Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6XyL1s1d6s4Q5UyMheAuWrY5elc.roa
File:                     6XyL1s1d6s4Q5UyMheAuWrY5elc.roa (raw, json)
Hash identifier:          qLNy7PFW/qxrJvmBjiyjVWw72/4XKGipNHF9C2vk5zk=
Subject key identifier:   E9:7C:8B:D6:CD:5D:EA:CE:10:E5:4C:8C:85:E0:2E:5A:B6:39:7A:57
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       01918EF84BFF6FCDA9040C96CDEC932DC0F9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6XyL1s1d6s4Q5UyMheAuWrY5elc.roa
Signing time:             Mon 26 Aug 2024 13:55:22 +0000
ROA not before:           Mon 26 Aug 2024 13:55:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214304
IP address blocks:        194.87.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 13 Oct 2024 09:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:8e:f8:4b:ff:6f:cd:a9:04:0c:96:cd:ec:93:2d:c0:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Aug 26 13:55:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e97c8bd6cd5deace10e54c8c85e02e5ab6397a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a3:28:7f:a4:9c:48:bd:4d:75:11:49:44:35:
                    fd:b9:ea:95:77:ea:fe:bb:a0:34:a7:03:64:84:02:
                    65:8d:cd:12:ee:8e:25:d1:15:99:27:15:c5:ec:9c:
                    58:be:3d:56:86:7b:96:c0:bd:08:c2:62:4f:37:02:
                    38:c5:e6:4a:27:23:53:07:75:44:25:29:36:63:32:
                    d1:82:17:5f:9b:90:79:f6:0e:ca:8d:b7:5e:41:c1:
                    b1:99:78:f7:20:72:f9:1a:bd:33:1b:f0:96:3f:00:
                    c4:4b:53:48:1a:da:83:45:e9:da:8c:73:11:6b:7a:
                    e9:2f:aa:4d:5c:a9:91:9a:20:2f:bd:b4:28:6a:cd:
                    80:37:e4:a0:ca:69:d0:b8:f0:f8:d0:4f:00:16:b5:
                    8c:56:a1:f7:9a:b5:68:5a:18:42:63:a8:67:e0:7f:
                    aa:53:fa:a3:07:98:e8:ac:7b:bb:c1:92:c2:79:be:
                    1e:00:15:4b:7e:0a:ef:e2:cb:d8:c1:ee:f6:01:4f:
                    44:a8:9b:21:6c:a8:90:ed:c7:75:70:e7:b9:0b:43:
                    a6:fa:0b:00:2d:32:1d:33:96:0e:e8:b4:ad:2d:97:
                    cf:ac:68:c7:8b:4e:d7:22:f6:de:db:2d:0b:f3:a2:
                    b7:b6:d6:e4:3c:62:93:3c:e0:30:79:92:a1:de:d7:
                    3d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7C:8B:D6:CD:5D:EA:CE:10:E5:4C:8C:85:E0:2E:5A:B6:39:7A:57
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6XyL1s1d6s4Q5UyMheAuWrY5elc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.87.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:01:0e:34:19:37:e6:bc:f9:c6:a8:b4:2f:ad:c3:82:8c:38:
         05:31:b6:f1:23:25:85:35:c0:bb:68:42:72:ac:a7:07:84:47:
         8e:c9:f7:45:af:d5:7a:4c:1e:d3:70:3a:cf:83:43:d1:06:f9:
         49:a9:c8:bb:e5:2f:dd:e1:95:39:59:ca:b3:45:8d:13:3d:05:
         20:12:22:40:c3:9c:7a:1e:14:7e:dc:76:61:fd:a8:a7:d3:5a:
         ff:87:13:00:4a:36:92:27:ac:aa:f7:7e:ac:74:36:e8:ed:83:
         f3:d5:78:58:0a:f9:bd:06:24:f0:31:13:98:cd:4b:60:03:36:
         f8:45:da:2f:0e:71:60:6e:b5:e5:46:a4:d5:30:34:03:73:2f:
         1f:71:28:e5:51:6d:22:92:10:02:f4:19:e7:3e:85:b9:6f:4a:
         3e:ed:5d:e6:b4:15:20:bb:0c:22:a1:92:8f:c8:b2:b8:b3:26:
         31:90:94:33:85:1b:bc:61:ae:eb:8d:af:9d:33:3b:d4:e4:2d:
         47:7d:42:12:f0:86:25:b1:14:5a:0b:b1:d7:b0:ce:05:95:c9:
         c8:41:eb:14:93:a8:0f:fb:2b:76:ae:40:c2:35:9b:8d:b3:2c:
         77:94:a2:13:37:61:b2:61:44:20:42:56:67:eb:5e:bf:f2:f9:
         f6:2a:fd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 13 12:58:27 2024 by rpki-client on console-ams.rpki-client.org