Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6KIhKMeHK-_8hpEKsPvmvx7xwns.roa
File:                     6KIhKMeHK-_8hpEKsPvmvx7xwns.roa (raw, json)
Hash identifier:          TUVT2Szgmkftb91pQCXPvBWFbiee/Jr3/EHN4XTa3E8=
Subject key identifier:   E8:A2:21:28:C7:87:2B:EF:FC:86:91:0A:B0:FB:E6:BF:1E:F1:C2:7B
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       018B5A6209D8DA4BF6AE0991DCE99C9286E9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6KIhKMeHK-_8hpEKsPvmvx7xwns.roa
Signing time:             Mon 23 Oct 2023 02:34:16 +0000
ROA not before:           Mon 23 Oct 2023 02:34:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197842
IP address blocks:        164.40.185.0/24 maxlen: 24
                          93.123.74.0/24 maxlen: 24
                          93.123.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Oct 2023 06:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:5a:62:09:d8:da:4b:f6:ae:09:91:dc:e9:9c:92:86:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Oct 23 02:34:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e8a22128c7872beffc86910ab0fbe6bf1ef1c27b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c2:21:5f:b8:94:e3:bf:79:17:ab:be:70:fe:
                    01:78:b8:24:b0:14:ca:9a:a0:4f:c2:ee:a3:01:8f:
                    14:40:c6:0b:ff:2d:2b:67:64:64:7b:0f:8e:ee:76:
                    d7:39:0e:f9:42:d8:22:48:4c:1c:4c:16:98:f8:fd:
                    db:8e:89:f8:dd:14:a1:7e:5c:fd:84:e7:67:c3:2e:
                    10:75:d1:a1:a3:ac:6c:74:e6:ae:61:8c:e1:91:9b:
                    ca:be:fa:e1:75:68:dd:2e:a5:cf:f8:3c:fa:c9:95:
                    67:c9:31:88:58:a4:bb:6b:22:02:92:d1:ff:c8:77:
                    b2:41:e9:d1:e7:23:8c:23:a8:35:9f:49:26:c0:fd:
                    9b:37:a0:68:06:08:fd:76:dc:6b:94:c7:ca:b1:bc:
                    9d:0b:6e:78:08:e6:35:8a:f5:1d:cb:34:ba:d9:c1:
                    c0:5d:ae:d2:cd:7f:3f:d4:e9:02:01:59:12:57:f3:
                    5d:ad:9b:ba:02:fe:ec:7b:b9:f4:2b:9b:17:f4:f0:
                    f8:33:ff:ce:6c:fd:a3:5f:ff:15:be:d8:62:d1:46:
                    44:28:9a:39:3a:43:61:d6:07:87:13:c9:be:f0:42:
                    2b:58:ee:30:da:10:5d:b9:f3:9f:19:2d:2f:de:08:
                    19:f4:1e:a0:35:68:1d:58:39:26:c4:f2:15:49:7a:
                    11:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A2:21:28:C7:87:2B:EF:FC:86:91:0A:B0:FB:E6:BF:1E:F1:C2:7B
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6KIhKMeHK-_8hpEKsPvmvx7xwns.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.123.74.0/23
                  164.40.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:82:bb:82:bb:48:0e:94:64:81:8f:cb:65:34:64:06:67:3d:
         13:75:a1:32:72:41:d7:06:4f:f4:78:a0:b9:fa:fe:79:f8:19:
         23:04:ff:71:76:34:a2:b8:82:25:25:a7:e2:f7:80:bb:d0:00:
         58:07:1f:41:29:cc:6f:1d:39:b1:69:82:38:9f:4d:aa:a2:9b:
         e3:92:55:87:20:ee:2d:7a:6c:03:a0:81:2f:7b:e8:34:6c:7a:
         e6:5f:a5:70:0d:f8:cc:78:4b:08:72:18:e0:e0:93:0e:68:3b:
         7e:e7:ac:45:d9:78:61:c6:31:4b:8a:21:ee:66:30:09:92:ac:
         ae:b7:27:25:55:94:19:81:83:43:fb:de:0b:02:63:e0:28:28:
         6d:72:ea:55:dc:cc:09:2a:e9:56:22:e0:06:6f:2c:5d:ac:35:
         f0:c1:bc:b1:74:6d:fe:7b:1f:59:cc:5a:17:e3:87:8b:c8:7a:
         de:1f:49:c9:d7:77:91:49:dd:a8:e9:bf:bd:7a:46:42:50:78:
         58:c6:5a:92:bd:59:da:8f:0f:a7:9e:db:f2:2d:97:9d:31:a3:
         4f:b2:ce:35:8a:68:cf:87:a2:a0:0f:6e:3e:18:de:84:f1:2a:
         93:82:f7:25:01:cb:cb:ac:ba:39:24:d4:6a:7b:42:fb:de:f5:
         b0:54:28:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:24 2024 by rpki-client on console-ams.rpki-client.org