Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/P06QDWeN2x9Bx0KAJqY-b8FRDKA.roa
File:                     P06QDWeN2x9Bx0KAJqY-b8FRDKA.roa (raw, json)
Hash identifier:          mWicI85SxCiBfyoTDTW8ArazPjzX+spOC5+2eWVB0wI=
Subject key identifier:   3F:4E:90:0D:67:8D:DB:1F:41:C7:42:80:26:A6:3E:6F:C1:51:0C:A0
Certificate issuer:       /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial:       01880F340CD668A32A28E09D54DC8B64F2AC
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/P06QDWeN2x9Bx0KAJqY-b8FRDKA.roa
Signing time:             Fri 12 May 2023 09:04:09 +0000
ROA not before:           Fri 12 May 2023 09:04:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6730
IP address blocks:        178.82.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Mon 04 Sep 2023 08:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:0f:34:0c:d6:68:a3:2a:28:e0:9d:54:dc:8b:64:f2:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
        Validity
            Not Before: May 12 09:04:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3f4e900d678ddb1f41c7428026a63e6fc1510ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:86:68:75:05:60:29:aa:e4:df:5f:c0:9e:0d:
                    36:f6:ec:ec:4e:07:88:30:b6:9c:0a:5e:b1:f8:b1:
                    75:9b:c8:2e:ed:44:37:cf:ee:52:25:26:be:d6:5f:
                    be:c0:69:ee:a4:e9:b6:b2:2e:b2:e1:d8:f4:0d:56:
                    55:2c:2b:b8:5e:96:e8:a4:db:31:f3:e2:b3:85:d4:
                    1d:1b:49:2d:40:ab:fd:20:bb:86:2f:06:4f:08:05:
                    e3:36:48:ba:9c:23:d8:32:80:54:25:a7:ea:4f:1d:
                    aa:19:0c:92:ce:93:6b:01:43:86:13:51:2c:01:54:
                    bc:be:2a:b3:82:84:59:4a:51:ed:c2:26:6b:ce:a5:
                    2f:98:fc:39:79:6d:af:ee:0b:65:17:c1:af:d0:23:
                    cd:8d:7d:24:63:a7:07:b1:9f:0d:5c:8a:c3:c9:32:
                    0d:64:ce:1a:58:5d:99:90:cd:aa:ab:07:d6:9b:a5:
                    f9:55:df:8e:98:21:70:9a:9a:97:b1:f9:79:58:0c:
                    56:bd:bd:04:b8:25:2f:dd:fc:32:97:fb:46:95:89:
                    e0:c5:29:2c:b9:a6:a1:e8:77:f8:c4:5f:e5:e8:af:
                    b7:22:0a:34:ba:24:51:20:c2:43:66:cd:99:40:2d:
                    53:1a:44:06:ac:23:54:48:11:1d:37:e5:45:ff:c7:
                    ce:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4E:90:0D:67:8D:DB:1F:41:C7:42:80:26:A6:3E:6F:C1:51:0C:A0
            X509v3 Authority Key Identifier:
                keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/P06QDWeN2x9Bx0KAJqY-b8FRDKA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.82.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         73:d8:ce:d9:d5:db:8c:bf:5a:9e:59:eb:27:5c:17:35:b2:82:
         59:fe:f1:96:f8:7f:bb:6b:46:0e:01:e1:bc:2e:59:4a:19:42:
         82:2c:3a:37:70:f5:f8:03:0f:97:c8:d7:e0:0c:00:d8:42:92:
         f4:f5:aa:84:03:64:26:cb:1a:7e:c7:3b:75:04:56:1d:e2:7f:
         0f:89:f3:7b:b7:4e:4e:c7:bf:1c:7b:6b:e7:b4:fe:80:29:3f:
         9d:d8:4f:a2:02:1c:9a:21:9f:a1:59:3f:5f:bf:8b:ff:7e:a8:
         c2:88:3e:0b:e1:29:9a:fa:27:6c:85:28:e7:87:b5:0e:14:3f:
         11:45:80:0d:02:de:18:60:53:51:07:a4:c6:ea:43:6c:c9:50:
         7d:2b:37:bc:98:3d:46:5d:6e:1d:b9:9d:c1:2c:25:93:93:d4:
         b3:cd:c7:2d:54:66:28:d9:f9:01:97:18:fe:27:e0:b8:24:c0:
         dd:78:f5:ba:e9:93:d6:4c:3d:63:b9:93:91:31:b1:92:4d:8c:
         93:9d:14:39:b6:60:2e:f3:ce:55:20:5d:17:7f:62:fe:c3:91:
         98:26:e7:e4:0e:86:41:10:bd:ae:b6:c6:05:e2:34:f5:f8:8c:
         6a:f1:cc:1c:e8:95:e4:5a:ed:a1:13:c6:10:fc:32:bf:6e:11:
         ab:28:c0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:19 2024 by rpki-client on console-ams.rpki-client.org