Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/A6CeyLBU6yNOjxpeLUdoiEf9dHU.roa
File:                     A6CeyLBU6yNOjxpeLUdoiEf9dHU.roa (raw, json)
Hash identifier:          uW4ilRLjkwSQjUtB2D4/kyFfh17mvFkkeFaU8lXoBF0=
Subject key identifier:   03:A0:9E:C8:B0:54:EB:23:4E:8F:1A:5E:2D:47:68:88:47:FD:74:75
Certificate issuer:       /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial:       018BFDD3BCB8F6A78A48BB4A337C4C5A2E65
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/A6CeyLBU6yNOjxpeLUdoiEf9dHU.roa
Signing time:             Thu 23 Nov 2023 20:16:33 +0000
ROA not before:           Thu 23 Nov 2023 20:16:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47787
IP address blocks:        193.163.151.0/24 maxlen: 24
                          188.93.192.0/21 maxlen: 24
                          188.93.198.0/24 maxlen: 24
                          188.93.199.0/24 maxlen: 24
                          146.19.95.0/24 maxlen: 24
                          193.107.13.0/24 maxlen: 24
                          185.112.251.0/24 maxlen: 24
                          185.166.144.0/24 maxlen: 24
                          212.52.23.0/24 maxlen: 24
                          146.19.249.0/24 maxlen: 24
                          2a10:ee40::/29 maxlen: 29
                          2a0d:82c0::/29 maxlen: 48
                          2a11:c00::/29 maxlen: 48
                          2a0f:8900::/29 maxlen: 29
                          2a0d:82c7:9::/48 maxlen: 48
                          2a0f:d300::/29 maxlen: 29
                          2a0e:5f00::/29 maxlen: 48
                          2a0b:e740::/29 maxlen: 29
                          2a0f:7700::/29 maxlen: 29

Validation:               Failed, certificate revoked on Mon 11 Dec 2023 18:06:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:fd:d3:bc:b8:f6:a7:8a:48:bb:4a:33:7c:4c:5a:2e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
        Validity
            Not Before: Nov 23 20:16:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=03a09ec8b054eb234e8f1a5e2d47688847fd7475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:72:6b:1e:d2:5f:e8:a3:81:b0:3e:5c:80:a2:
                    db:e3:51:64:a5:7c:f3:f4:2e:b4:97:a7:80:79:82:
                    f5:a2:8f:e5:8c:f6:32:1a:0b:4e:58:9d:04:6a:55:
                    69:0f:79:22:63:5b:9f:be:31:06:4a:a1:55:60:8d:
                    68:db:bc:ac:52:b1:ee:d1:21:7c:73:e8:87:df:02:
                    0d:0c:1d:bb:b9:60:38:e4:72:0b:a3:d9:3d:07:3a:
                    c8:ff:09:06:69:98:bf:11:5a:64:2c:64:34:b3:8c:
                    ba:4d:0e:b3:5b:4f:0a:be:69:82:35:eb:17:ad:0f:
                    ff:1d:7e:8a:53:98:77:2d:1b:cd:8e:9e:53:3a:e6:
                    59:27:c9:b8:d7:ae:ff:ca:d4:e3:55:8d:39:69:c0:
                    e5:21:98:d8:19:52:d8:2f:c9:f7:2d:5d:56:d2:cc:
                    3e:f3:75:64:e9:d7:56:06:62:d7:34:94:32:8a:90:
                    ae:18:06:04:3e:a3:20:e7:a9:85:11:ce:65:3e:54:
                    99:e1:aa:db:9b:2a:59:72:c7:ba:6c:25:95:42:7a:
                    da:ac:d3:20:75:ed:bd:65:73:e8:93:7b:6c:b7:24:
                    42:40:a9:c0:dd:e1:91:5a:79:2a:6e:db:43:63:d8:
                    43:18:5c:26:4e:41:21:9e:2f:fb:e6:12:f7:fa:93:
                    65:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A0:9E:C8:B0:54:EB:23:4E:8F:1A:5E:2D:47:68:88:47:FD:74:75
            X509v3 Authority Key Identifier:
                keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/A6CeyLBU6yNOjxpeLUdoiEf9dHU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.95.0/24
                  146.19.249.0/24
                  185.112.251.0/24
                  185.166.144.0/24
                  188.93.192.0/21
                  193.107.13.0/24
                  193.163.151.0/24
                  212.52.23.0/24
                IPv6:
                  2a0b:e740::/29
                  2a0d:82c0::/29
                  2a0e:5f00::/29
                  2a0f:7700::/29
                  2a0f:8900::/29
                  2a0f:d300::/29
                  2a10:ee40::/29
                  2a11:c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         99:79:10:d1:55:4a:e8:73:f7:af:eb:5d:23:58:27:2d:47:00:
         f6:02:36:c1:48:9b:89:92:3f:94:a9:c0:9e:29:7d:74:4e:15:
         a9:fa:f6:d8:74:6f:97:27:e0:1e:97:f6:75:73:50:a6:66:87:
         13:93:ed:df:ee:02:e9:53:23:0d:5b:62:e3:6d:75:ca:e1:b4:
         d4:ec:94:0a:73:7e:b9:bd:0b:e0:46:35:92:45:9f:e1:f1:7b:
         44:d9:35:50:b9:fd:24:81:1b:49:59:85:1e:3d:ec:b2:75:7b:
         6f:e6:c1:09:cb:ef:4a:74:ae:ec:be:8d:8d:1a:6f:e5:c2:e4:
         f5:22:3c:98:a5:c0:9f:e4:2a:02:28:43:1e:bb:30:34:9b:c9:
         98:fe:98:e8:f2:72:c2:62:2c:8d:c9:7e:34:52:55:9b:11:9b:
         3b:69:0d:fb:39:3c:e2:d9:2c:33:e3:03:ca:79:7f:22:08:d4:
         1e:05:1a:13:8e:7d:a7:4a:0b:47:25:a2:2f:5f:3f:94:53:23:
         b5:92:00:a0:a5:e5:07:11:c1:66:ea:e2:87:87:e1:98:40:b5:
         40:b5:14:9f:74:bc:89:48:ef:55:6b:85:c5:d9:b2:a2:49:b2:
         d3:a5:db:86:ea:f8:50:a8:e8:9f:03:bc:e9:33:0e:df:bf:29:
         77:26:a3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:29 2024 by rpki-client on console-fra.rpki-client.org