Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/a6iQMEW6yxR091u3ET0ruv_Zbkk.roa
File:                     a6iQMEW6yxR091u3ET0ruv_Zbkk.roa (raw, json)
Hash identifier:          1+t3m/Q5yergevP9j9BEXFn7xixg/sVUM+BO7M5/dlg=
Subject key identifier:   6B:A8:90:30:45:BA:CB:14:74:F7:5B:B7:11:3D:2B:BA:FF:D9:6E:49
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       019248B93009FA193C693EA1470A11A51C27
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/a6iQMEW6yxR091u3ET0ruv_Zbkk.roa
Signing time:             Tue 01 Oct 2024 15:35:48 +0000
ROA not before:           Tue 01 Oct 2024 15:35:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     198160
IP address blocks:        5.83.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 26 Oct 2024 22:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:48:b9:30:09:fa:19:3c:69:3e:a1:47:0a:11:a5:1c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Oct  1 15:35:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6ba8903045bacb1474f75bb7113d2bbaffd96e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:59:c9:3f:e1:08:c7:2c:fb:68:18:11:e5:
                    aa:05:c6:42:37:ae:9f:b1:4f:f8:57:82:91:85:d6:
                    a5:fd:6a:6a:90:98:a6:c2:d3:c8:7d:5c:ce:8b:ba:
                    7f:91:11:9f:03:7f:13:19:43:30:4e:7d:82:e0:33:
                    11:04:98:eb:3d:88:3a:5e:47:1c:22:7a:1f:0f:a2:
                    4e:c7:31:25:5f:eb:39:0f:b0:95:fd:79:18:be:46:
                    58:74:8e:c3:11:30:2a:9b:60:47:fb:08:fa:45:9f:
                    65:da:db:5b:23:a9:3b:38:3d:d2:65:fd:87:88:84:
                    6a:8c:5f:96:2a:1f:8b:9f:17:13:bf:31:ae:4f:d8:
                    1a:27:71:ac:73:e8:2f:43:c8:5f:0f:44:0a:fd:50:
                    be:7f:69:f0:a5:26:f2:c3:1e:e7:09:10:6f:be:ed:
                    64:a2:24:fe:1b:82:74:50:d1:66:e6:a6:fe:f9:d7:
                    a1:5f:c0:ad:cf:e0:d8:31:d8:1a:bd:3f:51:59:0f:
                    00:fd:8c:64:17:e1:f1:ea:2c:20:66:3b:5a:f5:57:
                    f5:8b:fb:a3:d5:46:bf:18:2d:ca:e5:1e:69:4f:23:
                    9e:e7:a5:df:cc:51:dd:b3:c7:78:b0:51:3c:30:55:
                    70:66:70:22:d3:4d:c9:29:ba:64:bb:33:3d:6f:80:
                    d0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A8:90:30:45:BA:CB:14:74:F7:5B:B7:11:3D:2B:BA:FF:D9:6E:49
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/a6iQMEW6yxR091u3ET0ruv_Zbkk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:2e:6e:18:ff:b3:2f:79:28:9e:fa:c6:85:f0:4a:8e:ef:79:
         2c:85:bb:95:4b:15:46:a0:a3:b7:5e:cc:21:d9:d0:b1:44:3f:
         36:14:5a:3a:b4:bf:92:57:55:26:ee:3f:35:09:c2:2d:03:95:
         aa:1b:69:62:30:8f:6f:d3:27:e9:90:4f:b4:d7:1b:29:b2:36:
         ac:49:38:db:69:a7:49:f1:02:74:5a:b5:5e:c0:ad:e0:a4:c6:
         e9:60:ec:59:f2:10:4d:af:ef:83:71:38:59:c5:9d:45:91:d5:
         51:37:10:11:8b:db:08:4f:be:00:9c:01:f8:21:ab:b6:6b:9b:
         f2:48:53:25:8b:7a:b3:ce:a6:13:96:64:59:59:44:84:1a:dc:
         34:9b:dc:38:f1:21:5d:fe:50:ae:b6:99:ba:0e:da:7e:5e:18:
         ea:6d:c3:44:f0:61:39:dc:6e:dd:12:05:cc:cd:76:dc:31:8e:
         2e:0f:10:07:22:77:e3:82:6b:e4:c8:c8:e4:fd:ef:d6:7f:e5:
         14:d5:23:26:9c:63:1f:a1:04:f9:87:41:7a:20:d0:60:41:62:
         6e:91:25:b2:f6:88:fb:5e:ad:9b:17:18:9d:b2:63:3a:50:70:
         5b:03:76:b1:2d:a3:e2:d8:00:0d:c3:a5:d4:d3:51:62:77:f6:
         b0:62:9a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 27 01:05:54 2024 by rpki-client on console-fra.rpki-client.org