Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/8gLoMGte-rsFvBya4jjoYU8DwkU.roa
File:                     8gLoMGte-rsFvBya4jjoYU8DwkU.roa (raw, json)
Hash identifier:          xwIfbgKqIvR7LxoG4n8qNJQfmmh8DueIm/pHrzYmVgw=
Subject key identifier:   F2:02:E8:30:6B:5E:FA:BB:05:BC:1C:9A:E2:38:E8:61:4F:03:C2:45
Certificate issuer:       /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial:       0187EB778867DE855CA488782719D7E60AB4
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/8gLoMGte-rsFvBya4jjoYU8DwkU.roa
Signing time:             Fri 05 May 2023 10:31:32 +0000
ROA not before:           Fri 05 May 2023 10:31:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8075
IP address blocks:        194.49.206.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:eb:77:88:67:de:85:5c:a4:88:78:27:19:d7:e6:0a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
        Validity
            Not Before: May  5 10:31:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f202e8306b5efabb05bc1c9ae238e8614f03c245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:82:c7:e0:3a:91:40:d6:22:06:78:6a:c5:e8:
                    81:43:11:f8:bf:32:80:da:5b:78:aa:76:37:8e:78:
                    f3:05:6e:b9:1a:fa:76:a3:eb:d1:87:c0:60:b7:90:
                    e0:f2:93:42:66:93:50:68:42:de:bf:69:0d:d0:14:
                    19:8b:a2:ca:d4:1a:49:3c:84:81:01:fb:12:db:c6:
                    0b:78:ac:fd:93:47:17:4e:a6:9f:e0:37:76:97:61:
                    44:62:9f:49:9c:b0:10:33:d4:a4:b8:06:03:da:65:
                    7b:1d:d3:e8:38:15:58:37:cb:33:c9:65:c2:ff:f2:
                    1a:b5:22:ec:a4:7e:19:45:77:25:f7:67:9a:65:80:
                    2a:6a:63:0d:b3:2e:d6:9e:e0:50:8f:42:9e:a8:35:
                    33:1f:65:24:4a:c5:04:ec:99:13:a6:bb:13:4a:7d:
                    bd:e3:20:fc:23:32:d4:45:47:da:fc:ee:09:1d:5b:
                    94:f5:fd:f6:a5:ce:f6:29:c1:a7:00:2e:a3:27:74:
                    80:e9:d3:4f:a8:8d:14:d1:10:df:73:bc:89:f9:88:
                    48:0b:b6:6c:9a:65:00:81:69:9c:19:cb:b7:7c:99:
                    5d:99:7b:0e:d5:dc:b9:c6:09:fc:d5:3a:cb:05:b9:
                    f9:21:57:80:b3:8a:a5:a0:e3:29:32:15:a0:9b:77:
                    36:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:02:E8:30:6B:5E:FA:BB:05:BC:1C:9A:E2:38:E8:61:4F:03:C2:45
            X509v3 Authority Key Identifier:
                keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/8gLoMGte-rsFvBya4jjoYU8DwkU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.49.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:1d:b9:ee:3d:e8:8b:21:ad:ee:2c:10:4d:c3:e2:bd:83:f9:
         51:45:d2:8c:80:a6:cf:f4:59:b6:d3:d2:b1:78:27:7c:57:af:
         77:a7:5f:66:18:ab:95:a2:12:0e:80:1c:6d:2a:8f:25:be:af:
         0f:69:1b:e9:3e:01:da:00:40:6b:43:68:4f:a7:11:43:bd:67:
         40:9f:ed:8c:a7:72:2d:1c:45:82:e9:bd:5d:9f:32:3e:0f:2e:
         12:83:48:64:87:84:63:4f:fb:9b:e5:ea:ad:c8:30:83:ac:39:
         88:f4:c0:9e:11:b9:07:3d:b7:30:ad:31:b3:16:37:79:e5:9f:
         18:b7:95:dc:f0:aa:0d:0e:c8:76:2c:29:0e:00:29:ef:01:92:
         28:4c:f7:f9:3c:0d:57:bc:42:e3:8c:7b:2c:7e:73:fb:45:0d:
         9c:c3:a2:c6:97:f6:7d:82:79:dd:5e:7e:6a:56:db:8e:a8:c5:
         98:66:c9:d2:fa:db:eb:ee:f8:66:25:08:1e:7a:ee:7e:73:69:
         63:89:2e:21:c3:88:0c:96:85:4a:5f:33:48:29:22:b5:97:54:
         ab:eb:83:1b:e8:81:19:60:05:66:47:0e:f4:42:31:7d:1f:34:
         a6:72:e3:8a:2b:e0:ee:47:f0:87:ae:72:3b:da:99:c7:ad:a8:
         62:7f:95:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:52 2024 by rpki-client on console-fra.rpki-client.org