Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/j1F28DdvdJdamQHq_Qj1reW22jg.roa
File:                     j1F28DdvdJdamQHq_Qj1reW22jg.roa (raw, json)
Hash identifier:          UT0azXJHkQv9o/vhbnSknZfpTpDFigBDp6w29S1jhKs=
Subject key identifier:   8F:51:76:F0:37:6F:74:97:5A:99:01:EA:FD:08:F5:AD:E5:B6:DA:38
Certificate issuer:       /CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Certificate serial:       01856DCAD6AE5F2544A497B97D77BF8CD5BF
Authority key identifier: B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/j1F28DdvdJdamQHq_Qj1reW22jg.roa
Signing time:             Sun 01 Jan 2023 14:44:47 +0000
ROA not before:           Sun 01 Jan 2023 14:44:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     680
IP address blocks:        192.12.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:ca:d6:ae:5f:25:44:a4:97:b9:7d:77:bf:8c:d5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
        Validity
            Not Before: Jan  1 14:44:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8f5176f0376f74975a9901eafd08f5ade5b6da38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d3:25:0e:bb:8a:27:db:f9:e6:32:70:42:8a:
                    ab:e1:6f:6a:90:70:27:a2:eb:2b:c4:9b:ae:99:88:
                    a2:28:24:e3:a1:c2:7e:50:8a:75:27:7c:31:6a:19:
                    b6:92:ee:2b:96:10:16:bd:90:3a:af:15:04:07:a6:
                    b6:fa:51:ab:da:5b:e4:b4:b4:7f:61:34:61:a2:89:
                    04:72:c7:82:98:a2:d1:e6:90:c1:52:e3:d3:86:af:
                    b8:cc:cf:c0:62:0c:63:4f:7a:18:47:0e:2c:90:42:
                    7f:50:7a:57:5a:6a:ec:40:c7:7b:e0:42:62:a9:53:
                    c7:89:e2:20:0e:dc:2d:d9:b1:9a:be:07:f2:a0:d8:
                    78:29:00:6a:b9:44:f4:cf:fc:79:20:d2:93:3a:47:
                    60:1c:a5:18:ea:22:f4:c6:60:d7:79:b4:91:ad:fa:
                    ef:c5:17:31:64:1b:68:27:59:5b:62:38:43:8c:94:
                    54:19:79:92:22:b0:13:7b:b2:a5:fb:00:fe:e2:4d:
                    6d:c9:c0:c1:d7:0a:96:93:d7:9c:c1:06:f0:77:d7:
                    9f:e7:45:40:1c:a8:22:4c:33:a0:0a:40:a9:3c:7d:
                    ec:4c:c4:a0:ba:07:bf:07:9f:6b:ca:fb:e2:97:15:
                    2f:c9:ec:e8:78:61:2a:ab:6f:92:2d:7f:2c:01:63:
                    c0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:51:76:F0:37:6F:74:97:5A:99:01:EA:FD:08:F5:AD:E5:B6:DA:38
            X509v3 Authority Key Identifier:
                keyid:B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/j1F28DdvdJdamQHq_Qj1reW22jg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:d3:b3:2e:8e:30:1c:b1:fe:f4:68:8c:06:f8:6b:27:08:65:
         69:58:e0:97:72:9d:d3:2a:a6:2a:23:9b:b3:10:81:71:3b:35:
         e3:af:35:c5:7c:28:48:0a:d1:12:ab:81:77:06:a5:e9:04:39:
         b1:54:39:fe:7c:79:c7:d3:2a:da:7c:0d:88:39:0b:f0:c1:8d:
         de:92:1b:a1:55:6a:76:07:5f:ed:31:50:5a:22:8f:ee:be:6b:
         05:b8:82:a2:78:3f:79:c8:10:05:bc:60:33:77:73:60:bf:d9:
         b2:28:1e:20:8d:65:f7:3d:bc:36:5d:e1:6d:fc:32:c5:1a:d2:
         12:7c:89:8f:ab:be:cc:99:22:e8:a3:6f:c8:89:6b:1e:5f:be:
         4e:b9:f1:ce:31:83:25:07:5c:df:74:81:02:0c:1a:72:06:e1:
         2a:ab:d4:57:05:57:e1:17:4b:5b:1d:6c:db:43:f3:f3:65:af:
         5a:7d:eb:1d:02:0c:b9:d4:31:de:35:13:26:86:c4:fa:03:a9:
         3f:68:ce:59:db:7b:8a:cf:4e:96:02:3a:5f:11:0f:1b:04:15:
         6c:10:b1:55:b2:ae:df:83:64:21:46:43:8c:08:12:f8:eb:19:
         48:57:67:d2:84:35:39:4d:c7:f3:d2:e4:5d:af:63:5d:ed:4f:
         96:06:32:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:15 2024 by rpki-client on console-fra.rpki-client.org