Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6mK-yDuU8aQo8nJvmMnZKtHApEA.roa
File:                     6mK-yDuU8aQo8nJvmMnZKtHApEA.roa (raw, json)
Hash identifier:          0ffoPxNyhPjISiDQlU7Tc5NnWoI2F/UVO+ESLcxfUb4=
Subject key identifier:   EA:62:BE:C8:3B:94:F1:A4:28:F2:72:6F:98:C9:D9:2A:D1:C0:A4:40
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018D5F6E979171246F7DE3F9CEED553C4BBD
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6mK-yDuU8aQo8nJvmMnZKtHApEA.roa
Signing time:             Wed 31 Jan 2024 12:11:39 +0000
ROA not before:           Wed 31 Jan 2024 12:11:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     398465
IP address blocks:        81.168.119.0/24 maxlen: 24
                          82.153.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 02 Feb 2024 18:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:5f:6e:97:91:71:24:6f:7d:e3:f9:ce:ed:55:3c:4b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Jan 31 12:11:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ea62bec83b94f1a428f2726f98c9d92ad1c0a440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:17:97:3e:02:23:6b:f9:08:30:8c:56:2d:e2:
                    58:91:a1:e5:e1:4b:58:16:d7:2e:c3:cc:1f:51:4f:
                    6b:5a:ed:90:c3:63:bf:7f:28:fb:df:c1:c6:e2:8c:
                    82:85:45:bf:be:10:60:ae:3c:41:e5:70:66:5a:37:
                    1b:a1:76:6a:e3:fb:f0:8c:bb:a5:5b:cd:d5:d2:f4:
                    ad:a1:6d:59:4c:f6:ae:0c:c2:b4:ad:39:d1:61:3b:
                    b9:1f:0f:b3:66:62:13:b4:e9:f8:8b:ac:e4:be:b4:
                    84:ee:ab:db:50:74:3c:80:05:63:c4:f0:8d:e3:0d:
                    a7:e5:b7:e1:59:de:02:0d:66:f5:c0:e5:f7:d5:91:
                    c2:b6:3c:d1:18:8c:4c:5d:89:97:e3:78:0d:d2:86:
                    c9:86:06:a0:f4:05:14:13:66:8c:49:27:14:73:6d:
                    6f:e9:b3:aa:66:d1:63:9d:51:ae:73:1c:6f:0c:a7:
                    a6:7a:2e:3f:ef:cc:40:ed:86:9d:37:5c:6c:cb:16:
                    57:76:69:fe:00:c2:cf:35:23:3c:cf:0a:28:a9:92:
                    e6:85:dc:46:59:ca:5e:ed:fe:86:fd:09:ad:86:ca:
                    7a:35:85:1b:82:4a:4d:72:d1:fc:3b:89:52:75:98:
                    26:1e:d6:0d:99:70:f9:1f:9e:1b:79:eb:bd:ad:e4:
                    da:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:62:BE:C8:3B:94:F1:A4:28:F2:72:6F:98:C9:D9:2A:D1:C0:A4:40
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6mK-yDuU8aQo8nJvmMnZKtHApEA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.168.119.0/24
                  82.153.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:b0:44:46:47:fb:e0:c7:c6:b4:bf:09:ce:16:6a:27:d0:39:
         c2:1c:fc:7f:2c:79:ba:6d:9c:62:36:33:fd:2e:6f:84:e5:8c:
         25:5d:d9:66:6e:69:c9:1b:03:c5:7f:35:8e:4a:77:4f:61:29:
         a1:96:da:8e:2a:4f:af:b7:6c:0d:00:fb:b3:77:2a:53:76:1f:
         21:f3:77:e2:c7:ea:9d:fa:b3:c5:8d:62:d1:5f:11:34:02:2b:
         58:cc:da:69:82:e6:a6:41:76:5c:90:8a:4f:52:c4:28:c0:30:
         59:d2:7d:65:ee:da:89:d7:09:8f:d1:4d:9d:e7:e3:dc:68:13:
         05:b5:23:d8:bd:4a:eb:41:e6:cc:2f:fa:c3:56:40:1b:12:29:
         0d:00:cc:cb:8e:e2:6d:a1:18:8e:6d:e5:ac:8f:9b:db:b7:5c:
         73:f2:b6:c0:08:62:70:40:01:d4:a7:d7:db:81:f8:80:c8:58:
         f1:ce:dd:68:ae:00:8e:69:8e:f4:64:d3:3c:a2:cd:90:6e:3e:
         9b:fc:1e:fb:89:90:de:b3:93:b0:13:b7:12:b1:3f:cb:c3:04:
         d2:14:64:37:dd:94:1d:8c:97:f5:f5:75:4e:54:34:b6:e8:08:
         02:2d:33:cb:ae:f3:15:cc:58:09:ff:97:e3:f7:88:99:fe:f6:
         e3:e2:b2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org