Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/m6cULGk4CYz9m3spVwoqWlcmxOQ.roa
File:                     m6cULGk4CYz9m3spVwoqWlcmxOQ.roa (raw, json)
Hash identifier:          NYwYsQFAO5Xhwo0QujvbJvopTqkvIBNyO155/mC/jiM=
Subject key identifier:   9B:A7:14:2C:69:38:09:8C:FD:9B:7B:29:57:0A:2A:5A:57:26:C4:E4
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       0189BD2A13ADAA6306098C7B97BFC9FAA618
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/m6cULGk4CYz9m3spVwoqWlcmxOQ.roa
Signing time:             Thu 03 Aug 2023 20:49:58 +0000
ROA not before:           Thu 03 Aug 2023 20:49:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48716
IP address blocks:        81.31.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:bd:2a:13:ad:aa:63:06:09:8c:7b:97:bf:c9:fa:a6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Aug  3 20:49:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9ba7142c6938098cfd9b7b29570a2a5a5726c4e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3c:2e:b3:87:16:d9:25:0c:88:68:97:1d:e2:
                    04:03:34:13:75:da:cd:0c:b3:7e:6a:55:4a:14:af:
                    4f:d5:29:5d:1e:12:0f:a9:8f:db:01:22:bb:37:0b:
                    3c:f4:2b:f7:8d:83:e1:6b:f8:27:e6:17:7c:e4:75:
                    df:33:7d:7f:c9:32:c7:84:75:e2:50:40:8a:6a:4a:
                    d0:32:3d:f9:49:38:32:55:ec:06:02:e9:9e:d6:4a:
                    cd:e8:90:be:b6:c6:58:78:5e:ab:f2:65:60:72:db:
                    4b:51:d1:62:ff:76:ad:fc:94:be:3f:13:b7:0f:e1:
                    2d:6b:62:81:5b:ad:bd:15:d4:be:28:12:7e:2a:0a:
                    cd:2b:a7:48:e9:14:9a:f9:29:5d:35:2a:ae:50:3a:
                    11:f7:e8:2c:1a:13:a8:fd:a0:bf:ec:73:14:62:9c:
                    db:ec:03:5b:b2:16:36:73:40:5d:6f:ab:c8:87:79:
                    bd:19:6f:25:4b:51:e8:66:bf:51:ec:a4:e5:53:4d:
                    1e:4d:16:3c:4b:1e:0d:be:3f:8f:e3:49:5a:91:69:
                    41:6a:6f:95:7f:cc:c3:bf:fd:f7:b6:8e:0d:a3:c3:
                    46:d2:d9:56:c7:3a:6f:10:f1:f0:0b:c4:3a:81:61:
                    bc:41:dd:84:41:5b:05:51:df:26:91:f2:83:09:63:
                    98:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A7:14:2C:69:38:09:8C:FD:9B:7B:29:57:0A:2A:5A:57:26:C4:E4
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/m6cULGk4CYz9m3spVwoqWlcmxOQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.31.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:0f:00:7b:73:d7:17:f0:b6:3a:f1:6f:85:27:b1:43:df:55:
         30:ea:d8:41:d9:e4:33:f9:d4:c3:90:df:31:1f:95:3c:4c:24:
         b3:6c:53:4d:e4:66:18:89:c7:c9:6d:93:69:c4:df:b5:d1:2e:
         05:46:53:45:cb:06:5b:50:88:74:62:80:14:5a:80:f7:40:45:
         f7:2f:28:6f:dd:6b:0a:92:91:ee:05:d3:14:c3:dc:d1:19:a6:
         42:6f:a0:b1:93:f8:c3:74:ba:ad:c3:4a:e6:3b:aa:31:fc:8d:
         61:f7:fa:fd:e6:07:41:b7:3a:d4:8f:4c:9e:d7:89:0a:d6:77:
         f6:bd:f9:fd:58:fd:fa:58:19:d3:fc:41:46:32:2c:ee:fd:ad:
         a4:0a:0b:80:ac:cd:30:b1:76:24:0c:6e:15:4a:77:31:6a:0f:
         c9:6d:90:bf:a5:84:d2:f0:97:e9:e5:cb:55:21:fb:47:5e:c3:
         11:09:7e:72:25:6c:73:0c:53:f0:3f:38:ee:76:ec:b1:61:70:
         ef:35:a8:74:d9:5f:de:79:6c:9a:bc:2d:8a:6e:32:8f:61:6d:
         9d:b6:4c:36:b1:5f:ed:86:63:5f:db:03:45:a0:22:c0:d0:93:
         8f:fc:34:ff:c8:d6:60:13:b4:00:47:fa:5c:19:44:96:20:02:
         0b:2f:cd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:53 2024 by rpki-client on console-fra.rpki-client.org