Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/Bu0fHrIj8hcvajb7cbFOW_7MIng.roa
File:                     Bu0fHrIj8hcvajb7cbFOW_7MIng.roa (raw, json)
Hash identifier:          dOeVL0AaYCayMrvUIafH3xNoT0PjgKAV9toLUTvJErg=
Subject key identifier:   06:ED:1F:1E:B2:23:F2:17:2F:6A:36:FB:71:B1:4E:5B:FE:CC:22:78
Certificate issuer:       /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial:       01891A51D45DA3CBEBF286FA8CCD7E096CB9
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/Bu0fHrIj8hcvajb7cbFOW_7MIng.roa
Signing time:             Mon 03 Jul 2023 05:55:17 +0000
ROA not before:           Mon 03 Jul 2023 05:55:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204843
IP address blocks:        195.114.200.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 07 Jul 2023 16:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:1a:51:d4:5d:a3:cb:eb:f2:86:fa:8c:cd:7e:09:6c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
        Validity
            Not Before: Jul  3 05:55:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=06ed1f1eb223f2172f6a36fb71b14e5bfecc2278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d7:f7:c9:e2:2b:fc:95:f0:06:fa:e7:54:2f:
                    9b:7e:8d:38:f5:34:30:55:5d:b4:f8:bd:6b:6b:a9:
                    95:ac:e0:13:e0:9b:a9:c6:f0:62:5f:25:87:a7:43:
                    af:02:7f:1c:a7:54:ec:7e:69:c9:08:78:a8:69:e2:
                    44:9b:96:b0:21:9f:27:bd:13:68:66:f2:81:42:f4:
                    f7:1f:53:a1:07:86:55:a4:b0:55:b8:fa:72:90:d1:
                    ec:e7:be:7f:75:d3:8a:a8:4a:1e:cc:b1:16:e0:3a:
                    61:7a:f8:1b:59:3c:6c:e0:36:c6:e3:4d:e6:e0:0c:
                    d5:a6:f5:5b:71:24:ac:3b:6c:15:e5:01:79:3b:91:
                    4a:5d:96:37:c2:71:84:04:1b:65:d8:34:a6:43:46:
                    40:a3:f5:1e:0c:73:15:76:b0:0a:ca:c8:cd:84:c9:
                    65:4c:a3:23:c3:7c:66:b2:c7:ad:50:71:5d:13:93:
                    bb:d4:52:47:b2:0b:46:72:b6:38:88:33:5e:56:16:
                    59:0f:1b:de:1b:24:08:6d:b8:49:37:22:c3:8b:d4:
                    bd:36:b7:14:c4:e4:32:37:b6:17:0d:5c:17:2a:52:
                    47:c6:48:4e:d2:ef:20:e7:23:9b:23:13:81:5a:0a:
                    45:04:74:cb:a1:a1:58:bb:ad:5f:06:ee:f7:b9:43:
                    25:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:ED:1F:1E:B2:23:F2:17:2F:6A:36:FB:71:B1:4E:5B:FE:CC:22:78
            X509v3 Authority Key Identifier:
                keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/Bu0fHrIj8hcvajb7cbFOW_7MIng.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.114.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:d7:eb:4e:c7:68:b5:ea:35:4d:96:43:1f:36:93:28:2c:c0:
         33:58:8b:3a:81:94:0e:52:94:7e:30:df:32:67:e4:dd:45:67:
         16:7d:23:40:95:f6:a5:eb:f1:cd:44:9b:3c:6d:c9:19:67:ea:
         a7:8f:3b:ed:ce:58:52:24:86:bb:31:b4:7a:cd:4c:8e:62:29:
         88:b2:c4:57:fd:fc:4f:27:d5:cf:e4:9d:08:86:05:68:40:89:
         3b:b6:5e:e0:38:25:28:54:02:51:9b:71:64:c0:94:4d:8e:1b:
         d5:b8:8e:da:16:c6:0c:9b:61:cd:23:07:d8:61:c2:3b:f4:14:
         f5:63:5b:49:19:cc:a2:4f:6a:64:1a:17:79:10:a2:05:a7:09:
         ff:a4:55:e7:20:e0:16:6e:35:0d:16:2f:66:4e:31:59:65:a1:
         65:11:46:04:d4:4b:51:73:83:89:14:56:79:f3:30:32:0f:d6:
         4d:80:e8:ef:66:2c:ef:a7:78:3b:4d:a1:a0:c3:b6:e4:fb:97:
         03:ba:8a:7c:1d:d2:eb:26:bb:1d:ee:a0:b8:73:d2:1b:bf:fb:
         63:0d:de:54:60:67:e6:f3:ab:0e:f0:04:65:81:60:1d:29:ed:
         31:b9:90:0f:59:94:b3:19:91:36:47:4e:1c:c2:66:25:4a:2f:
         9e:82:5d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:17 2024 by rpki-client on console-fra.rpki-client.org