Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/81i6yPVWM9I1kNJt3z4f4ZD3SHE.roa
File:                     81i6yPVWM9I1kNJt3z4f4ZD3SHE.roa (raw, json)
Hash identifier:          wMJeNu47uORBBLrAXBykJ5dbavqDrskdg5bq8TPKDmM=
Subject key identifier:   F3:58:BA:C8:F5:56:33:D2:35:90:D2:6D:DF:3E:1F:E1:90:F7:48:71
Certificate issuer:       /CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Certificate serial:       0187DD3AAE08CB02B1415EA52D2E01E7B94F
Authority key identifier: 16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/81i6yPVWM9I1kNJt3z4f4ZD3SHE.roa
Signing time:             Tue 02 May 2023 16:10:23 +0000
ROA not before:           Tue 02 May 2023 16:10:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206983
IP address blocks:        193.228.186.0/24 maxlen: 24
                          193.228.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:dd:3a:ae:08:cb:02:b1:41:5e:a5:2d:2e:01:e7:b9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
        Validity
            Not Before: May  2 16:10:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f358bac8f55633d23590d26ddf3e1fe190f74871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f0:53:87:9b:9a:0b:cc:ec:56:ed:be:6e:95:
                    2a:88:40:ff:1e:c8:5f:78:68:3e:41:62:e9:92:c9:
                    19:ca:8a:7a:0a:8f:ab:95:d6:cc:86:45:1e:be:55:
                    96:cd:e7:55:e7:fa:86:9b:5e:ba:69:a3:7f:51:d9:
                    41:bb:20:7f:d9:0a:ba:08:33:c5:78:f6:fa:44:7b:
                    9d:83:92:e3:7e:ef:9b:33:2a:a9:ec:29:b5:0a:00:
                    a0:b5:07:69:45:ee:36:a2:d0:2b:32:7c:0e:e4:d4:
                    60:ce:8b:ed:81:29:b9:49:6f:b5:90:22:00:6b:e0:
                    cb:2f:fa:e6:a0:e2:99:fe:c7:b7:a8:e3:51:c3:fb:
                    e5:6f:e6:87:0f:77:59:3c:96:23:e6:a6:b5:fa:be:
                    46:8b:17:b9:3c:35:ed:30:af:64:a6:19:c6:df:9d:
                    11:c0:db:84:51:b3:d1:f1:1a:0b:f3:c5:22:9d:6a:
                    38:4a:fe:12:8a:9c:ef:7b:ed:86:be:1e:a2:a0:d1:
                    6b:c8:db:a2:73:28:96:ca:b4:b0:20:2e:fc:3a:23:
                    02:bd:ec:06:6a:e2:ed:79:ae:09:3a:ef:76:98:bf:
                    9f:83:f9:59:18:8a:95:d5:a0:f5:02:8a:17:64:92:
                    07:6f:25:ca:e5:a6:64:59:67:f1:78:38:1c:33:37:
                    b9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:58:BA:C8:F5:56:33:D2:35:90:D2:6D:DF:3E:1F:E1:90:F7:48:71
            X509v3 Authority Key Identifier:
                keyid:16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/81i6yPVWM9I1kNJt3z4f4ZD3SHE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.185.0-193.228.186.255

    Signature Algorithm: sha256WithRSAEncryption
         22:63:71:f5:b0:b1:4d:2b:ad:71:6b:15:87:e2:95:3b:a3:d5:
         52:85:f8:ed:54:32:3f:ee:0e:07:6b:83:8d:c4:e0:b9:61:0a:
         f0:7f:ad:4d:5d:0b:15:bf:12:df:fa:29:a7:7e:98:7b:24:60:
         8a:cb:af:f2:dc:f0:c7:fc:58:4a:d6:41:c2:a4:76:3f:42:5b:
         7b:74:c3:91:fd:aa:29:7b:12:83:fe:b3:aa:d6:c4:a5:5f:f7:
         1b:f8:66:ca:bc:88:5e:e4:31:bf:d3:08:2c:54:2d:b2:5a:17:
         ee:d9:1c:6e:88:f8:aa:4a:e8:36:0f:48:73:be:39:54:c1:60:
         e1:44:6b:a1:b7:97:2d:91:11:be:ad:99:50:95:2f:4a:dc:ff:
         e5:67:fb:27:0c:24:e1:e3:ef:2c:41:03:9e:84:28:e7:33:a4:
         58:7e:95:b4:d6:aa:59:da:81:cc:9b:3b:5d:93:ec:0d:1c:49:
         f2:09:b8:5c:7f:89:10:39:51:1c:3e:bd:8f:01:f8:6b:ab:4a:
         44:6f:c7:74:fc:87:3b:05:18:9b:ae:2f:c1:cd:39:8a:3b:40:
         fd:a0:56:dd:49:fd:0c:db:83:63:74:c5:7c:1a:53:b1:5d:0f:
         59:82:ae:fe:b9:1d:1c:84:19:5f:9f:ff:c5:ab:bd:dc:62:5a:
         3c:25:da:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:25 2024 by rpki-client on console-ams.rpki-client.org