Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/S3NY1snHpyxQPWwzXt-oBCaRM8o.roa
File:                     S3NY1snHpyxQPWwzXt-oBCaRM8o.roa (raw, json)
Hash identifier:          fGtvhz9TeZht9e/YDfUxi03aienNyEuH9StLdZyu/3o=
Subject key identifier:   4B:73:58:D6:C9:C7:A7:2C:50:3D:6C:33:5E:DF:A8:04:26:91:33:CA
Certificate issuer:       /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial:       018602068AADC48ABA3630B61D25CA20D47F
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/S3NY1snHpyxQPWwzXt-oBCaRM8o.roa
Signing time:             Mon 30 Jan 2023 09:33:48 +0000
ROA not before:           Mon 30 Jan 2023 09:33:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34946
IP address blocks:        94.126.80.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:02:06:8a:ad:c4:8a:ba:36:30:b6:1d:25:ca:20:d4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
        Validity
            Not Before: Jan 30 09:33:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4b7358d6c9c7a72c503d6c335edfa804269133ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:06:53:90:53:d1:a4:b2:04:09:d3:52:fa:6c:
                    5b:0c:cf:e8:d6:ff:eb:e0:fb:cd:d5:25:9a:63:03:
                    05:5a:a4:25:a8:bb:5e:0e:4c:b8:f1:91:2f:48:76:
                    3d:ef:ed:3c:32:6e:a6:85:51:fb:bf:30:18:38:fb:
                    7e:51:19:cc:38:af:8a:0f:ac:37:17:1d:92:c6:d7:
                    e6:35:37:7c:17:9a:81:3f:27:f2:fc:96:91:54:3e:
                    36:3c:c2:9c:92:30:b6:f8:aa:37:1c:c5:8b:33:d8:
                    84:62:d2:0f:86:f0:9f:bf:d7:48:2b:f4:06:91:39:
                    82:15:68:b9:df:10:03:7d:ac:6d:fb:ce:3a:64:23:
                    44:86:e1:a2:70:16:35:00:f9:58:83:6f:d9:bc:75:
                    6b:b1:ff:db:9e:f5:90:6b:2a:18:f1:a7:49:a4:8f:
                    7d:08:ec:c2:4e:78:8f:df:97:e0:62:66:d6:cf:5d:
                    81:2e:f1:da:11:d5:20:8c:32:80:a2:27:4c:32:b6:
                    e0:29:7b:78:9b:c8:fa:6a:a1:ce:2d:ec:29:14:f1:
                    3c:45:ff:43:09:7d:3e:09:9e:39:ed:85:1a:e3:8f:
                    76:43:1a:16:f0:62:49:a6:52:f0:08:2a:d3:01:e8:
                    aa:a0:29:7b:81:b3:b8:5a:ca:31:6f:78:cd:65:c5:
                    5d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:73:58:D6:C9:C7:A7:2C:50:3D:6C:33:5E:DF:A8:04:26:91:33:CA
            X509v3 Authority Key Identifier:
                keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/S3NY1snHpyxQPWwzXt-oBCaRM8o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.126.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c0:a5:57:53:67:8a:6f:91:b9:ca:10:99:51:77:4d:a1:c8:22:
         8a:d6:36:df:fd:9c:68:fe:44:d0:33:8a:68:5f:26:33:2b:86:
         14:5c:63:2e:72:aa:ac:5b:72:6f:5c:4d:95:a3:af:8a:fd:45:
         ed:87:79:7b:37:6d:0e:d1:06:05:8f:f3:ac:51:db:24:c6:f9:
         4d:9f:8b:46:6e:38:00:c3:70:42:1f:58:87:fc:31:e5:0e:5e:
         a1:11:13:ef:65:1e:e8:dd:a6:a2:78:b6:2c:fc:fb:2f:ca:2a:
         ce:aa:8f:ef:22:87:25:e6:2a:1e:38:f8:5d:e8:5c:15:66:2d:
         31:ce:28:da:e0:09:44:5e:11:c8:e9:8c:52:bd:6b:0d:68:9c:
         6e:c5:59:cc:33:1e:0a:3d:42:f2:0c:1d:cd:9a:70:90:81:ab:
         b5:ce:f8:62:b5:a6:c2:7b:82:90:2a:ae:37:ed:ca:43:56:e5:
         0b:1a:f2:ca:dc:a8:10:7f:4c:53:01:3b:6c:c6:f8:89:13:62:
         19:a2:67:d0:d9:77:b8:ed:68:3e:66:5c:dd:ca:5c:4d:ac:c3:
         a5:39:fc:15:df:2c:4b:22:f5:40:53:a9:02:e1:a0:59:f9:63:
         f6:92:10:77:5f:f2:6e:a5:c3:b5:58:9d:7d:e9:da:4e:17:c9:
         8f:c7:6d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:43 2024 by rpki-client on console-fra.rpki-client.org