Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/bbb4SelIe6svcfDVXoon6Dl6NDY.roa
File:                     bbb4SelIe6svcfDVXoon6Dl6NDY.roa (raw, json)
Hash identifier:          i6fbKw3TbQq5tX6ypC3/a/MLeDY6e0/EdXnWxHqlY8A=
Subject key identifier:   6D:B6:F8:49:E9:48:7B:AB:2F:71:F0:D5:5E:8A:27:E8:39:7A:34:36
Certificate issuer:       /CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Certificate serial:       018BA3E62507069688E8B9679B52D279752D
Authority key identifier: C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/bbb4SelIe6svcfDVXoon6Dl6NDY.roa
Signing time:             Mon 06 Nov 2023 09:10:50 +0000
ROA not before:           Mon 06 Nov 2023 09:10:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204599
IP address blocks:        193.105.18.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:a3:e6:25:07:06:96:88:e8:b9:67:9b:52:d2:79:75:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
        Validity
            Not Before: Nov  6 09:10:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6db6f849e9487bab2f71f0d55e8a27e8397a3436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:41:5c:11:95:f8:f5:ab:2e:7d:52:4c:6e:57:
                    89:3f:33:24:59:57:95:02:bc:b7:03:07:15:a5:70:
                    a3:c8:90:e7:31:a2:a8:fd:c9:6e:a9:2c:7e:ef:bb:
                    ad:cb:7a:81:a9:45:c6:b8:bf:90:9a:19:10:70:95:
                    6e:26:65:a5:dc:43:fd:36:16:e2:44:c4:fd:6b:27:
                    0b:bc:af:8b:e8:9c:1d:13:1c:b5:8a:23:ed:b9:48:
                    ee:64:4a:5f:48:d7:6d:10:bd:b2:21:77:f5:ac:57:
                    1e:db:73:2d:90:27:c8:8b:2d:81:c1:78:f0:4f:45:
                    4e:17:f1:69:e0:48:a7:ad:c5:20:cd:4f:6a:5e:c2:
                    17:55:e1:c8:bf:d4:aa:05:60:ed:7c:72:55:2f:f6:
                    df:0c:94:99:4d:71:d8:a5:9e:32:bb:a0:41:b6:d3:
                    1e:a5:7c:8c:4f:85:35:f8:e2:63:a8:9e:48:76:76:
                    82:e9:c0:23:8c:e1:df:73:29:60:76:52:5b:aa:fa:
                    0b:ee:8f:63:e3:7a:8e:a9:af:1b:27:b2:b4:15:51:
                    f4:5e:b9:2c:ab:ac:a0:9b:50:c2:82:85:3d:5a:e1:
                    b0:0a:33:de:b0:20:f9:ab:88:f2:0f:66:50:df:bc:
                    d5:c8:7d:49:13:2c:f8:1f:ce:3d:7a:85:21:ef:c0:
                    4a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B6:F8:49:E9:48:7B:AB:2F:71:F0:D5:5E:8A:27:E8:39:7A:34:36
            X509v3 Authority Key Identifier:
                keyid:C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/bbb4SelIe6svcfDVXoon6Dl6NDY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:2d:82:63:f4:af:38:22:69:c4:8c:8e:59:b3:ea:ee:b8:e6:
         ef:da:fb:ed:ae:1a:3e:74:18:f2:71:02:6b:13:68:56:cc:c0:
         04:44:a3:14:df:03:8b:24:cf:86:7b:b8:8f:5d:cb:2b:08:25:
         50:9d:c7:75:eb:c4:63:d3:18:3b:c6:c0:99:cd:5c:f4:20:91:
         4e:fe:80:fe:4e:1d:e6:ad:54:63:0f:46:c5:37:b7:c8:eb:fc:
         3d:ac:fe:52:e8:41:01:72:6e:13:38:7b:45:8a:b4:46:ab:bf:
         24:34:5b:3b:e6:55:4f:e4:06:19:02:ba:f0:f4:ab:f2:82:25:
         e1:34:a3:68:3f:6b:81:d3:06:30:7b:9b:19:d4:4e:81:ba:7b:
         36:96:83:1d:93:9b:a8:13:66:fe:72:52:e2:9c:41:45:88:e1:
         64:82:fd:31:11:8f:93:2d:3e:1b:02:b3:d9:a2:d2:f4:1f:d3:
         b8:aa:6f:11:cf:d0:2e:9b:11:14:41:22:03:85:35:60:aa:eb:
         5c:8f:5e:3e:f4:cb:88:6c:4f:d9:41:68:33:ca:c3:2c:58:40:
         0b:4c:ff:d4:61:6a:d0:60:0e:7d:a3:90:94:96:60:4c:79:2e:
         b6:76:97:e9:55:75:1f:80:42:5a:ca:20:80:f6:ac:70:c8:8c:
         12:f0:d8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:06 2024 by rpki-client on console-fra.rpki-client.org