Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/jQUmKcpjB3L59eFicpVCJkkXTpc.roa
File:                     jQUmKcpjB3L59eFicpVCJkkXTpc.roa (raw, json)
Hash identifier:          40O0xIypTaSvmL5qUJ1PzqN2iZye5Q4AFf2SI2RYOgc=
Subject key identifier:   8D:05:26:29:CA:63:07:72:F9:F5:E1:62:72:95:42:26:49:17:4E:97
Certificate issuer:       /CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
Certificate serial:       0189DA694379FDF3BA65B30A56946B4A84DA
Authority key identifier: 6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/jQUmKcpjB3L59eFicpVCJkkXTpc.roa
Signing time:             Wed 09 Aug 2023 13:07:58 +0000
ROA not before:           Wed 09 Aug 2023 13:07:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25151
IP address blocks:        80.85.160.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:da:69:43:79:fd:f3:ba:65:b3:0a:56:94:6b:4a:84:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
        Validity
            Not Before: Aug  9 13:07:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8d052629ca630772f9f5e1627295422649174e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:60:eb:fe:6e:ea:95:95:8b:65:b7:62:92:3c:
                    2b:38:ee:50:80:35:d8:d8:f7:72:5b:29:39:fd:80:
                    f8:af:4a:1d:da:ed:51:30:99:2f:17:6a:78:f9:8b:
                    45:8c:35:fe:34:22:07:c3:e7:55:49:1d:89:d6:df:
                    88:7e:88:fe:7e:66:61:57:5c:b3:f2:42:3e:c6:3f:
                    eb:ad:a9:3e:b9:11:6c:19:52:82:4f:87:7f:3f:97:
                    b5:ea:35:14:66:21:9f:f1:e1:82:cf:8f:f6:06:68:
                    cf:3e:98:72:10:aa:8a:99:6e:a9:59:2e:e7:09:15:
                    37:75:e8:1b:64:64:ae:b0:8e:2a:32:be:da:59:28:
                    46:4d:02:f3:9c:38:6a:86:3f:02:a9:71:b7:da:3c:
                    f7:2d:04:79:cb:8b:16:fd:c2:fe:ec:26:70:a7:86:
                    81:9b:16:a3:d7:33:e7:f4:2e:2d:0d:11:6d:06:6a:
                    66:90:6b:d8:13:a4:55:ee:ce:c0:34:cc:8d:d6:ed:
                    6f:67:fa:1d:6c:b0:48:10:26:5e:a7:cc:32:5f:dc:
                    15:82:9d:66:96:26:77:61:ef:06:4b:da:dd:21:ee:
                    3d:70:34:94:6a:9f:f1:3d:ce:bb:1e:1e:63:45:fc:
                    23:de:d4:f3:31:40:a1:5b:07:be:c0:65:b9:dc:d0:
                    04:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:05:26:29:CA:63:07:72:F9:F5:E1:62:72:95:42:26:49:17:4E:97
            X509v3 Authority Key Identifier:
                keyid:6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/jQUmKcpjB3L59eFicpVCJkkXTpc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.85.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:30:e4:8a:31:25:e6:11:43:41:23:22:68:be:c0:95:de:e7:
         74:49:78:cd:16:cf:a4:f8:17:10:98:38:20:50:93:2e:5c:a5:
         d3:16:82:58:65:0c:f1:cc:99:c3:47:39:e9:56:0f:a3:c9:32:
         4f:75:65:4f:25:fa:cf:fc:85:ba:49:7b:cf:89:4c:ee:4d:6d:
         66:8d:e9:10:83:7d:e2:b7:82:37:05:d3:f5:a5:00:be:24:b3:
         10:8c:60:78:78:8b:73:af:16:fb:56:43:c5:fc:15:be:d0:3c:
         68:44:f6:87:ab:b6:80:83:31:6b:f9:f8:86:e7:9b:1f:c4:04:
         16:5f:2c:23:7d:b8:69:a5:a3:19:6a:6f:82:06:39:13:9a:27:
         41:fe:8a:71:1f:4e:bd:83:e4:87:60:71:b5:39:d7:6d:88:17:
         cc:7a:9f:d3:67:63:83:85:6f:9b:4b:35:13:e8:56:bc:42:a3:
         7e:49:7e:5d:63:eb:83:cc:92:33:8a:e4:bd:ab:c7:06:bc:10:
         33:1f:50:e6:77:a1:eb:1d:b7:dd:fa:9d:9d:46:dc:b9:21:98:
         af:40:39:58:91:2a:e0:39:2e:f6:50:f5:90:bd:66:1f:66:50:
         2b:e3:61:c1:e1:dd:d4:37:ac:ae:97:d5:f0:b1:d7:3a:88:74:
         ff:1a:6c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:02:10 2024 by rpki-client on console.sobornost.net