Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/ML6eu1UEa_1uotfe9DmRMnMSSlk.roa
File:                     ML6eu1UEa_1uotfe9DmRMnMSSlk.roa (raw, json)
Hash identifier:          jzHgRcLT+MGfe2JVw9nHsDtSVePpB+D1TqKG62wEn88=
Subject key identifier:   30:BE:9E:BB:55:04:6B:FD:6E:A2:D7:DE:F4:39:91:32:73:12:4A:59
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       01856DC1D651E4B56EE636A73300F4952219
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/ML6eu1UEa_1uotfe9DmRMnMSSlk.roa
Signing time:             Sun 01 Jan 2023 14:34:57 +0000
ROA not before:           Sun 01 Jan 2023 14:34:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206803
IP address blocks:        212.22.79.0/24 maxlen: 24
                          212.22.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:c1:d6:51:e4:b5:6e:e6:36:a7:33:00:f4:95:22:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: Jan  1 14:34:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=30be9ebb55046bfd6ea2d7def439913273124a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4a:19:54:87:2e:d0:ac:85:77:93:3b:ab:56:
                    80:45:b6:07:a5:73:cb:67:ab:12:ee:cb:54:d4:e3:
                    1a:fe:24:f0:88:6f:e7:71:a0:60:00:1b:8e:46:0c:
                    48:67:fb:5b:0f:95:af:16:15:15:79:34:5d:ad:5f:
                    5e:7b:9a:b9:62:ef:5b:c3:58:9e:ac:19:68:5c:0e:
                    16:84:3f:5b:30:00:7c:80:f6:5f:ad:b5:94:3b:54:
                    fc:ca:be:c8:da:8c:b5:bb:7a:e5:7d:e7:6e:a4:43:
                    ee:72:c8:93:32:89:d3:70:da:e8:13:37:8c:6f:0b:
                    0c:6b:4f:9d:bb:6d:81:c8:a8:30:fd:7f:b7:f1:2c:
                    e1:f1:0c:f4:91:72:dd:f2:25:f5:80:9a:0e:a7:3c:
                    2d:ab:de:aa:fe:95:46:be:24:ff:0b:78:55:b9:c2:
                    bd:e4:84:12:76:04:68:27:09:59:f0:30:72:ba:d0:
                    9f:bc:3d:3d:b9:a9:ea:85:a3:dc:e4:44:cd:40:06:
                    2e:dd:ed:5a:7e:5a:2d:b1:b6:ad:49:92:7b:f3:e7:
                    ab:91:09:a7:76:37:68:a8:e3:fb:e0:97:54:b9:73:
                    2a:31:66:45:75:1c:a9:f2:1f:2c:ea:05:d7:f0:d4:
                    ae:c7:58:0d:7d:23:2d:48:81:b0:25:42:0d:73:6e:
                    6e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BE:9E:BB:55:04:6B:FD:6E:A2:D7:DE:F4:39:91:32:73:12:4A:59
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/ML6eu1UEa_1uotfe9DmRMnMSSlk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.22.79.0/24
                  212.22.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:aa:b8:50:53:58:04:8d:d9:af:f2:d6:0f:b4:aa:cd:6b:fd:
         ed:fd:b4:43:3a:25:96:e6:55:24:43:8b:20:4e:03:5c:09:27:
         73:74:86:9a:f6:67:69:fc:7a:fa:5f:9e:f1:2c:42:e4:e1:b8:
         7e:0b:ab:8e:ed:9f:f9:51:c7:1e:93:3d:43:47:f2:46:7a:2b:
         a1:dd:22:24:ae:93:ed:82:cb:b5:de:1a:a0:55:45:6f:8e:e9:
         4d:cc:83:3a:88:9d:b3:14:7d:6d:93:14:ca:17:d8:c0:ae:1d:
         12:ab:09:3b:11:8c:0a:47:ab:74:25:1e:00:03:1e:1e:b5:76:
         94:66:e4:2d:38:ff:d9:04:71:c3:4f:5b:65:35:74:66:f8:5f:
         e6:ae:bc:22:f7:9f:1d:69:09:cd:1c:4c:e0:9c:33:ac:63:64:
         ec:e5:5b:7b:05:fd:3d:15:c4:0d:01:c4:06:4a:ad:e9:8f:20:
         5c:25:b9:48:11:f9:c0:a7:4e:34:0d:c0:2c:8b:31:61:9a:af:
         8c:b2:75:1d:e3:a0:8f:35:08:31:64:49:8b:f8:9a:8d:2e:8d:
         ed:71:78:94:92:38:d9:41:ab:a1:b9:49:48:a9:e2:3a:19:26:
         e9:0e:29:2d:b0:3a:58:dc:2b:34:c6:f1:40:de:a8:7a:ea:e5:
         40:b5:bb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:04 2024 by rpki-client on console-fra.rpki-client.org