Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/k6kZWocTmvnUrKVxtN8eiPcsIwc.roa
File:                     k6kZWocTmvnUrKVxtN8eiPcsIwc.roa (raw, json)
Hash identifier:          XewswyryjiNrYDhvckEHp+x/oun1xfUNBqFLjsM6cbQ=
Subject key identifier:   93:A9:19:5A:87:13:9A:F9:D4:AC:A5:71:B4:DF:1E:88:F7:2C:23:07
Certificate issuer:       /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial:       01856C25EB3AD109AD0E412BC357B3566B8E
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/k6kZWocTmvnUrKVxtN8eiPcsIwc.roa
Signing time:             Sun 01 Jan 2023 07:05:02 +0000
ROA not before:           Sun 01 Jan 2023 07:05:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     63023
IP address blocks:        185.39.51.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:29:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:25:eb:3a:d1:09:ad:0e:41:2b:c3:57:b3:56:6b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
        Validity
            Not Before: Jan  1 07:05:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=93a9195a87139af9d4aca571b4df1e88f72c2307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:92:8e:be:d6:bd:98:a0:04:9a:89:c5:63:4c:
                    d8:17:14:02:f7:1f:4f:15:7c:ec:14:6d:34:46:4a:
                    c2:7e:e9:4b:bb:bf:c7:e0:90:a9:30:79:52:0e:24:
                    5e:a1:bf:21:cc:af:66:ca:cc:e2:2a:f7:4e:e4:53:
                    2e:08:3c:99:85:13:73:02:bc:c3:bb:70:fd:eb:df:
                    5f:fb:ad:03:1f:fb:ff:d7:55:53:b3:33:4b:8a:06:
                    a3:4d:71:02:40:c0:17:18:5e:4b:17:6c:65:aa:a1:
                    19:10:a7:02:49:fa:e7:42:25:a5:b2:90:d5:00:49:
                    6c:06:ea:3e:57:b5:da:9a:d8:ba:6a:d9:0d:93:cf:
                    24:c6:e6:d5:1d:19:85:23:6a:0c:47:45:39:57:a8:
                    3d:d9:e9:6c:14:60:32:63:b7:e1:79:4e:95:26:0b:
                    56:10:13:c6:32:ff:1b:1a:86:0c:99:26:c2:e2:b2:
                    e5:b6:e0:d6:37:bb:44:bb:39:30:ae:bf:86:2f:cf:
                    b9:92:a6:f6:8a:af:c2:fa:86:0b:e5:95:26:a8:fd:
                    72:64:51:ce:f9:04:65:be:98:db:3d:43:24:07:bd:
                    c5:81:bb:07:a6:1a:e1:46:49:1b:a9:57:44:c5:f5:
                    0f:df:b2:70:05:14:59:6d:44:92:a4:05:e3:73:c2:
                    0c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A9:19:5A:87:13:9A:F9:D4:AC:A5:71:B4:DF:1E:88:F7:2C:23:07
            X509v3 Authority Key Identifier:
                keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/k6kZWocTmvnUrKVxtN8eiPcsIwc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.39.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:e5:8b:63:df:43:85:f2:4e:5b:8d:e0:80:c7:f4:40:44:ed:
         35:36:89:f2:d5:7d:ff:35:25:36:0c:6a:52:f6:37:42:d8:aa:
         00:f3:f5:2c:00:11:87:7b:f9:b6:53:04:08:dd:d1:c0:95:a7:
         6d:7c:15:4c:b7:9a:c8:9b:7a:1b:35:7f:ed:ee:54:42:33:8e:
         71:a0:d5:8d:6f:96:2d:55:f8:f7:f6:bb:65:5d:fb:e0:41:e3:
         3a:88:86:92:9e:54:46:a2:a2:71:6d:a2:34:8c:fb:af:f0:82:
         29:ae:24:df:19:7d:35:0a:21:a8:bc:7c:05:53:51:56:c9:49:
         ad:ba:fb:76:ee:6a:61:cf:4a:91:8a:8f:ae:3e:84:38:39:68:
         2f:5d:b5:79:9f:da:c5:50:a4:f0:66:1e:84:98:07:3b:fb:88:
         28:da:14:f2:ea:69:c7:67:8e:0b:aa:5b:90:d7:e1:3c:ac:55:
         ae:3e:1a:d8:cb:d3:e6:f3:b7:13:70:bb:6c:75:02:5e:c3:83:
         0d:ac:be:b9:f6:c7:77:76:62:98:1c:fb:eb:38:36:a8:68:bc:
         82:e3:f8:6a:d5:a2:5a:0b:b1:86:a8:86:16:da:0d:d1:02:b7:
         54:da:9a:0e:db:15:23:c9:2e:2d:bb:19:5c:49:b1:bb:a1:d0:
         eb:c9:a2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:07 2024 by rpki-client on console-ams.rpki-client.org