Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/bl6cjtatcGeFoGgXEKG02ZWGGVg.roa
File:                     bl6cjtatcGeFoGgXEKG02ZWGGVg.roa (raw, json)
Hash identifier:          KmI9X+dkr4QOASFIuJclWB1b/GRw0dMiDCMP7SMgbZs=
Subject key identifier:   6E:5E:9C:8E:D6:AD:70:67:85:A0:68:17:10:A1:B4:D9:95:86:19:58
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       01882FE93B3A3779A3D82BFC626C8A452F00
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/bl6cjtatcGeFoGgXEKG02ZWGGVg.roa
Signing time:             Thu 18 May 2023 17:29:54 +0000
ROA not before:           Thu 18 May 2023 17:29:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6736
IP address blocks:        81.12.12.0/24 maxlen: 24
                          87.107.117.0/24 maxlen: 24
                          87.107.116.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 14:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:2f:e9:3b:3a:37:79:a3:d8:2b:fc:62:6c:8a:45:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: May 18 17:29:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6e5e9c8ed6ad706785a0681710a1b4d995861958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2c:ce:d0:a5:52:26:79:93:4c:08:4c:e8:31:
                    1d:6b:da:a5:c0:76:c7:d2:29:cf:0d:99:d1:3f:c0:
                    9c:82:3a:43:8b:cc:96:5d:1c:bd:33:a3:1a:e8:ef:
                    c2:d3:fe:3d:4c:a3:71:8c:23:cd:df:a1:62:e7:29:
                    b9:92:99:d5:78:ba:7c:d9:ef:77:3f:fc:05:20:54:
                    07:ef:b1:10:3f:14:69:00:c6:c1:7e:91:0b:ab:32:
                    db:22:fb:a4:50:c9:bb:09:24:a0:fe:e6:92:29:29:
                    40:4b:06:ee:59:e1:3a:45:e9:d5:cd:60:9c:0a:a7:
                    89:6a:8b:30:64:3f:65:98:78:e4:97:a8:79:a7:45:
                    9b:97:93:87:e1:90:de:f2:f3:ef:25:f8:63:68:30:
                    7c:6c:43:06:e0:5b:1d:c5:1d:67:9a:1c:1f:2f:36:
                    c2:35:30:39:f3:71:d4:10:dd:ec:ae:b0:d3:42:84:
                    59:94:4c:ab:35:04:d0:57:c9:11:cb:99:1c:9e:5f:
                    36:f8:45:9a:dd:3d:b2:2c:f7:88:15:ee:28:80:53:
                    66:74:98:78:63:6c:88:50:22:27:31:fe:47:93:8b:
                    18:f2:3b:2c:f2:53:59:3f:20:d5:c1:68:db:b3:72:
                    ab:0a:a5:cb:82:f2:00:8d:ba:e1:0f:c2:42:2b:94:
                    f6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5E:9C:8E:D6:AD:70:67:85:A0:68:17:10:A1:B4:D9:95:86:19:58
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/bl6cjtatcGeFoGgXEKG02ZWGGVg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.12.12.0/24
                  87.107.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:1f:26:c0:bd:40:ec:de:d3:3f:57:c5:5c:03:05:46:7a:c4:
         ed:f2:f5:a8:37:ff:0b:2a:e2:27:26:02:75:96:c0:80:b0:03:
         7e:be:64:e7:9e:1d:6b:54:e9:a6:3e:a3:92:f5:1b:d3:00:f6:
         f3:c6:b4:aa:d6:95:82:d2:a4:e5:23:0d:14:aa:4e:c0:71:dc:
         7f:55:b4:ce:46:d0:46:06:bf:11:3c:75:dd:fa:a1:cc:7f:d4:
         40:4e:ac:b6:07:e6:9c:a4:14:f7:70:47:29:12:d3:7e:6e:de:
         65:b5:fa:a1:78:26:45:dc:a1:a4:e9:63:4b:97:5d:54:ee:3d:
         e9:fc:0e:a0:4d:15:58:cb:af:1e:40:b4:1e:18:f0:dc:99:5e:
         1d:b1:e6:d0:d0:7f:8b:23:2f:e3:e2:e8:d4:d6:1a:dd:4d:da:
         ef:6c:2a:02:af:1f:af:88:30:1c:28:3e:08:1c:12:a5:71:a7:
         d6:7b:91:2d:d8:d7:7f:ca:5f:7a:b9:36:ce:a1:69:b7:8a:97:
         b1:09:e9:50:da:70:80:48:bd:9c:2e:3c:fb:4d:01:61:07:76:
         c8:1f:65:ba:f4:9c:bd:ae:03:7b:41:3b:e0:74:b8:60:e1:de:
         75:4f:27:a9:8c:f5:0c:0e:f3:84:7a:b5:ab:88:20:29:81:fa:
         46:1d:ec:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:59 2024 by rpki-client on console-ams.rpki-client.org