Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/1syllwn_ygewfnHmXrA53scwTaI.roa
File:                     1syllwn_ygewfnHmXrA53scwTaI.roa (raw, json)
Hash identifier:          dhkVI0NYjMiVCnk1OfIT9rsP8Od3/oKg+1AyVwSF3Qo=
Subject key identifier:   D6:CC:A5:97:09:FF:CA:07:B0:7E:71:E6:5E:B0:39:DE:C7:30:4D:A2
Certificate issuer:       /CN=aafc3d2c929710306e847c607d38114aebb3cc08
Certificate serial:       018572CCD1A9A6B3DBEEA3E62CBB59AB57C2
Authority key identifier: AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/1syllwn_ygewfnHmXrA53scwTaI.roa
Signing time:             Mon 02 Jan 2023 14:05:03 +0000
ROA not before:           Mon 02 Jan 2023 14:05:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8660
IP address blocks:        212.48.0.0/19 maxlen: 24
                          213.209.0.0/18 maxlen: 24
                          80.93.64.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:cc:d1:a9:a6:b3:db:ee:a3:e6:2c:bb:59:ab:57:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aafc3d2c929710306e847c607d38114aebb3cc08
        Validity
            Not Before: Jan  2 14:05:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d6cca59709ffca07b07e71e65eb039dec7304da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f1:0b:31:ee:ff:37:48:9f:3c:41:8f:ea:6d:
                    e5:e5:c7:81:37:23:68:4f:75:b4:0c:45:51:29:16:
                    12:35:69:bc:59:dd:c6:e4:66:2a:a2:b5:02:f6:75:
                    2e:27:6f:f4:02:09:d4:e0:9f:06:12:77:80:ef:89:
                    9f:9a:e7:ad:b5:b5:b8:e9:28:13:7f:57:68:d6:7a:
                    0c:1b:30:90:f8:de:fe:00:cb:b7:cc:0c:0e:d5:89:
                    e3:13:05:51:d3:01:b5:4b:53:3c:2e:09:4c:8e:a0:
                    f0:d9:9b:5b:77:ee:fc:3d:ab:49:dd:f1:bc:e7:8b:
                    88:30:ed:5c:b4:32:4e:9f:ce:99:91:6e:85:f1:9e:
                    0b:e8:4f:fd:90:fb:a5:2c:80:4b:f0:41:21:c0:f6:
                    41:7f:76:c2:8b:a8:3a:0e:f4:ea:a9:60:27:10:6c:
                    e9:44:89:f0:16:68:33:d7:4c:f0:70:73:8c:a9:99:
                    2d:7c:49:81:67:46:9f:22:90:66:8d:e5:62:9f:a4:
                    8c:90:69:d6:1c:48:17:cf:e6:00:41:81:be:e9:24:
                    15:a5:1b:04:df:80:8b:32:c9:87:f7:a2:eb:b8:3b:
                    b1:55:b5:82:22:18:07:65:03:70:d0:74:5d:8d:1d:
                    82:10:ab:af:9f:ce:1c:58:e0:ff:d5:e4:03:a9:a4:
                    ee:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CC:A5:97:09:FF:CA:07:B0:7E:71:E6:5E:B0:39:DE:C7:30:4D:A2
            X509v3 Authority Key Identifier:
                keyid:AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/1syllwn_ygewfnHmXrA53scwTaI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.93.64.0/20
                  212.48.0.0/19
                  213.209.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         62:a6:8a:17:71:23:fe:fc:71:87:bf:26:44:ba:e5:64:2f:ad:
         bb:b7:c3:cc:96:08:92:fb:42:60:7e:5a:0e:0a:c9:60:d2:c5:
         15:c5:1c:1b:20:f4:e9:e3:de:70:f7:35:1d:fe:dd:40:48:a3:
         ca:4c:63:fa:44:36:64:0a:39:fb:7c:73:59:91:83:de:22:48:
         7c:77:7d:11:62:21:d1:64:1e:a1:eb:7e:02:b5:03:7a:6b:b1:
         ad:2b:ad:59:62:e4:b3:fc:bd:03:01:65:06:66:ca:0a:8d:7a:
         c8:46:1e:c7:0d:63:9c:a2:02:e8:b9:d4:61:a1:7b:93:b1:29:
         c5:25:53:85:9f:46:70:77:57:be:8a:31:2e:9b:2b:c6:d0:1b:
         ea:81:2e:ab:39:e7:92:05:dd:98:2e:15:b7:0e:2a:d8:3a:b8:
         e9:c0:7a:d1:74:02:39:83:0b:e8:ae:20:ed:c1:c6:df:ca:83:
         56:85:62:fe:63:ed:bf:74:33:d3:7c:3b:a7:65:4a:44:b5:9f:
         62:77:2b:71:25:54:96:ba:9c:8c:d6:7c:83:d1:bb:42:6c:42:
         a0:69:c9:53:36:9c:47:e3:86:7a:9a:ad:0e:79:15:5d:c4:b2:
         03:9a:36:1e:fe:11:1c:f6:84:6c:e2:82:ff:82:2f:8a:13:6e:
         36:3a:60:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:32 2024 by rpki-client on console-fra.rpki-client.org