Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/6iMUe58HNOuh9Jlk_wjw81eilUM.roa
File:                     6iMUe58HNOuh9Jlk_wjw81eilUM.roa (raw, json)
Hash identifier:          eBGRMEtfcOzoQ2xrbQcFXmX0m86u3upPWxw/L57Lo3k=
Subject key identifier:   EA:23:14:7B:9F:07:34:EB:A1:F4:99:64:FF:08:F0:F3:57:A2:95:43
Certificate issuer:       /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial:       018F73A0BFC527039C83B87CF901B5B18B6A
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/6iMUe58HNOuh9Jlk_wjw81eilUM.roa
Signing time:             Mon 13 May 2024 20:24:25 +0000
ROA not before:           Mon 13 May 2024 20:24:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215531
IP address blocks:        2a06:b3c0::/29 maxlen: 32

Validation:               Failed, certificate revoked on Sat 15 Jun 2024 05:38:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:73:a0:bf:c5:27:03:9c:83:b8:7c:f9:01:b5:b1:8b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
        Validity
            Not Before: May 13 20:24:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ea23147b9f0734eba1f49964ff08f0f357a29543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:be:5a:e6:b8:e4:55:a9:62:f6:e7:f6:b6:fa:
                    32:12:9d:9d:ee:f6:39:9a:f1:fc:bf:e3:3f:21:cb:
                    bf:31:e7:44:ca:60:58:87:65:c0:e5:9c:73:a4:37:
                    d3:57:06:68:2a:e2:b9:f0:59:ba:dd:e1:a9:cb:ba:
                    36:93:73:cb:3a:0d:6f:95:e7:41:5b:73:6e:77:d3:
                    77:67:5f:d4:e9:95:85:d6:db:11:82:92:f3:2c:43:
                    19:0d:47:97:23:c8:5a:8f:13:1e:3d:48:6a:56:fb:
                    39:a0:fb:5f:6e:cb:12:59:71:2d:95:68:89:c8:dc:
                    3b:79:08:cc:87:72:b7:22:bf:5d:53:96:1f:49:e9:
                    1c:c0:6b:85:a3:e0:b0:33:ab:2c:24:06:33:b2:76:
                    0c:03:6e:bd:f0:c3:7f:ff:81:82:c4:d3:aa:76:51:
                    c9:eb:a1:c8:21:a4:39:d4:09:59:e3:80:3f:bc:99:
                    d6:de:74:e8:a6:25:17:0c:49:fc:b0:53:2a:30:c7:
                    91:f0:0e:df:1f:1e:74:4f:30:39:c9:06:e3:d7:f1:
                    fa:66:e7:4a:74:32:9b:5d:5b:2a:fb:5b:d7:84:7d:
                    04:dd:9e:5a:b6:ea:f7:40:9c:43:5e:0a:68:1e:df:
                    32:5f:e4:44:0e:cf:0c:5f:2b:06:ed:5c:31:98:94:
                    2e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:23:14:7B:9F:07:34:EB:A1:F4:99:64:FF:08:F0:F3:57:A2:95:43
            X509v3 Authority Key Identifier:
                keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/6iMUe58HNOuh9Jlk_wjw81eilUM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:b3c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         7f:72:88:ea:a4:50:aa:2f:90:ee:a1:54:6e:6a:2d:14:a7:be:
         88:53:9e:4a:da:fd:40:a7:8f:c2:55:62:b9:c3:e6:6f:11:6a:
         8e:ff:33:72:be:9e:84:58:f7:c4:56:90:13:88:9e:7b:44:46:
         4f:1b:77:c3:de:f0:4a:6d:e8:80:38:fc:ac:e3:31:0b:1a:d5:
         38:d5:63:bb:6f:bd:eb:0e:3e:db:9a:1e:23:a8:98:34:d7:d1:
         ee:18:43:f4:72:8c:0a:9a:ed:46:4a:ba:94:e9:fd:86:27:13:
         22:a2:cb:fc:83:a7:22:b2:d5:44:21:7a:58:5c:4a:15:98:2b:
         03:d3:be:94:0f:af:21:04:96:be:1a:34:e3:77:9f:2a:ce:90:
         0a:e2:54:39:71:03:8f:2f:39:29:18:51:4e:b9:e4:8e:4b:a6:
         2e:db:72:f3:47:17:99:73:16:06:12:c1:bc:2b:5e:06:e7:f7:
         cf:51:cb:f0:37:b6:40:fc:8b:c1:1f:4a:45:31:60:7e:3f:30:
         7b:c7:7a:66:b3:30:dd:ed:66:43:12:d1:05:6e:99:56:90:2f:
         15:ea:71:56:11:06:91:a4:3b:15:bd:90:ca:a2:80:ce:81:bb:
         42:ce:0a:e0:3a:89:92:68:08:72:e2:ed:d2:9c:5a:16:70:d4:
         fa:33:75:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 06:11:30 2024 by rpki-client on console-fra.rpki-client.org