Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/AVFnka60aaiilDEUwuYyImhq33Q.roa
File:                     AVFnka60aaiilDEUwuYyImhq33Q.roa (raw, json)
Hash identifier:          ybftehcSqCFeu1NMPu2k6yV/hUzxn+L4bspdni+O1ko=
Subject key identifier:   01:51:67:91:AE:B4:69:A8:A2:94:31:14:C2:E6:32:22:68:6A:DF:74
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       0185A59C57813A0D5C36EDD9471BD676FE98
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/AVFnka60aaiilDEUwuYyImhq33Q.roa
Signing time:             Thu 12 Jan 2023 10:52:44 +0000
ROA not before:           Thu 12 Jan 2023 10:52:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206119
IP address blocks:        78.143.224.0/21 maxlen: 24
                          82.163.96.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Mon 30 Jan 2023 13:41:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a5:9c:57:81:3a:0d:5c:36:ed:d9:47:1b:d6:76:fe:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: Jan 12 10:52:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=01516791aeb469a8a2943114c2e63222686adf74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:63:a0:88:7c:1d:50:0b:08:ed:d8:8e:57:ac:
                    fd:60:98:1b:45:3c:2d:4e:86:cf:5b:f0:9e:6c:be:
                    6f:19:b6:87:1f:6c:d7:ef:d7:66:49:6d:16:ad:38:
                    81:80:3f:c3:9c:85:36:68:51:c9:ca:e0:ce:f6:1b:
                    d1:30:e2:9d:f7:cf:eb:9b:17:8e:25:29:35:36:02:
                    03:90:10:86:15:3d:1b:b7:43:3e:c3:0e:c3:47:09:
                    08:1e:38:dd:c3:17:71:48:24:4a:e6:52:ac:5c:4b:
                    ff:e3:38:66:eb:0e:0b:be:9b:27:5a:05:b3:d8:2d:
                    64:14:52:94:72:8b:ce:8b:d8:bd:56:a6:fc:c3:3b:
                    78:ae:db:cb:0b:e5:17:a0:0b:dd:a8:ea:e0:08:4e:
                    f4:67:ea:ac:bf:fa:a3:fc:bc:b5:14:dd:d9:9b:96:
                    35:6f:80:81:5a:5f:24:6b:89:14:d6:0f:ae:1b:ad:
                    a5:44:32:8b:c8:3a:a8:0e:90:24:45:76:60:e9:d6:
                    aa:8a:70:71:1f:d8:99:dc:50:d7:f9:46:27:4f:95:
                    fc:0c:90:d7:de:71:7e:49:16:46:67:9a:74:65:7c:
                    83:9f:5d:fc:1b:fb:df:3e:0d:78:9f:00:4b:f0:e6:
                    53:e9:1e:9c:ab:13:c6:01:27:04:2e:e4:17:74:ae:
                    46:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:51:67:91:AE:B4:69:A8:A2:94:31:14:C2:E6:32:22:68:6A:DF:74
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/AVFnka60aaiilDEUwuYyImhq33Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.143.224.0/21
                  82.163.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:90:42:b0:d4:70:7b:12:fa:3e:49:da:f6:bd:c8:83:45:3d:
         3c:6a:f8:a6:a8:b2:0c:cf:80:16:76:9b:b5:5b:c9:04:e3:3d:
         f7:91:43:3d:21:b1:e9:4e:55:be:bb:67:89:9a:94:c3:2a:1e:
         38:41:c9:a5:e7:5d:b7:08:b6:6c:c4:65:a7:9f:20:57:c2:60:
         9b:d2:b3:22:7b:1b:55:3e:cd:e0:83:6f:9a:f1:c1:2f:71:48:
         a8:6a:67:fb:06:bf:48:a8:fc:e1:48:52:c3:cb:50:86:00:60:
         94:07:16:35:83:fc:a1:b5:49:a6:3f:f1:e0:a7:e8:01:ce:9e:
         36:5c:3b:77:b5:f4:38:eb:cf:3e:11:d3:50:91:4d:e1:70:70:
         38:2f:fe:a2:0e:0d:44:f8:5b:31:21:93:ca:ae:ed:0b:9d:a3:
         70:da:e1:4d:a4:1f:02:6c:be:20:4d:52:dd:fd:0a:90:ae:a4:
         aa:70:09:8b:58:9b:b9:c3:4d:42:3a:1a:27:e5:38:89:3e:f8:
         86:82:9a:1d:7f:98:d5:23:a1:95:52:18:dc:b2:18:ea:2c:59:
         ab:6f:31:38:7e:55:34:20:87:d0:c1:02:ec:dc:ed:b6:63:68:
         93:84:7d:f3:e6:57:1c:8b:d6:d6:9f:e4:b1:fe:f1:c5:20:a0:
         3a:3f:72:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org