Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/6U73RQEWxo-yJyy9PGS_K5E1ttU.roa
File:                     6U73RQEWxo-yJyy9PGS_K5E1ttU.roa (raw, json)
Hash identifier:          lKlRXzh4yZxXg7axyvKSt89+Sh5aJXJBW9lU3RkbYhs=
Subject key identifier:   E9:4E:F7:45:01:16:C6:8F:B2:27:2C:BD:3C:64:BF:2B:91:35:B6:D5
Certificate issuer:       /CN=768ef9c104be22284bf7b2756d2a8173946a386e
Certificate serial:       01856FD4F3C942A784A8D19DC67A56922F08
Authority key identifier: 76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/6U73RQEWxo-yJyy9PGS_K5E1ttU.roa
Signing time:             Mon 02 Jan 2023 00:15:05 +0000
ROA not before:           Mon 02 Jan 2023 00:15:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62286
IP address blocks:        185.40.40.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:d4:f3:c9:42:a7:84:a8:d1:9d:c6:7a:56:92:2f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=768ef9c104be22284bf7b2756d2a8173946a386e
        Validity
            Not Before: Jan  2 00:15:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e94ef7450116c68fb2272cbd3c64bf2b9135b6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f4:0a:f9:74:7d:92:1b:6f:f6:c7:84:6a:54:
                    87:b1:44:7c:41:18:19:e0:48:0b:1c:3a:93:c6:b5:
                    73:e3:4f:f3:45:e5:9a:43:2a:cf:45:9d:de:d3:14:
                    c0:07:42:3f:f4:60:c5:4f:ca:12:bb:7c:d5:6d:9c:
                    d4:9a:a5:05:ea:e6:ae:8f:33:56:e1:31:2c:38:ea:
                    23:35:c5:dc:d1:97:13:ea:33:63:76:cd:c5:94:e9:
                    ee:40:b2:e6:eb:b7:da:f9:0a:86:11:c1:72:3f:da:
                    97:7f:65:37:9a:9b:a3:7b:cd:b9:e8:11:c4:1e:9b:
                    3d:93:e5:15:c6:83:b7:bd:99:52:98:70:0e:42:e3:
                    2a:5e:e5:f6:85:81:04:32:7d:e5:20:96:ce:ab:56:
                    a0:8f:a8:6b:51:b1:25:a8:1d:86:9e:58:9a:3c:a3:
                    ee:ad:b8:90:36:70:5a:d1:75:8f:8c:47:81:f4:08:
                    84:78:81:e7:4e:3f:46:dd:75:db:8c:5c:ce:3b:1c:
                    22:31:7b:2e:e3:23:c0:9c:8f:95:44:aa:6a:9b:98:
                    92:d9:7e:55:cb:91:53:60:55:aa:97:e4:69:18:d2:
                    0a:1e:7c:9c:d5:cf:91:9e:f4:cc:d7:cc:7f:a3:c0:
                    f4:5b:7b:1e:b3:1c:a9:b9:24:b9:cd:03:cd:db:0c:
                    2c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4E:F7:45:01:16:C6:8F:B2:27:2C:BD:3C:64:BF:2B:91:35:B6:D5
            X509v3 Authority Key Identifier:
                keyid:76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/6U73RQEWxo-yJyy9PGS_K5E1ttU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.40.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:7d:ce:60:86:3d:54:50:7f:63:fc:2c:7d:22:8e:98:fa:43:
         ce:b0:d2:d2:ac:e5:e7:83:82:ba:0d:89:89:0a:31:3f:75:e2:
         6e:20:96:37:5b:c9:2c:ff:d3:8a:c6:30:dd:6b:f7:bb:55:42:
         46:34:62:25:57:39:f6:63:78:49:bf:39:7f:56:98:30:53:46:
         e5:95:a9:f7:44:10:f2:b4:0e:5e:95:d4:df:2c:6c:73:f8:80:
         73:cb:09:bb:e3:96:0a:5c:c8:60:dd:c9:15:67:2d:9c:3b:e7:
         41:dd:89:62:5d:e8:94:8f:ec:b2:69:75:4a:44:e9:5e:48:ee:
         99:27:84:87:cf:09:11:5e:6c:a1:fa:b6:ec:7e:0b:9c:58:ae:
         1e:47:af:3f:fd:3d:23:60:fa:9f:60:e7:91:81:d2:7b:b5:f3:
         f8:82:7f:98:d5:ed:f2:a9:88:d8:6e:7c:61:ef:fc:dc:bb:27:
         52:3f:36:e0:99:54:c3:ad:4a:47:9f:83:17:b0:e3:75:7e:34:
         3f:92:24:31:33:ab:7a:1b:bb:20:1e:a1:10:2d:9c:4f:d6:87:
         32:96:c6:91:6a:e2:f5:3d:a2:98:b9:15:72:0c:71:d8:68:42:
         e2:fc:82:16:80:8f:b2:30:45:35:0f:7b:08:e2:40:ec:b0:8b:
         fa:3f:b0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:46 2024 by rpki-client on console-fra.rpki-client.org