Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/6O4ZLRW_n8eNA8eUuMwe6Tj9bAU.roa
File:                     6O4ZLRW_n8eNA8eUuMwe6Tj9bAU.roa (raw, json)
Hash identifier:          fwvtOumXudH3aD0OmXMT2f2+f82JQ9vcbaeIFS6R3rY=
Subject key identifier:   E8:EE:19:2D:15:BF:9F:C7:8D:03:C7:94:B8:CC:1E:E9:38:FD:6C:05
Certificate issuer:       /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial:       01856F949C5EA019033DE0EA6662BE5F8E05
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/6O4ZLRW_n8eNA8eUuMwe6Tj9bAU.roa
Signing time:             Sun 01 Jan 2023 23:04:48 +0000
ROA not before:           Sun 01 Jan 2023 23:04:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12417
IP address blocks:        212.44.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:94:9c:5e:a0:19:03:3d:e0:ea:66:62:be:5f:8e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
        Validity
            Not Before: Jan  1 23:04:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e8ee192d15bf9fc78d03c794b8cc1ee938fd6c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:ad:d7:ff:5a:4d:ec:47:82:10:0b:c4:58:
                    b1:e1:61:24:e8:5f:fb:f2:98:c2:d9:9f:4c:c6:fa:
                    dd:23:8d:d9:71:2a:45:8d:50:0f:9d:5e:fa:b2:55:
                    d2:15:fe:52:a4:48:f0:f1:a4:ed:25:83:72:56:35:
                    b7:ed:e1:c4:16:c0:fe:dc:30:53:55:83:c8:8f:03:
                    0c:9b:cb:f2:76:2a:36:14:af:14:1c:9b:c0:80:32:
                    c7:c6:b5:c7:e4:68:9e:c1:bb:c6:7b:01:e2:6c:06:
                    82:da:46:e4:e0:da:8e:24:b8:df:50:06:f2:8d:8e:
                    04:b0:45:ae:41:2d:ac:da:c8:4e:52:9a:62:48:47:
                    f1:20:93:57:5b:ad:a7:01:a2:68:7b:f8:3a:93:68:
                    a9:17:eb:cf:f9:4c:f7:e8:fe:cd:8e:69:b5:1d:dd:
                    f7:5b:9a:82:fa:1c:90:a8:8d:aa:69:c8:c7:45:c9:
                    b2:81:cc:e8:44:64:78:8d:22:0c:12:94:d8:49:b7:
                    12:39:8e:b5:d5:a4:45:06:b6:3e:c2:7b:a2:07:7a:
                    2e:fc:f4:97:98:62:2f:6b:e1:80:f0:df:1b:bd:c3:
                    8a:5a:26:32:8b:12:0f:4f:8e:47:e6:ef:82:65:8a:
                    8d:d6:7d:f3:ec:11:8e:d4:57:2b:5e:27:2b:e8:0b:
                    0f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EE:19:2D:15:BF:9F:C7:8D:03:C7:94:B8:CC:1E:E9:38:FD:6C:05
            X509v3 Authority Key Identifier:
                keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/6O4ZLRW_n8eNA8eUuMwe6Tj9bAU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.44.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:08:a7:ae:90:1c:a2:eb:b2:b9:68:57:3a:2d:d8:2b:f0:09:
         a4:40:bb:2a:54:9c:4d:0b:17:ea:b9:f0:0d:51:37:38:44:42:
         38:6c:ae:f1:14:f3:7d:c9:2f:95:b0:dc:05:f1:22:d2:58:27:
         2b:75:0f:34:35:a0:5b:71:e7:5b:08:d3:91:5d:00:d5:77:fd:
         9f:6b:dc:de:57:10:95:5c:3b:e2:97:d5:0c:51:0d:f8:df:df:
         0a:93:b8:0b:a1:ec:29:25:5e:d0:fa:f1:da:f0:ea:b2:17:fc:
         58:3b:dd:a0:ee:52:2e:9c:cf:96:8b:bc:e1:e8:4f:35:02:03:
         ab:c2:12:55:6d:ba:a4:a9:79:81:ac:30:b0:6a:ba:4f:13:44:
         b2:ae:93:6c:9d:ec:8d:41:53:15:a1:be:d3:50:4d:e7:d1:fc:
         c6:de:41:77:26:83:f7:78:db:e1:62:95:6e:70:d1:a4:24:ab:
         32:54:05:02:ca:ba:f3:b2:58:af:01:d9:3b:e4:85:9a:2d:f5:
         44:5b:0e:23:bb:af:73:a0:84:5b:d8:ca:8c:56:a7:fe:ca:10:
         9a:7d:db:ed:54:33:fa:6f:4a:9d:9d:c2:a8:dd:cc:f1:74:c8:
         76:07:74:de:1a:74:4f:95:fc:28:94:59:b1:2a:e8:45:4a:f3:
         5d:2f:ca:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:41 2024 by rpki-client on console-fra.rpki-client.org