Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/c6YSiRKQmPCrUopXIdRBm7sdDfA.roa
File:                     c6YSiRKQmPCrUopXIdRBm7sdDfA.roa (raw, json)
Hash identifier:          TNuMpT1GjSapszLPCnwmR45ZeSqdPX0eU3wVNKqcnI0=
Subject key identifier:   73:A6:12:89:12:90:98:F0:AB:52:8A:57:21:D4:41:9B:BB:1D:0D:F0
Certificate issuer:       /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial:       01856F022E653E4B69231782ED32B5B2B14F
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/c6YSiRKQmPCrUopXIdRBm7sdDfA.roa
Signing time:             Sun 01 Jan 2023 20:24:52 +0000
ROA not before:           Sun 01 Jan 2023 20:24:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     400040
IP address blocks:        86.104.209.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:02:2e:65:3e:4b:69:23:17:82:ed:32:b5:b2:b1:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
        Validity
            Not Before: Jan  1 20:24:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=73a61289129098f0ab528a5721d4419bbb1d0df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f5:30:03:1e:1f:5f:91:f9:a3:47:0b:e3:38:
                    51:e4:c5:59:ed:c7:9f:01:ed:61:ed:0f:5f:fd:82:
                    96:65:79:84:ca:eb:9a:35:9b:b9:c8:23:90:f2:34:
                    09:4b:f8:77:a5:fd:02:d4:71:20:36:18:a5:dc:97:
                    ed:a6:4c:20:6c:45:92:0c:70:e2:5f:f2:2f:2c:ab:
                    5e:38:9e:20:6a:56:85:f2:54:9d:2f:69:90:2a:12:
                    67:61:76:c6:99:25:79:e0:c3:47:b7:9f:b9:c7:05:
                    19:1c:33:19:62:91:4f:67:c8:ad:67:c3:96:f6:b2:
                    ef:6d:2d:29:a5:88:e6:4f:59:1d:7c:9d:15:f8:12:
                    24:4b:22:e6:78:d9:74:01:3b:47:52:ae:1e:ad:e7:
                    a2:00:c2:fa:ca:67:e9:3d:fb:ed:c0:0d:33:a1:de:
                    67:a1:b2:34:ad:20:b7:32:07:a3:ae:ca:cc:97:13:
                    b1:30:c9:86:f8:59:5c:3e:59:cb:40:6d:87:94:21:
                    46:6e:51:86:29:64:34:51:3a:03:c6:02:cd:81:a1:
                    13:47:2f:15:5d:2c:a2:d3:f1:7e:77:19:0b:10:96:
                    58:c4:50:17:f1:c0:4b:16:c9:26:6f:a2:b5:87:68:
                    6d:b3:57:87:e2:1c:c8:73:84:e8:3d:db:ae:ed:5a:
                    d9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A6:12:89:12:90:98:F0:AB:52:8A:57:21:D4:41:9B:BB:1D:0D:F0
            X509v3 Authority Key Identifier:
                keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/c6YSiRKQmPCrUopXIdRBm7sdDfA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.104.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:43:5d:fe:86:97:29:29:0d:2d:5b:34:61:d1:7f:d9:2f:25:
         4d:1a:89:9c:61:1c:5c:a1:ce:30:a5:ba:da:7c:0c:5a:f0:a9:
         c0:23:22:67:d5:e5:9c:6a:f3:d6:f8:7f:bd:7e:d0:c3:cf:1e:
         d1:39:a7:a3:d9:16:b6:e5:09:95:db:10:72:d5:97:1b:e1:7e:
         a7:12:d9:e4:2d:36:08:3f:f5:b5:cf:20:fc:c0:d7:ae:42:ea:
         7e:bd:da:39:9b:1b:6f:66:f4:46:e8:23:ea:b0:bd:f3:2c:5e:
         60:e2:a2:fd:98:6d:88:21:04:a4:bb:bd:08:7d:19:e6:c1:5b:
         bc:8e:34:04:ed:79:7f:06:88:b9:47:04:77:95:0d:60:b4:15:
         0a:a2:0c:e5:be:62:20:6d:9b:2a:12:c6:22:ab:5d:89:07:66:
         c7:63:9c:d4:97:aa:14:0e:24:1c:2f:8f:3e:df:be:de:b9:01:
         15:9a:17:5d:3e:f9:bb:ea:42:bb:04:f3:31:60:0c:93:d5:52:
         cd:e6:6f:f4:e4:93:85:60:59:0b:d7:42:6a:fd:a7:99:da:f9:
         86:a8:76:b3:4c:d2:17:58:fa:8d:c2:a2:ca:74:ab:68:3b:77:
         44:b4:07:a4:6a:8e:9e:63:db:36:fe:84:eb:2e:aa:1e:7b:32:
         99:9b:26:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:15:04 2024 by rpki-client on console-ams.rpki-client.org