Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/bddeDG-OT8XaWn7--0miylY4mww.roa
File:                     bddeDG-OT8XaWn7--0miylY4mww.roa (raw, json)
Hash identifier:          eNKTsyu+uGTrVmXKPgJOxhcRd34h6apnBuufUwcN7Zc=
Subject key identifier:   6D:D7:5E:0C:6F:8E:4F:C5:DA:5A:7E:FE:FB:49:A2:CA:56:38:9B:0C
Certificate issuer:       /CN=d9527368206e3e9a5924081df63880246e5c541a
Certificate serial:       01857328344415393CC02F76C1B208044658
Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/bddeDG-OT8XaWn7--0miylY4mww.roa
Signing time:             Mon 02 Jan 2023 15:44:52 +0000
ROA not before:           Mon 02 Jan 2023 15:44:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     137
IP address blocks:        140.105.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:28:34:44:15:39:3c:c0:2f:76:c1:b2:08:04:46:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a
        Validity
            Not Before: Jan  2 15:44:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6dd75e0c6f8e4fc5da5a7efefb49a2ca56389b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:25:53:d2:86:65:e9:3b:3f:56:4a:ac:c0:d8:
                    c1:24:60:07:0a:f0:5d:ed:b8:f1:e5:03:aa:fb:d7:
                    27:cd:f9:51:60:92:58:79:73:63:86:71:37:64:47:
                    05:bb:57:3c:aa:fe:83:40:b8:a4:48:19:cb:0f:6e:
                    32:d3:07:c1:b3:a2:ec:f7:f7:b0:2e:a9:27:2a:16:
                    97:c6:65:6a:c6:5f:02:a0:e2:9c:7f:62:6e:db:ad:
                    7c:9c:e9:b6:da:aa:92:f3:2f:91:8e:d2:5a:23:f0:
                    49:da:64:15:6a:b9:ee:32:24:fe:94:78:35:df:1e:
                    e5:9e:6d:7a:e9:cc:ec:40:e1:2c:e7:fd:1c:4c:f4:
                    44:76:c5:b5:7b:11:2a:3a:75:7b:35:6e:89:08:0a:
                    78:c6:09:93:13:30:fd:3a:f9:2f:25:db:a7:41:4d:
                    e9:48:af:74:94:24:63:74:50:d9:73:e6:0d:cf:b5:
                    51:f7:b4:5a:72:b3:48:3b:e2:7e:4e:75:cf:4b:fc:
                    c7:78:41:eb:e9:23:02:64:6c:f7:03:fd:f7:3c:96:
                    3d:fc:78:03:c0:f5:a2:84:0d:4c:57:5e:14:96:2f:
                    09:78:ce:96:19:91:df:d5:89:03:d5:7d:4c:46:2a:
                    34:d7:e3:17:7b:7a:70:c8:e5:13:36:06:1e:e6:94:
                    fb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D7:5E:0C:6F:8E:4F:C5:DA:5A:7E:FE:FB:49:A2:CA:56:38:9B:0C
            X509v3 Authority Key Identifier:
                keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/bddeDG-OT8XaWn7--0miylY4mww.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.105.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         98:5a:d7:9f:70:a5:3c:a2:82:68:65:c2:11:95:89:05:c5:73:
         cc:20:24:c2:5a:4e:65:e5:cf:76:c9:e6:d9:ab:5a:f6:7f:9b:
         f5:fc:13:d4:5a:4c:37:ce:4a:cd:00:e1:79:45:dc:09:7d:e5:
         e7:43:8c:eb:a3:18:e1:03:1a:0d:95:8b:da:92:a4:d3:64:bd:
         49:62:a1:fb:f5:76:00:c2:cb:36:01:3b:68:3f:39:f6:e2:b4:
         b0:1a:e9:a7:e8:08:07:0a:85:85:7c:99:58:6e:5d:0a:5f:37:
         b1:6d:a3:78:b4:dd:93:cc:10:f9:b1:5a:01:71:2b:ff:a3:96:
         16:b1:79:bf:da:4a:a2:30:7e:0f:ef:4b:b5:0f:25:96:7f:20:
         a4:37:7b:ee:3c:f2:7c:28:f8:d3:54:3d:f3:7c:c4:1d:be:84:
         4f:d0:34:f1:ad:3b:b7:85:25:14:11:0e:cf:78:aa:dc:d9:ba:
         d2:96:ef:71:2f:85:87:1f:0d:e9:b8:56:db:45:54:c6:67:38:
         dc:41:32:7e:5a:8b:36:66:c4:ed:03:94:39:57:f5:eb:31:7d:
         f3:a0:9c:f4:c2:29:dd:29:f4:14:14:99:45:08:54:bf:8d:fa:
         5a:22:14:26:96:e1:1b:c6:92:d9:34:ac:b7:2f:94:4e:fc:f7:
         b3:e1:a9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:00 2024 by rpki-client on console-ams.rpki-client.org