Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/6RK-WTw4Y4l-Y8dks-aUzgOb3Q0.roa
File:                     6RK-WTw4Y4l-Y8dks-aUzgOb3Q0.roa (raw, json)
Hash identifier:          ftXLlyDFiSngig158dicjUfTc9Ey52eXvmegU7ipsnc=
Subject key identifier:   E9:12:BE:59:3C:38:63:89:7E:63:C7:64:B3:E6:94:CE:03:9B:DD:0D
Certificate issuer:       /CN=ff1c218811d9294ad631253a445ed1d395a9639f
Certificate serial:       018573BA91A20BCEE427456CB38248E67484
Authority key identifier: FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/6RK-WTw4Y4l-Y8dks-aUzgOb3Q0.roa
Signing time:             Mon 02 Jan 2023 18:24:44 +0000
ROA not before:           Mon 02 Jan 2023 18:24:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207435
IP address blocks:        82.115.212.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 27 Nov 2023 10:17:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:ba:91:a2:0b:ce:e4:27:45:6c:b3:82:48:e6:74:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff1c218811d9294ad631253a445ed1d395a9639f
        Validity
            Not Before: Jan  2 18:24:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e912be593c3863897e63c764b3e694ce039bdd0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c2:de:2a:f8:0d:fd:97:0e:f4:e5:58:9b:e7:
                    96:68:f7:48:52:2d:87:46:71:fd:33:6b:65:d5:be:
                    d4:3f:7a:e3:ec:fb:3c:7e:0f:09:7c:64:aa:1d:51:
                    3d:43:09:21:c0:79:55:4d:7c:7f:6c:1f:19:42:43:
                    28:34:7f:d5:8f:1e:c3:69:69:2f:75:71:0d:86:ae:
                    3b:39:8c:1a:98:47:3f:88:32:14:3f:5a:c4:53:9a:
                    23:ca:c9:57:25:c8:05:d7:c8:88:12:59:3a:57:c0:
                    1e:b6:35:8d:bf:c3:bd:10:ee:d2:e1:b1:80:b5:22:
                    98:c9:1d:36:47:e3:0c:a8:c0:13:e9:1f:83:34:36:
                    1d:d0:58:74:37:42:b8:c9:ab:90:a6:55:38:fd:75:
                    74:b1:be:d7:aa:d1:53:5d:7d:61:a7:b2:88:60:ad:
                    11:ef:31:81:e5:b0:7c:de:9a:b7:8a:63:35:36:60:
                    df:c4:f0:50:98:71:c8:7c:f6:73:22:6d:53:f4:8b:
                    20:2f:42:a3:00:f1:2c:a8:39:86:65:ae:59:d3:c5:
                    6c:e5:0f:87:c8:bc:58:1f:b2:e5:7d:85:15:eb:15:
                    b1:af:0e:f0:49:03:3b:00:12:e9:33:cd:e9:1b:f8:
                    1b:3c:82:2c:84:73:c1:53:ea:85:4f:62:7f:9d:77:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:12:BE:59:3C:38:63:89:7E:63:C7:64:B3:E6:94:CE:03:9B:DD:0D
            X509v3 Authority Key Identifier:
                keyid:FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/6RK-WTw4Y4l-Y8dks-aUzgOb3Q0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.115.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:e6:23:2d:4e:64:73:6d:c8:54:19:7d:12:35:12:53:08:e0:
         6d:31:b1:cf:78:92:ba:25:d3:8d:74:49:af:6e:ed:c2:88:5b:
         60:76:86:5b:f0:eb:74:d7:8d:cf:0d:11:e8:f6:e6:38:ad:9a:
         16:a4:c6:36:d8:90:f5:b3:ce:59:5f:86:cc:7a:e8:9b:45:95:
         c6:c5:58:4f:48:58:ea:2c:09:a1:bf:b6:b2:b8:9f:ce:56:26:
         b2:d4:24:7e:08:8e:a6:5e:16:aa:ab:14:a9:e4:5a:3d:e4:7f:
         8f:1a:ef:38:3f:fc:b6:73:76:e1:59:d7:c4:26:00:e2:1f:b1:
         9c:fa:73:6a:13:6b:ad:e0:e8:0f:97:f4:c7:76:97:62:79:ac:
         7d:93:47:b0:3f:02:6f:fd:6e:38:83:e1:99:7e:62:2b:60:b7:
         ec:85:2b:e5:62:d4:86:bc:aa:79:a2:0f:6f:9a:38:96:86:44:
         33:08:84:95:be:92:98:4d:05:34:08:c6:25:98:a7:21:58:dc:
         67:2a:50:ef:f7:49:36:64:92:49:fb:40:df:8c:d6:63:79:80:
         a1:3f:ed:d1:82:3a:3b:46:ea:e6:3a:81:e1:9c:a3:93:16:8d:
         e7:b8:4d:9f:07:50:bd:a9:0d:de:46:f8:e7:31:ab:0e:80:70:
         27:9d:7f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:36 2024 by rpki-client on console-fra.rpki-client.org