Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/6AdB2Rg1mXXaXImhnEIHffsMKqI.roa
File:                     6AdB2Rg1mXXaXImhnEIHffsMKqI.roa (raw, json)
Hash identifier:          97EnAr5Fq8RNwl3e0Pkd7wBAxAtZdBZNKg+vQqMrpI8=
Subject key identifier:   E8:07:41:D9:18:35:99:75:DA:5C:89:A1:9C:42:07:7D:FB:0C:2A:A2
Certificate issuer:       /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial:       018571832A69C2679D7F274383568DAEAAD3
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/6AdB2Rg1mXXaXImhnEIHffsMKqI.roa
Signing time:             Mon 02 Jan 2023 08:04:59 +0000
ROA not before:           Mon 02 Jan 2023 08:04:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     54994
IP address blocks:        151.236.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 14:35:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:83:2a:69:c2:67:9d:7f:27:43:83:56:8d:ae:aa:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
        Validity
            Not Before: Jan  2 08:04:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e80741d918359975da5c89a19c42077dfb0c2aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c1:32:b4:0f:a1:1f:05:1b:92:46:e3:70:62:
                    93:db:50:65:8d:e1:4b:8a:02:28:3b:49:e1:28:92:
                    d8:67:07:ee:d5:9d:2d:b2:b9:83:a6:78:34:a1:47:
                    58:50:e4:83:02:27:90:c3:6c:fc:8f:a4:e0:06:ff:
                    be:92:49:1e:c3:65:d9:b2:c7:80:d4:61:b9:21:54:
                    04:9f:c8:c3:c1:e5:68:94:23:a2:ee:c8:8b:e2:11:
                    13:d1:7b:53:fd:f0:c0:26:08:f5:50:76:49:2b:fb:
                    01:26:04:86:24:d5:ea:df:2c:44:ad:89:aa:9d:a9:
                    4d:e6:31:5b:46:68:41:91:79:77:8d:13:0c:31:e6:
                    87:23:97:bb:fb:46:82:4d:24:7c:a6:8d:2e:4f:c4:
                    50:15:dd:77:c7:62:27:06:19:6c:4b:e4:99:88:c4:
                    d4:64:5c:b2:8b:84:db:ce:c0:d1:85:2f:be:09:01:
                    37:a4:3e:35:a5:35:a1:b2:ab:d1:17:45:23:08:f9:
                    3d:e1:f3:3c:86:b1:ba:ad:30:90:dd:33:9a:29:c4:
                    22:c8:0f:09:9b:45:94:51:6e:31:e7:f1:1c:f9:3d:
                    bc:79:d3:62:05:33:a8:cc:a9:c9:e9:6e:49:03:85:
                    9b:fd:8a:53:4e:0e:e0:78:f1:f4:f6:8e:42:06:67:
                    97:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:07:41:D9:18:35:99:75:DA:5C:89:A1:9C:42:07:7D:FB:0C:2A:A2
            X509v3 Authority Key Identifier:
                keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/6AdB2Rg1mXXaXImhnEIHffsMKqI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.236.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:55:ec:4e:6f:4d:ae:7c:ae:5a:0e:03:9f:29:19:8c:68:41:
         18:a3:4c:17:9c:cc:aa:4b:af:74:00:c7:24:41:e1:fd:df:0e:
         a3:14:7a:b0:f9:6e:29:1c:b3:8b:5c:d7:e9:83:22:5d:7e:a9:
         5a:60:46:43:30:a3:d4:69:7f:1b:ec:ea:ed:79:23:4d:39:12:
         b6:95:ec:ec:03:4a:70:96:bf:da:fe:d5:4d:17:b3:72:c4:48:
         b0:ac:23:59:29:1e:e0:65:e5:04:2e:ca:ce:37:ee:6d:59:ea:
         68:83:0a:f8:d1:37:21:90:07:2c:32:0f:b3:cf:a6:71:c0:f0:
         ad:75:e6:04:7f:f0:27:68:8c:67:4d:3e:8c:5d:a5:b1:a0:00:
         5e:19:bc:78:ed:aa:f9:f6:92:7f:e7:92:4c:b7:7f:9b:e7:a0:
         94:db:a6:6c:b8:6b:46:33:4d:c3:e1:0d:0c:14:ae:eb:06:c8:
         da:c7:b9:46:0a:f9:c8:8d:ac:d5:82:45:6c:07:37:df:27:92:
         95:ac:34:ce:a7:21:1f:f7:3c:01:27:9b:b0:73:01:37:37:21:
         d9:db:fb:5c:ca:59:c1:8f:61:c5:4d:16:46:27:a0:77:cd:8f:
         4d:b6:b6:e4:f2:84:20:3b:d3:60:af:8a:a1:b0:b9:03:71:12:
         6c:87:3d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:50 2024 by rpki-client on console-fra.rpki-client.org