Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/VoefupRsuPfZAhhgOT7IibPHaKQ.roa
File:                     VoefupRsuPfZAhhgOT7IibPHaKQ.roa (raw, json)
Hash identifier:          NeteNm21w5Xzgg3b2mxWJWVuKqDGslgjW/AdSUTwqxQ=
Subject key identifier:   56:87:9F:BA:94:6C:B8:F7:D9:02:18:60:39:3E:C8:89:B3:C7:68:A4
Certificate issuer:       /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial:       018AFEC2DD35D35D24DAEBB730384E0C217A
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/VoefupRsuPfZAhhgOT7IibPHaKQ.roa
Signing time:             Thu 05 Oct 2023 07:34:58 +0000
ROA not before:           Thu 05 Oct 2023 07:34:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.23.6.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 13 Oct 2023 09:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:fe:c2:dd:35:d3:5d:24:da:eb:b7:30:38:4e:0c:21:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
        Validity
            Not Before: Oct  5 07:34:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=56879fba946cb8f7d9021860393ec889b3c768a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:93:1a:77:a8:98:02:1a:2d:2c:c6:bf:5a:b6:
                    f8:6a:6e:7d:18:c1:d9:9c:dc:49:40:31:4b:fd:58:
                    34:7e:f1:95:1a:58:bf:63:a0:d5:97:c6:0d:e8:c9:
                    54:6d:62:56:69:7f:d3:25:18:3b:5f:59:7a:53:54:
                    3f:56:4b:79:e5:7d:0a:ca:56:ae:e8:53:9a:96:04:
                    50:d2:f5:f4:31:c4:71:25:d4:18:ba:61:b1:66:19:
                    69:2c:27:ef:b9:31:c0:d0:b7:75:2a:5d:dd:e5:db:
                    36:e3:fa:56:01:45:41:ad:90:03:24:e2:2b:9d:00:
                    54:34:47:29:ed:66:17:76:2d:46:ae:20:1c:71:65:
                    12:77:65:27:e2:eb:0d:d2:50:f4:fc:43:8f:d6:83:
                    40:b5:37:69:eb:39:63:63:f4:5b:d2:7f:f4:38:6a:
                    7c:42:8c:04:7b:3c:67:c2:e3:c5:90:d0:b8:b7:c5:
                    1a:6b:eb:7e:16:16:4d:43:44:5c:d5:19:5b:60:d1:
                    7c:99:1b:c0:6c:4c:4c:2c:a1:59:62:cf:38:e8:fc:
                    24:9b:4d:26:c8:53:a0:c6:34:dc:db:7a:36:d3:d9:
                    76:a8:3a:d3:40:e8:4c:e3:8c:52:f0:2f:9f:2a:62:
                    9a:1b:50:6d:3a:51:40:3a:f5:73:a6:64:4a:af:7a:
                    64:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:87:9F:BA:94:6C:B8:F7:D9:02:18:60:39:3E:C8:89:B3:C7:68:A4
            X509v3 Authority Key Identifier:
                keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/VoefupRsuPfZAhhgOT7IibPHaKQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.23.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:34:ef:e3:25:bd:11:4b:4b:d4:32:de:fd:88:fe:9c:ff:dd:
         4e:40:60:ff:82:2d:a5:46:09:59:f4:6c:2b:61:33:28:01:9f:
         0c:ad:dc:39:0b:fc:a5:2c:53:a4:8a:e8:04:47:4a:c9:c6:80:
         1f:a9:4a:d5:d4:0c:24:4b:14:3b:a7:2c:8c:d8:b9:44:7f:02:
         2f:d1:60:f3:82:41:eb:5d:74:76:fe:64:b6:f9:7e:73:af:ed:
         64:35:0c:cb:15:fa:6e:02:4e:31:25:e1:52:29:85:17:c1:69:
         dd:f4:1a:42:46:58:26:6a:6f:fb:e6:d5:b5:a0:90:c9:e5:d9:
         16:1a:d2:75:6d:d4:79:bf:81:2f:41:14:1d:4b:9a:08:fb:91:
         74:32:1e:49:75:41:42:5f:32:d8:6c:1b:a1:08:e8:9e:a8:3f:
         98:ec:e8:b8:62:4e:f5:57:5b:dd:67:07:ef:32:36:17:d5:f5:
         63:b5:11:46:7e:f6:f7:d8:0f:c3:78:4f:27:0a:49:89:f5:42:
         21:a0:3c:48:e4:dd:bf:f7:fc:05:e1:82:16:dc:58:2d:0b:5c:
         49:eb:a1:ec:f8:0c:3d:0c:bc:e7:b7:b4:72:bc:c0:3c:d3:a6:
         4c:6d:f9:d9:a3:64:e4:23:7f:fc:c6:ab:f0:65:e6:b7:27:22:
         f4:ba:48:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:52 2024 by rpki-client on console-fra.rpki-client.org