Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Cn6FH15FfubKjh3ywTeSCpcxrcg.roa
File:                     Cn6FH15FfubKjh3ywTeSCpcxrcg.roa (raw, json)
Hash identifier:          asoY9ewcgTvX9Od7JaI6sN36i2RAYVjgY9onHNrXDHw=
Subject key identifier:   0A:7E:85:1F:5E:45:7E:E6:CA:8E:1D:F2:C1:37:92:0A:97:31:AD:C8
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       01881D7382F32C75FC4185A8765CD67CE8E1
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Cn6FH15FfubKjh3ywTeSCpcxrcg.roa
Signing time:             Mon 15 May 2023 03:28:09 +0000
ROA not before:           Mon 15 May 2023 03:28:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198883
IP address blocks:        81.28.252.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 07 Jul 2023 08:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:1d:73:82:f3:2c:75:fc:41:85:a8:76:5c:d6:7c:e8:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: May 15 03:28:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0a7e851f5e457ee6ca8e1df2c137920a9731adc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d1:9e:d6:cc:18:64:24:de:a0:06:47:e8:57:
                    fb:7d:71:91:8b:32:6e:65:6f:87:b0:57:c5:fb:38:
                    70:59:ba:45:a7:a4:4b:d6:0f:61:27:4f:78:57:ad:
                    47:14:77:fb:ad:5f:75:e3:55:8c:39:69:97:c9:82:
                    df:ea:3e:01:76:df:a8:62:57:70:3f:05:5f:8b:04:
                    70:ea:8d:2c:47:bd:02:13:09:8b:aa:db:4f:97:1d:
                    a8:52:a0:b9:22:bd:f0:35:3f:75:16:26:5e:d6:bf:
                    cf:e7:1a:34:71:20:94:1c:30:3b:32:e4:22:10:49:
                    e0:b9:17:70:8a:d4:4c:bc:b7:6f:f5:6d:76:74:ac:
                    45:83:e7:58:27:d9:c8:68:f4:01:45:f3:0b:3d:76:
                    25:23:0a:26:2c:51:05:c8:68:25:de:87:c7:e6:53:
                    06:19:d8:76:ee:1c:9f:73:86:0e:96:ef:0c:72:46:
                    74:92:49:e6:7f:95:f3:91:fa:c7:d8:87:35:1b:94:
                    3f:d4:0b:63:2c:4c:7e:b4:e6:29:7b:1b:b7:ef:da:
                    55:dd:e1:f4:d7:1a:56:ae:21:09:0e:16:2f:6d:08:
                    21:f6:5c:8d:a1:bc:c2:41:b1:6e:c5:9a:55:40:6e:
                    8c:8e:26:11:45:c9:55:4d:06:77:8a:31:61:5d:e1:
                    c2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7E:85:1F:5E:45:7E:E6:CA:8E:1D:F2:C1:37:92:0A:97:31:AD:C8
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Cn6FH15FfubKjh3ywTeSCpcxrcg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.28.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:a6:a1:3b:15:de:8a:31:b3:fe:47:4a:22:de:24:ab:2d:79:
         23:a5:d2:e6:43:51:f6:38:37:fe:d1:a9:55:66:45:0b:a4:f2:
         5b:83:2c:bd:4e:13:4d:36:8e:99:30:e5:db:13:cd:76:4d:4a:
         49:a3:bb:38:24:18:03:8d:9d:ed:22:b8:51:e4:3a:0d:01:48:
         78:37:84:de:2b:b2:9c:e9:df:ae:f6:ee:43:f5:71:ca:82:7b:
         6d:70:b4:1c:73:4b:be:e6:36:8f:60:9b:3e:2a:79:33:03:05:
         f8:02:d1:97:ba:72:5f:a1:f0:b9:f0:02:06:1f:f4:13:ea:c1:
         f1:c1:3b:7a:ab:e7:54:c9:35:d3:85:41:ba:67:89:58:41:4f:
         9f:e8:40:7b:84:60:30:b9:3a:01:98:92:c3:0b:7e:02:04:06:
         ed:76:6b:4a:2c:97:3d:bb:3c:74:fe:26:74:6d:ce:12:23:a2:
         8f:ae:b2:b8:61:0f:b2:26:cd:73:51:84:03:a3:b3:41:cf:52:
         30:d2:23:95:41:5e:d0:4c:dd:9b:c2:2c:a6:4e:67:61:fb:6b:
         5d:aa:3e:7a:1a:0a:54:4c:85:69:9b:14:3c:e8:62:c9:81:d3:
         d6:c5:64:aa:a0:c1:84:b0:a1:ba:2e:31:a6:b3:2a:e9:66:a5:
         29:21:48:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org