Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/b6k__u08_CU6k7LQJ5chreOygSU.roa
File:                     b6k__u08_CU6k7LQJ5chreOygSU.roa (raw, json)
Hash identifier:          Igt7XayFxOpDaOklIKzitP/uQ9TZCWPZ+OMNb8ErHo0=
Subject key identifier:   6F:A9:3F:FE:ED:3C:FC:25:3A:93:B2:D0:27:97:21:AD:E3:B2:81:25
Certificate issuer:       /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial:       018ED1BE34C4DFAAA9C5110401CC3D9B9E39
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/b6k__u08_CU6k7LQJ5chreOygSU.roa
Signing time:             Fri 12 Apr 2024 09:58:07 +0000
ROA not before:           Fri 12 Apr 2024 09:58:07 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     60840
IP address blocks:        193.228.130.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 17:52:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:d1:be:34:c4:df:aa:a9:c5:11:04:01:cc:3d:9b:9e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
        Validity
            Not Before: Apr 12 09:58:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6fa93ffeed3cfc253a93b2d0279721ade3b28125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b1:d3:60:47:50:1f:48:91:d7:f5:15:4c:6c:
                    79:db:d3:2c:7a:1e:1f:46:14:e4:b0:31:3f:96:67:
                    ea:54:1d:e4:a4:07:31:ab:91:ac:b7:3f:e1:20:ab:
                    9f:9c:5c:53:66:a3:cc:0e:1c:42:bc:a4:ae:6a:63:
                    e0:17:e1:68:a4:2d:bf:05:0e:ce:77:42:c1:43:88:
                    56:e1:ec:ad:18:8f:95:83:34:5e:69:4d:07:28:40:
                    cc:cd:c6:7d:37:ea:54:9f:37:f5:70:e2:f0:10:07:
                    8e:49:47:35:34:4d:33:96:1c:56:b4:75:11:0b:e1:
                    06:14:a0:52:10:f7:e5:41:01:ac:e1:b8:3b:6a:f7:
                    e3:82:b0:51:b9:8f:46:19:5d:71:8b:d2:29:19:81:
                    90:9e:8e:5b:a6:92:5a:46:73:2c:9d:90:5d:9d:5e:
                    68:73:9f:fa:f6:f3:c7:48:77:4a:47:48:07:15:84:
                    2b:cd:de:1e:6b:82:7f:07:c9:4b:15:3f:19:9a:98:
                    6e:45:59:3a:95:aa:7f:63:23:19:16:54:6f:02:93:
                    3a:1c:11:fc:af:92:56:84:b4:46:2e:22:6a:24:17:
                    8a:f9:e1:ce:81:cd:68:d9:ce:03:51:55:d1:fb:db:
                    bd:46:7b:46:36:2c:76:eb:dc:6b:30:76:2c:15:79:
                    ac:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A9:3F:FE:ED:3C:FC:25:3A:93:B2:D0:27:97:21:AD:E3:B2:81:25
            X509v3 Authority Key Identifier:
                keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/b6k__u08_CU6k7LQJ5chreOygSU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:9d:9a:05:ff:e7:ed:6d:76:43:c5:17:db:16:c1:c1:02:31:
         6e:7c:d8:8a:07:95:86:ba:6e:81:0f:62:b2:7d:81:b1:8c:ba:
         5f:fb:72:73:49:3d:fa:43:45:09:77:c0:66:86:30:12:d2:74:
         21:cb:c4:96:d0:77:84:95:ab:da:07:fd:93:40:d9:98:08:5e:
         08:49:90:9b:8b:f9:e2:30:03:bd:de:b3:4f:f5:f7:f5:44:00:
         51:bb:19:f9:6e:f1:62:23:64:30:b1:43:1f:69:13:a5:49:cb:
         8a:df:24:9c:fc:a7:f5:e6:31:50:c3:8a:2a:a0:7c:4d:0f:1b:
         68:3a:6f:41:1b:e6:7e:50:a7:aa:e6:80:ce:ae:56:e2:e0:17:
         bb:b6:57:52:28:49:b8:a1:ea:1b:64:e4:62:69:6a:33:dd:c0:
         46:9f:9c:d6:03:67:db:aa:e8:d5:3d:14:2b:c4:88:30:da:ba:
         19:0c:48:af:05:d9:9c:66:18:51:db:58:cd:2c:9b:03:ef:d4:
         72:c6:7e:44:36:8e:b4:94:06:69:bf:6a:d3:cd:a6:0e:5f:fc:
         70:4b:98:72:1a:a1:9b:01:68:71:06:87:71:b6:7d:4a:65:e3:
         6a:8c:4c:9e:53:4d:f2:a2:48:c2:1b:d4:74:dd:4a:31:c2:d5:
         ff:51:59:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:08 2024 by rpki-client on console-fra.rpki-client.org