Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/If6GD2SYaed1w3lR0SJ1xA5uRwA.roa
File:                     If6GD2SYaed1w3lR0SJ1xA5uRwA.roa (raw, json)
Hash identifier:          G+Y/kAAjtagi2sV/EbLw5ji5rRYXV+4DBm56zmOsJJU=
Subject key identifier:   21:FE:86:0F:64:98:69:E7:75:C3:79:51:D1:22:75:C4:0E:6E:47:00
Certificate issuer:       /CN=5688b11c5f24f2e938c88a51cb49ceb135364389
Certificate serial:       018ABDB51A6220A2DC79E5F45B826898F4EC
Authority key identifier: 56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/If6GD2SYaed1w3lR0SJ1xA5uRwA.roa
Signing time:             Fri 22 Sep 2023 16:24:37 +0000
ROA not before:           Fri 22 Sep 2023 16:24:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29286
IP address blocks:        178.219.67.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:bd:b5:1a:62:20:a2:dc:79:e5:f4:5b:82:68:98:f4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5688b11c5f24f2e938c88a51cb49ceb135364389
        Validity
            Not Before: Sep 22 16:24:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=21fe860f649869e775c37951d12275c40e6e4700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cb:cf:0f:db:e4:93:1f:7d:8a:d1:a5:1b:de:
                    9b:62:7e:eb:cd:19:ec:35:9f:64:0d:8e:db:ce:a5:
                    d0:97:38:af:b5:5b:ec:91:58:18:01:59:c1:4a:12:
                    00:16:09:3e:d8:8a:0a:3b:56:05:f7:b1:70:3d:96:
                    10:90:7a:aa:32:f8:35:6b:5e:6a:6c:99:77:f0:5f:
                    70:e0:64:27:ee:1f:72:b4:48:b3:3a:de:79:a2:2d:
                    48:97:80:33:f4:56:c2:c5:91:46:f3:45:95:8c:12:
                    60:c4:1f:c2:10:77:de:af:d7:8e:13:a2:14:4c:7f:
                    69:dc:1e:44:44:c4:90:f0:b0:c2:cd:e4:d8:75:ff:
                    13:19:54:92:ba:ba:42:5a:7c:87:ff:30:e0:f3:7a:
                    80:d9:05:72:8d:db:15:37:eb:6a:bd:3f:1f:19:27:
                    6c:c5:c0:2e:1e:c6:01:0c:ea:81:80:94:86:96:1f:
                    b3:b1:5d:82:d0:d6:5b:cf:f3:ab:d5:6f:0c:f4:a8:
                    c4:97:64:ee:4d:c1:34:3b:e9:1a:b1:09:2b:46:7d:
                    4a:27:9b:b0:1d:eb:e0:ad:2e:17:42:1c:bf:bd:05:
                    99:e0:8b:4d:2f:45:df:ed:98:5d:6c:87:05:2e:f9:
                    3c:b4:30:aa:ad:5c:52:f4:67:f8:99:a4:01:0f:e9:
                    39:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FE:86:0F:64:98:69:E7:75:C3:79:51:D1:22:75:C4:0E:6E:47:00
            X509v3 Authority Key Identifier:
                keyid:56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/If6GD2SYaed1w3lR0SJ1xA5uRwA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.219.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:3e:4a:32:76:88:48:cc:2b:f7:4e:04:01:2f:fd:a5:dc:76:
         af:39:e4:e1:39:6f:ad:f9:93:88:fd:8b:9f:b8:d3:c4:9c:13:
         cf:2c:73:38:40:21:4d:95:fe:8c:44:45:61:59:63:e2:30:c7:
         4c:62:53:10:09:c1:85:4f:53:e4:7f:ac:17:e7:b3:57:77:f4:
         4e:6b:2d:ac:3a:db:3b:06:8b:af:2c:fd:ae:80:05:04:13:3c:
         24:32:9b:3f:3b:5d:f0:89:7d:86:39:33:23:13:3d:7f:0c:ac:
         e5:b5:f1:03:e4:ca:2f:90:7d:81:98:f7:5b:f9:4a:2d:31:cf:
         00:a3:b0:f5:2b:20:f6:85:6c:c7:3a:c4:62:d6:c7:3d:ba:ed:
         6d:c5:3e:11:50:a4:65:a9:37:6d:9b:c5:4a:64:3b:3b:b2:0d:
         c9:ec:ca:f4:cb:dd:18:cc:06:d1:81:72:de:7b:d0:e9:7c:09:
         0e:1a:1f:85:c5:fc:1f:d0:af:04:41:63:f0:4b:09:7c:a6:e7:
         08:f1:81:e6:76:bd:ac:a3:75:00:99:70:1b:b7:77:63:90:4c:
         c3:a8:77:c6:27:d2:2c:0f:8f:7d:aa:eb:81:78:44:56:ba:05:
         cd:25:c7:fd:1a:04:5e:ea:48:21:99:64:d6:15:99:aa:23:8b:
         ac:d0:a6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:12 2024 by rpki-client on console-fra.rpki-client.org