Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/b6spQ4uLX8NEhSzOPjq6aBAeIiY.roa
File:                     b6spQ4uLX8NEhSzOPjq6aBAeIiY.roa (raw, json)
Hash identifier:          XsFPcaj6AECGNOkGwEqp/UcPkgJBWzD/OYfvI7lfyxM=
Subject key identifier:   6F:AB:29:43:8B:8B:5F:C3:44:85:2C:CE:3E:3A:BA:68:10:1E:22:26
Certificate issuer:       /CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Certificate serial:       01856F0B747525B69CBDF63B18D4A92107C6
Authority key identifier: 88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/b6spQ4uLX8NEhSzOPjq6aBAeIiY.roa
Signing time:             Sun 01 Jan 2023 20:34:59 +0000
ROA not before:           Sun 01 Jan 2023 20:34:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199837
IP address blocks:        77.83.216.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:0b:74:75:25:b6:9c:bd:f6:3b:18:d4:a9:21:07:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
        Validity
            Not Before: Jan  1 20:34:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6fab29438b8b5fc344852cce3e3aba68101e2226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:64:41:5d:a9:a0:a3:d1:82:2a:7a:8b:5c:63:
                    d2:c8:36:0e:96:54:b9:8e:03:00:7c:e1:40:6f:41:
                    71:f4:da:65:cb:b3:39:ea:62:5d:9a:72:bd:ba:c8:
                    4a:06:03:f0:3a:c5:cb:92:cd:39:32:b8:fa:20:95:
                    23:5e:cc:c0:8d:bc:16:f9:bf:fa:3f:80:4b:94:0f:
                    c9:65:01:25:26:cc:79:a4:6a:1c:9e:c2:a4:ca:a2:
                    12:4c:74:c7:f7:3c:40:e3:eb:d3:ed:c6:a7:94:8e:
                    66:2f:77:16:dc:e1:13:27:75:9d:6b:c5:78:8b:f0:
                    82:47:d0:e0:f1:0b:ea:be:45:3e:6a:b7:e1:54:07:
                    7a:8e:44:54:7f:cc:bf:50:52:05:a7:86:c7:44:32:
                    2e:7e:1b:ba:3f:79:bd:e7:95:8f:87:22:d2:28:9f:
                    dc:7f:d4:b5:16:b9:2e:40:ae:50:65:b5:f5:09:4d:
                    ca:ea:a7:33:c4:19:20:17:a0:04:3c:90:0a:00:ff:
                    41:32:a4:bd:4f:62:39:18:c2:1e:1d:24:73:90:32:
                    5f:c6:f8:dd:b7:3d:56:81:53:5a:41:d0:11:7f:06:
                    26:c0:85:58:81:d4:c6:e2:42:f8:e2:df:0c:aa:6f:
                    28:b6:4b:56:e1:67:62:31:63:3d:c4:d5:a1:a8:26:
                    ee:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AB:29:43:8B:8B:5F:C3:44:85:2C:CE:3E:3A:BA:68:10:1E:22:26
            X509v3 Authority Key Identifier:
                keyid:88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/b6spQ4uLX8NEhSzOPjq6aBAeIiY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:7c:2f:38:ef:7c:8f:70:fa:af:4f:84:1a:cd:1c:7d:eb:71:
         96:4d:eb:2d:64:5f:21:a7:ea:06:e5:76:41:38:10:c7:74:00:
         9b:ec:96:98:5a:87:8e:ae:44:19:65:9f:b2:0c:ef:3f:3d:b4:
         38:6c:a0:33:43:58:ed:9b:9f:35:6c:0b:a8:99:65:83:ee:94:
         15:c6:53:b0:5d:37:fe:d7:30:c5:5d:98:9b:30:6f:ed:01:71:
         b8:c1:27:a8:1b:b7:7c:bd:c8:5d:f9:2e:c5:f1:b4:b0:b4:76:
         3e:a7:da:89:6a:4c:bc:7e:7b:3b:4e:f1:e6:c7:5e:2d:c6:42:
         b9:2a:08:a1:d2:79:62:55:7a:92:53:75:1e:7a:c8:e2:ac:bd:
         3d:7e:8c:f8:de:ba:89:1a:1b:26:e6:3f:d4:08:1d:3f:92:ce:
         db:bc:0f:05:92:0b:33:0b:c9:6c:24:93:52:84:8b:b6:4c:b7:
         e0:5f:c4:81:51:66:3e:c7:bc:bb:f3:06:5f:aa:70:5c:8b:c2:
         a8:01:f9:80:4f:b2:54:7e:2c:21:30:5f:f5:ae:c0:cf:11:71:
         f7:19:0e:36:c1:93:d6:23:a1:b7:3c:bd:94:da:0d:f8:7a:24:
         7e:a6:95:fa:2e:3f:c0:dd:93:94:20:53:83:bb:e0:9c:50:9f:
         5f:e5:dd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:24 2024 by rpki-client on console-ams.rpki-client.org