Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/6-tNy1UeKo8rZS3M4yYBODvLTrM.roa
File:                     6-tNy1UeKo8rZS3M4yYBODvLTrM.roa (raw, json)
Hash identifier:          cMWcseWnxpkcUwmNLKMKlYaLEuWSIUeKKdh7CWdNZPk=
Subject key identifier:   EB:EB:4D:CB:55:1E:2A:8F:2B:65:2D:CC:E3:26:01:38:3B:CB:4E:B3
Certificate issuer:       /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial:       018B887ED72BB5F762BF90B3E19E423ED8CA
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/6-tNy1UeKo8rZS3M4yYBODvLTrM.roa
Signing time:             Wed 01 Nov 2023 01:28:15 +0000
ROA not before:           Wed 01 Nov 2023 01:28:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50902
IP address blocks:        185.253.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:31:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:88:7e:d7:2b:b5:f7:62:bf:90:b3:e1:9e:42:3e:d8:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
        Validity
            Not Before: Nov  1 01:28:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ebeb4dcb551e2a8f2b652dcce32601383bcb4eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:be:b4:42:dd:4e:a0:ff:d2:54:33:48:32:1c:
                    4f:7a:0c:93:a1:61:ef:19:30:50:ff:7f:55:c9:27:
                    49:b1:76:c0:8b:51:de:93:f7:e7:4c:a8:e2:99:18:
                    31:02:76:b8:47:39:2e:21:2a:86:d2:21:0c:2e:a9:
                    ce:c2:82:e0:5f:54:02:61:8b:5a:d1:f8:6a:8b:3a:
                    26:f2:88:94:71:16:7e:04:87:3d:c5:67:38:5b:fa:
                    06:d1:3b:e2:83:fa:86:23:36:af:7c:2b:8f:24:d1:
                    96:3f:c1:be:76:e6:c1:bb:f5:fd:72:73:2a:e3:e1:
                    b7:3e:a1:58:07:38:6c:32:66:37:d5:ed:a4:4d:3d:
                    f5:ab:19:0e:cd:f4:70:af:fb:3b:10:8d:48:a6:37:
                    36:ff:30:83:c7:c3:54:c0:09:bc:8c:38:59:ff:52:
                    00:16:33:8d:39:9d:ef:4d:9a:fb:95:3f:6a:4a:ff:
                    e1:d3:44:4f:f0:e9:de:e8:fb:b6:9a:54:16:6a:8d:
                    2e:ac:8b:31:7a:10:43:58:d4:20:9f:1f:12:91:d2:
                    e6:c4:e6:87:12:1a:f9:73:3d:dc:d5:d3:2b:46:95:
                    ca:04:29:e3:28:5b:6e:db:58:44:e1:58:4c:ea:9f:
                    90:71:9d:f2:82:d1:6e:89:6f:d2:7b:65:5a:29:55:
                    a4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EB:4D:CB:55:1E:2A:8F:2B:65:2D:CC:E3:26:01:38:3B:CB:4E:B3
            X509v3 Authority Key Identifier:
                keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/6-tNy1UeKo8rZS3M4yYBODvLTrM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.253.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:31:64:ff:fa:00:bf:47:b5:e3:a5:0a:55:f1:11:ab:fc:66:
         61:db:7e:e9:d8:ce:ef:07:20:bd:bb:f2:f6:da:61:9c:b9:67:
         42:77:5f:fb:53:4c:63:c5:d3:e4:81:8f:bc:ce:b6:18:d9:a9:
         d0:cc:e8:9f:2e:17:05:e9:1e:53:e5:c8:1e:38:35:06:d1:c8:
         65:ea:3a:9b:e8:90:b8:41:89:13:a2:9c:11:27:be:f4:f4:06:
         ba:57:bc:3c:d1:ce:f7:f4:85:00:bb:7e:1d:b3:2e:a8:f0:97:
         48:e8:1e:df:52:1a:3b:e2:81:a8:8f:bc:a2:5b:86:e1:1c:7f:
         47:45:69:3b:21:16:93:55:d5:a5:b4:99:72:74:e4:db:b7:ab:
         aa:b6:08:a0:79:d7:a6:c4:4e:8d:77:27:1f:65:bd:c8:96:fd:
         ea:12:65:44:d7:5e:cf:54:88:b9:34:85:c4:98:de:f5:3d:84:
         c2:29:64:65:fd:20:b1:bd:43:27:6d:59:df:6f:f0:b9:07:73:
         13:e8:1e:04:6a:e7:42:5e:b2:88:b0:70:aa:a6:df:e8:2b:68:
         02:f4:2e:0d:f3:bc:cc:11:44:a2:5b:5f:91:d3:38:ef:7f:92:
         80:4b:c2:6c:d6:61:fd:22:b1:b4:93:d1:47:6f:b8:d4:f5:d2:
         60:ed:90:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:51 2024 by rpki-client on console-fra.rpki-client.org