Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/6m7rr0Gg1dFznW3Of3GGaJ1FnLo.roa
File:                     6m7rr0Gg1dFznW3Of3GGaJ1FnLo.roa (raw, json)
Hash identifier:          MCzL7Htxt1wJrWLpd3YESF8rzuLqCq8SOrW42ZPR1DQ=
Subject key identifier:   EA:6E:EB:AF:41:A0:D5:D1:73:9D:6D:CE:7F:71:86:68:9D:45:9C:BA
Certificate issuer:       /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial:       018B13FC24319C7EAE596E590E4C1C4FE0B0
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/6m7rr0Gg1dFznW3Of3GGaJ1FnLo.roa
Signing time:             Mon 09 Oct 2023 10:29:33 +0000
ROA not before:           Mon 09 Oct 2023 10:29:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197842
IP address blocks:        89.251.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 16 Oct 2023 19:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:13:fc:24:31:9c:7e:ae:59:6e:59:0e:4c:1c:4f:e0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
        Validity
            Not Before: Oct  9 10:29:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ea6eebaf41a0d5d1739d6dce7f7186689d459cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:83:27:20:ad:f6:64:42:2d:9a:60:6c:e5:a3:
                    58:91:09:ce:9d:f2:44:7b:ae:c3:0a:0e:7b:d2:8f:
                    34:fd:2c:83:2e:85:9a:9d:36:20:5a:bb:c1:65:b6:
                    c4:6f:5c:18:85:28:75:ea:2b:2b:86:cb:78:5b:32:
                    77:44:5d:ca:04:5b:4c:97:f5:f8:41:e7:67:b9:a3:
                    b5:44:df:db:ec:9d:eb:cd:93:b8:34:63:d1:ea:23:
                    7e:87:ff:8b:38:08:1b:20:33:a9:73:ba:6b:f5:7c:
                    37:bf:85:02:1a:37:47:a9:c0:8e:7d:9d:46:8b:c4:
                    d9:d7:70:d1:ca:8b:71:4f:74:cc:ab:46:6e:fb:16:
                    82:0c:d7:ab:fe:9c:49:66:38:61:07:67:05:7f:b9:
                    8d:96:22:38:ca:e9:2a:d6:c9:82:a4:7f:52:1f:bd:
                    66:eb:57:43:ee:22:cb:a3:15:b0:db:76:1b:13:d2:
                    9d:51:69:b5:ca:0d:21:90:39:31:10:3c:55:0e:0f:
                    b7:b9:bf:b1:26:0f:20:75:f7:da:aa:e7:3c:ca:cc:
                    f4:66:3b:e5:55:eb:b8:bf:26:e9:34:65:2c:e9:13:
                    0c:c8:df:f3:61:40:a9:51:6d:9f:e1:b7:7c:e3:2a:
                    f1:d4:69:21:d8:43:a2:ea:8c:f4:c5:4c:34:ae:ec:
                    ba:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6E:EB:AF:41:A0:D5:D1:73:9D:6D:CE:7F:71:86:68:9D:45:9C:BA
            X509v3 Authority Key Identifier:
                keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/6m7rr0Gg1dFznW3Of3GGaJ1FnLo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.251.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:84:7e:06:e7:ed:3d:3a:f0:9f:f5:60:24:0d:c5:71:74:04:
         f1:b9:38:5f:6f:85:4e:2b:a0:8d:18:58:54:24:b6:c0:f9:be:
         a9:5f:3e:4e:d7:7d:dd:db:13:e8:7d:42:47:c1:8d:1f:5a:f1:
         86:93:ef:4a:79:1b:8b:89:10:66:14:37:0c:a8:af:e1:2d:f0:
         ac:8b:75:b3:f1:f4:e5:16:84:ea:92:38:57:bc:69:09:b4:0e:
         12:63:41:a1:7d:ff:1f:11:fd:61:39:d1:de:86:e4:e7:88:3a:
         aa:b3:10:a5:c1:71:28:6a:1a:1a:32:52:e2:1a:31:49:d6:49:
         ce:35:2b:fa:a7:9c:b2:11:a3:36:c8:00:da:8b:98:6f:cc:9a:
         b5:12:ae:4c:7b:b8:4d:2b:5c:42:55:70:58:3c:bd:ff:00:ea:
         c5:c0:20:1f:e2:d9:d7:65:25:85:1e:0f:52:77:c0:ea:bb:9c:
         4a:c5:3f:f0:96:21:df:ca:48:7b:86:b9:b4:57:6a:8a:11:b8:
         a8:7a:24:0b:dc:1d:62:7f:28:77:84:e7:c6:77:32:fe:f2:4c:
         d0:c5:02:07:d4:3a:71:a6:16:a4:fd:ce:8f:81:51:b7:c7:a1:
         8d:1b:93:4f:03:40:0b:c4:05:13:ce:b5:d1:c8:45:60:3f:a6:
         b8:48:d5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org