Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/YG6Fz0vTAzXxO04L3m8F1FDtBAA.roa
File:                     YG6Fz0vTAzXxO04L3m8F1FDtBAA.roa (raw, json)
Hash identifier:          GOiC5jtUEgHNeA1YuDKZj1H/RemfMvpW5yA7IW6Ygz8=
Subject key identifier:   60:6E:85:CF:4B:D3:03:35:F1:3B:4E:0B:DE:6F:05:D4:50:ED:04:00
Certificate issuer:       /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial:       018847BA313A091BC2E27D751CF546B78FF4
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/YG6Fz0vTAzXxO04L3m8F1FDtBAA.roa
Signing time:             Tue 23 May 2023 08:29:24 +0000
ROA not before:           Tue 23 May 2023 08:29:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57240
IP address blocks:        88.135.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 11 Jun 2023 07:56:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:47:ba:31:3a:09:1b:c2:e2:7d:75:1c:f5:46:b7:8f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
        Validity
            Not Before: May 23 08:29:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=606e85cf4bd30335f13b4e0bde6f05d450ed0400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d2:a5:0f:b0:08:6d:dc:e3:2c:05:97:fc:e3:
                    ab:86:88:83:56:cf:67:d0:05:e1:3a:1a:b9:0b:c3:
                    aa:74:c7:10:fa:24:be:aa:d9:40:a8:b8:86:a4:fd:
                    f9:db:bc:d7:8a:93:56:c0:bb:1d:49:d8:5a:98:85:
                    de:1d:25:ec:95:44:bd:20:6b:e6:bb:cc:0a:dc:e2:
                    61:c9:00:4c:28:d7:e8:5f:e1:49:15:1e:bf:7b:93:
                    03:96:18:aa:5d:26:60:f4:0d:d5:23:d5:e2:49:5f:
                    30:b6:38:34:06:69:bf:fa:a2:fb:43:fa:a4:0c:5c:
                    11:36:c6:e5:57:f0:03:8c:04:f0:af:fa:19:30:07:
                    67:9a:c6:0a:78:a2:c9:a0:63:12:30:c9:c2:14:61:
                    aa:fa:a9:cf:d2:7a:a2:61:fe:d0:f3:17:17:b0:ae:
                    69:dc:b3:f1:25:bb:4f:c4:28:2b:2b:01:4d:f3:54:
                    61:2f:5f:07:a8:ec:1b:2d:f3:64:aa:0a:01:3e:e5:
                    f6:09:32:7e:34:57:67:58:f9:59:7e:90:17:8a:2b:
                    c0:c9:35:3a:04:6b:03:6e:17:a3:fb:30:5f:1d:fa:
                    ba:fa:5f:21:da:0e:61:43:b7:24:f0:0a:13:84:73:
                    e6:b5:ea:21:0f:7a:f8:58:60:4a:3c:eb:6f:57:12:
                    ca:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6E:85:CF:4B:D3:03:35:F1:3B:4E:0B:DE:6F:05:D4:50:ED:04:00
            X509v3 Authority Key Identifier:
                keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/YG6Fz0vTAzXxO04L3m8F1FDtBAA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.135.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:4c:3f:c2:e1:15:ef:4a:13:36:1e:0a:88:a3:6e:9e:c0:5d:
         7b:96:a0:5f:ad:db:3d:2c:90:47:91:0d:db:91:e9:90:2b:d1:
         ca:04:21:03:67:12:5b:c4:e3:bf:b4:de:40:54:5b:a2:42:50:
         26:1e:31:a9:ab:cb:09:56:05:47:8d:da:57:44:39:2b:ef:38:
         98:84:32:47:72:2c:e6:a6:42:46:ed:13:8c:01:28:f9:cd:75:
         3e:6f:47:fc:cb:1b:0d:2a:f6:c1:0c:48:ae:af:09:6d:fc:70:
         af:56:8f:88:17:1d:ae:74:19:46:2a:1b:0e:0f:8a:bc:bc:23:
         48:13:4c:17:d0:fa:8f:34:08:fa:b7:3a:11:77:c8:62:ac:82:
         8a:0a:17:3e:81:49:1d:1d:de:fb:2b:5f:21:4a:6d:ab:71:1d:
         bb:66:69:e9:b1:e1:b3:b7:2c:9d:99:eb:8f:95:a9:33:e6:1c:
         be:12:be:75:82:8c:13:6b:68:fc:67:51:ea:c5:d7:9d:6e:6d:
         08:c2:3f:03:8c:86:82:17:70:a4:5a:2e:0a:aa:11:ca:14:f2:
         c6:be:0c:2d:b4:77:80:17:55:80:d4:fd:24:59:d0:ac:6d:51:
         ca:fb:8f:d3:5e:73:15:06:5e:25:3d:c0:9a:47:ef:f5:c0:4e:
         a7:76:fe:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:35 2024 by rpki-client on console-ams.rpki-client.org