:c4:f8:00:40:d9:72:66:cc:17:9c:6b:2c:f4:ec:
                    7b:b4:ef:a7:14:e3:e0:19:04:c9:66:a7:ad:75:5f:
                    7f:59:54:6f:cc:37:69:8b:15:7d:7f:33:d9:88:02:
                    71:29:1f:84:5a:26:8e:1b:59:5f:09:e0:6a:2d:56:
                    fc:bb:12:89:cc:70:53:b3:ab:66:8d:2e:27:4f:da:
                    a9:d3:ca:8d:7a:15:bf:a7:cc:6a:2c:1c:25:20:b7:
                    43:ef:a4:ae:10:07:43:7e:f6:6b:1b:49:ef:28:41:
                    17:3a:98:5b:7e:fe:92:ce:8b:95:53:3f:6c:f2:56:
                    19:49:04:c6:4b:72:20:09:ed:eb:7d:fc:92:27:da:
                    0e:d5:8a:4c:98:7d:b6:4b:6f:f3:32:92:48:96:19:
                    54:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F0:84:3F:C1:37:A4:98:EE:7D:59:EA:E1:ED:E7:A3:33:EF:4E:0A
            X509v3 Authority Key Identifier:
                keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/qPCEP8E3pJjufVnq4e3nozPvTgo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.30.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:7a:24:de:9c:68:fa:ac:af:e2:09:09:87:9b:94:db:02:54:
         ef:ad:cb:34:f6:5e:35:15:a8:eb:94:32:1e:bd:74:b5:04:0d:
         f2:7f:33:6d:59:23:81:f6:9c:56:f4:9f:58:23:84:e1:54:ff:
         d3:5a:a0:b3:53:1a:09:58:4f:df:ac:ac:73:ce:8d:0f:aa:87:
         c7:1b:94:7f:5a:e8:13:3b:20:dc:e4:43:7f:7d:ec:45:ed:97:
         ba:9c:c2:6a:87:5b:d0:80:53:90:80:65:82:cd:ae:fa:20:db:
         38:a0:01:4c:ba:9e:f3:6d:0f:31:69:65:20:8a:1c:47:70:f4:
         17:c3:31:50:0f:5b:f0:a9:9f:35:18:78:79:0a:40:0b:82:ef:
         5d:9a:ec:54:91:be:2b:b8:05:b0:cb:eb:82:eb:0b:d8:91:6e:
         2c:43:14:2e:51:46:58:c6:4b:c9:df:f3:1d:76:f5:f7:a0:ab:
         01:f3:ca:d1:38:33:56:6f:03:89:40:34:e6:bc:4b:18:86:7a:
         10:a9:e1:4f:38:f1:e6:56:4e:c9:c7:16:81:b4:a7:a1:27:80:
         61:38:73:84:52:9e:d2:d0:14:ca:2b:e7:f0:4a:d7:ad:f0:9e:
         07:e9:b2:38:fb:4b:db:c0:59:45:4a:fd:ee:4e:e9:26:5a:d8:
         11:a3:d9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:09 2024 by rpki-client on console-fra.rpki-client.org