Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/yt6SFHMSQtE7sl8cB_TlHjN1rWk.roa
File:                     yt6SFHMSQtE7sl8cB_TlHjN1rWk.roa (raw, json)
Hash identifier:          qu4YZwzEhMIjZHf1+hn9uZ2EvPicFCekiqUKAdr3kAA=
Subject key identifier:   CA:DE:92:14:73:12:42:D1:3B:B2:5F:1C:07:F4:E5:1E:33:75:AD:69
Certificate issuer:       /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial:       018AFEB7E1238D9914B7CCBD861C9225E732
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/yt6SFHMSQtE7sl8cB_TlHjN1rWk.roa
Signing time:             Thu 05 Oct 2023 07:22:58 +0000
ROA not before:           Thu 05 Oct 2023 07:22:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        193.135.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 06 Oct 2023 12:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:fe:b7:e1:23:8d:99:14:b7:cc:bd:86:1c:92:25:e7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
        Validity
            Not Before: Oct  5 07:22:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cade9214731242d13bb25f1c07f4e51e3375ad69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bc:fb:21:9d:5c:75:0f:1d:c5:55:93:3b:f7:
                    f5:8f:c7:63:03:32:fd:5b:74:f6:5b:57:cc:b5:49:
                    cc:2c:86:22:48:f1:af:14:4b:31:70:6e:a1:87:6f:
                    9e:0d:0b:85:45:fb:8e:8e:e6:17:fa:0f:61:58:bf:
                    90:9c:e7:ec:ad:82:fb:d3:17:d4:16:c7:27:4b:e7:
                    9e:b0:c9:f4:51:b3:04:7b:ed:dc:53:81:b6:0a:48:
                    a2:30:c8:d4:1b:53:43:3f:a7:7e:54:7f:70:a2:d2:
                    9b:db:38:cc:f9:ae:b8:8a:12:76:73:c3:6e:07:6a:
                    0e:25:40:72:c9:e9:a5:d7:ee:eb:03:23:53:25:63:
                    5b:4f:32:b9:6b:7f:55:72:37:1a:36:52:4b:1b:67:
                    51:c5:06:a5:c6:51:ac:55:be:61:9e:73:d1:de:5d:
                    9d:89:85:7c:eb:45:02:e1:a1:9b:8b:1c:db:29:cd:
                    19:ed:8c:c6:ec:3a:a8:e1:ea:9e:3f:bc:cd:97:a7:
                    1b:41:9b:eb:ff:cc:bf:c9:90:2b:8e:52:de:3f:95:
                    c1:2b:9f:78:19:4f:2e:98:02:ae:c7:67:4a:64:d7:
                    3b:3a:f3:aa:0a:53:c8:6e:23:95:d0:32:c5:8e:4b:
                    ce:3c:ed:5b:ff:44:3e:fa:08:06:f6:d9:00:96:56:
                    27:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DE:92:14:73:12:42:D1:3B:B2:5F:1C:07:F4:E5:1E:33:75:AD:69
            X509v3 Authority Key Identifier:
                keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/yt6SFHMSQtE7sl8cB_TlHjN1rWk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.135.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:6c:f7:6f:43:a5:e0:0c:2b:d3:0b:28:07:5f:c8:9d:63:20:
         69:02:22:b0:96:e7:95:09:9c:ea:de:53:7e:05:24:3e:3d:af:
         6a:4e:a1:4f:1f:e5:f4:0a:03:32:51:8c:38:e1:80:53:cd:f3:
         9b:dd:fd:51:0a:36:43:87:40:48:6d:75:62:50:c1:92:62:6e:
         2b:cd:e8:15:57:15:f3:ec:ad:94:a2:53:69:69:24:13:24:45:
         bf:30:b4:12:b7:65:03:51:49:4b:27:ca:b4:fd:c7:9e:cd:a3:
         43:95:ef:e5:fc:f6:3b:9c:3f:ea:de:77:36:3d:83:55:ab:2f:
         94:c9:3d:17:0b:fe:52:35:36:8a:af:c1:a1:4f:5d:23:38:5f:
         cf:90:39:3d:c3:ff:f1:11:f5:d8:4f:e2:c8:ba:4c:ce:e0:fd:
         a5:0b:a9:6d:05:ad:6e:b6:84:d4:db:ce:84:93:14:3b:90:ae:
         2a:d9:6d:af:b2:6a:e3:12:42:29:f7:83:cf:87:c9:82:38:42:
         8e:61:af:07:4a:ab:1a:15:f2:09:bd:32:89:87:87:f8:bf:fb:
         13:47:5f:89:60:3f:4b:a8:51:0d:a4:56:82:27:e8:1a:2c:95:
         56:66:c2:16:8f:5b:f2:74:24:63:05:78:3d:95:b1:34:20:51:
         82:95:06:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:54 2024 by rpki-client on console-ams.rpki-client.org