Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/D_VBmFwFsDuChmUNiPeY4eoAl1E.roa
File:                     D_VBmFwFsDuChmUNiPeY4eoAl1E.roa (raw, json)
Hash identifier:          Y7L6nnjRybqlqI2rO903HhaLqG/RAGHUQ8dA5fpm5C0=
Subject key identifier:   0F:F5:41:98:5C:05:B0:3B:82:86:65:0D:88:F7:98:E1:EA:00:97:51
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       0188A03797477731CBC71485A086602812E6
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/D_VBmFwFsDuChmUNiPeY4eoAl1E.roa
Signing time:             Fri 09 Jun 2023 12:52:57 +0000
ROA not before:           Fri 09 Jun 2023 12:52:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199467
IP address blocks:        2a05:1081::/32 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:a0:37:97:47:77:31:cb:c7:14:85:a0:86:60:28:12:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jun  9 12:52:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0ff541985c05b03b8286650d88f798e1ea009751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:84:b5:a6:77:57:21:ea:8e:8f:b2:e3:9b:
                    58:0c:e4:f4:be:90:79:cd:db:68:5e:25:49:c5:e3:
                    ad:6f:b0:90:f5:b3:30:21:ad:ec:98:02:8e:01:d0:
                    88:ea:92:af:f6:91:3f:9d:f7:0b:a4:7e:b5:69:82:
                    04:2f:2b:e0:c9:a1:4c:49:01:89:c1:a1:c9:31:32:
                    f5:d6:31:8e:9a:40:b1:78:18:43:a9:16:6f:48:17:
                    08:6f:1e:6a:00:e9:91:1f:cf:65:55:3e:e9:e1:29:
                    da:af:00:a4:7b:1f:ec:00:57:7e:52:80:0e:ad:70:
                    ef:f6:8b:d8:0c:f4:f9:f6:1e:a4:3a:96:c2:ed:91:
                    b2:c6:a9:55:89:19:f9:da:17:2a:4e:5f:de:4e:31:
                    09:41:fe:76:8b:94:7b:e1:be:5e:88:5d:95:20:95:
                    5f:7f:4b:55:b9:ee:c5:66:18:a2:57:bb:92:c8:bb:
                    64:8e:6e:16:06:c0:f2:60:2d:56:9a:f6:b5:80:22:
                    60:d7:c5:11:30:23:0c:13:d4:ad:71:79:09:69:e6:
                    ec:3e:75:86:76:88:f7:7f:25:2c:45:d9:92:f9:e5:
                    81:9b:02:e4:35:87:f8:94:fe:35:c6:b6:4d:23:c9:
                    cb:78:00:7d:e0:c6:70:25:fc:1e:74:b7:af:22:eb:
                    43:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F5:41:98:5C:05:B0:3B:82:86:65:0D:88:F7:98:E1:EA:00:97:51
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/D_VBmFwFsDuChmUNiPeY4eoAl1E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:1081::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:b7:5c:b4:f4:7b:21:f1:fc:8b:be:da:13:01:7f:24:08:10:
         4b:67:f2:b1:7d:8f:fa:d4:fa:17:69:fc:5c:80:e3:9b:5f:8a:
         c8:c2:7b:13:b7:63:a5:2d:ff:dd:b7:5b:00:86:56:e0:fa:ae:
         b9:86:c1:e2:b6:10:a2:eb:95:10:ad:5b:18:a8:aa:44:c7:a2:
         10:43:4b:06:5f:af:2f:e0:71:43:c6:c3:da:16:69:a1:67:b7:
         73:ef:58:5a:de:58:3d:09:0d:63:7d:66:f1:88:1b:19:71:03:
         d3:bc:19:35:e9:f7:e9:c7:d6:dd:17:c3:bd:c7:15:e8:26:6e:
         bc:15:fb:cd:50:db:4a:d6:0f:b8:ff:b0:3c:82:cc:40:c8:00:
         73:60:50:20:87:33:c1:66:78:b0:1f:d2:50:d2:32:24:d1:b9:
         83:d0:65:13:9e:b1:4c:32:c9:f0:53:9a:01:99:07:a8:22:14:
         89:d3:48:01:d8:df:bf:3d:ea:3b:18:8f:e5:85:f3:43:e0:a2:
         4c:36:1b:ed:b1:13:0c:57:d0:82:ab:e4:68:c7:b0:cd:3b:04:
         a6:05:0d:de:0d:3a:0d:65:4f:b5:39:9c:79:01:c1:57:6f:c2:
         15:ea:3f:ae:df:1d:62:e6:e5:62:15:86:1d:fe:1f:99:3f:6a:
         ea:ab:63:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:39 2024 by rpki-client on console-fra.rpki-client.org