Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/bg7B-foluhM_bdlqbQZhdhdVEno.roa
File:                     bg7B-foluhM_bdlqbQZhdhdVEno.roa (raw, json)
Hash identifier:          g7dHhnQy64QGBYgW3nS6nz7yH1plWzeHqU5MUGbew+0=
Subject key identifier:   6E:0E:C1:F9:FA:25:BA:13:3F:6D:D9:6A:6D:06:61:76:17:55:12:7A
Certificate issuer:       /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial:       01856FD5167A145BDEF2522809A2C0923910
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/bg7B-foluhM_bdlqbQZhdhdVEno.roa
Signing time:             Mon 02 Jan 2023 00:15:13 +0000
ROA not before:           Mon 02 Jan 2023 00:15:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206362
IP address blocks:        2001:678:fdc::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:d5:16:7a:14:5b:de:f2:52:28:09:a2:c0:92:39:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
        Validity
            Not Before: Jan  2 00:15:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6e0ec1f9fa25ba133f6dd96a6d0661761755127a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9a:79:b3:60:8f:5e:38:33:bd:0d:53:fb:47:
                    bc:36:5d:98:f6:ce:17:19:ec:b7:60:81:cd:ad:d9:
                    8a:e2:6a:97:ce:d3:01:93:11:f2:e2:2a:51:0a:62:
                    f9:0d:99:f2:1e:2f:93:4b:af:51:02:56:ae:9b:ff:
                    b2:26:3b:9d:cc:4f:29:ab:e7:53:7f:20:1f:08:63:
                    31:8f:3e:8a:db:b3:ef:a4:30:8f:3c:a2:6a:d4:cc:
                    da:40:71:1a:d9:db:74:da:6e:21:07:7f:30:c4:11:
                    a2:99:25:47:65:fe:a0:14:f6:de:00:c6:bb:de:18:
                    04:f6:ad:bb:79:2a:0d:38:bd:44:d0:b2:7c:7f:13:
                    31:78:68:06:ed:e3:c0:74:80:f6:95:e9:35:51:c8:
                    e9:a6:34:6b:b5:5a:ec:2c:17:7f:f3:a7:53:80:a7:
                    97:c2:be:c8:89:b5:4d:57:7e:3f:01:c6:39:43:ce:
                    f3:2a:19:f6:08:3e:01:64:2d:eb:e3:57:d2:94:3f:
                    00:80:d5:7f:2e:05:93:56:6b:db:3b:59:db:5a:48:
                    7c:a5:ab:4f:c9:60:29:57:35:78:7b:b5:63:d2:87:
                    d0:83:b2:81:b3:52:28:6f:8b:34:da:cc:b3:ee:be:
                    24:13:b3:48:ae:79:23:ec:77:76:88:e4:80:7d:95:
                    39:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0E:C1:F9:FA:25:BA:13:3F:6D:D9:6A:6D:06:61:76:17:55:12:7A
            X509v3 Authority Key Identifier:
                keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/bg7B-foluhM_bdlqbQZhdhdVEno.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:fdc::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:1e:20:34:9b:ab:6e:aa:cd:e1:23:c6:1e:b2:70:97:3f:af:
         92:0c:a4:bb:2c:73:05:eb:31:87:a3:ba:fd:8f:ab:b7:be:1d:
         28:46:55:90:f2:64:ec:26:a5:5d:75:76:73:2a:ad:bb:7b:8e:
         33:16:20:a4:27:e7:d2:80:75:a0:e4:b5:cf:b8:09:f5:77:24:
         b2:a6:74:76:70:9a:74:35:3a:78:7c:40:64:c7:b4:70:c7:d4:
         35:9c:db:67:d3:fc:9f:94:80:a6:1f:f3:0c:f9:c7:5f:7a:65:
         18:fb:94:00:39:bf:6a:f7:4e:dd:2f:38:56:f3:ee:e0:19:d3:
         8c:c5:00:b6:4a:0b:0e:0e:1b:58:0a:54:1e:56:7c:59:08:1e:
         97:c4:cd:7d:8b:6c:d3:cf:85:db:c8:3f:ee:cf:15:5f:26:f0:
         d4:01:9f:6c:1e:c7:f4:08:fa:8f:2e:fd:02:03:de:03:7b:70:
         32:db:6d:0a:d2:a3:6b:38:ed:0d:6f:a1:0e:ba:bd:ff:0e:a0:
         0f:82:91:a1:1b:c2:ce:1f:dd:65:6e:9c:b4:ce:83:34:16:78:
         ca:77:d0:de:32:26:24:53:66:ae:36:fb:53:3b:3e:5c:ac:00:
         57:ca:c3:4c:a5:1c:b8:56:cc:30:85:d7:ea:0c:cd:1b:e8:b7:
         fa:73:23:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:21 2024 by rpki-client on console-fra.rpki-client.org