Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/6rDnNvAbkQs9UlPXvsxZ12_LLfo.roa
File:                     6rDnNvAbkQs9UlPXvsxZ12_LLfo.roa (raw, json)
Hash identifier:          YTmFNVRpHhLQw0OYFlCKQSDpFFhXPpQQ+0FKLyPvCcg=
Subject key identifier:   EA:B0:E7:36:F0:1B:91:0B:3D:52:53:D7:BE:CC:59:D7:6F:CB:2D:FA
Certificate issuer:       /CN=78356c6a831680e9b8b7c95514953007a9407e87
Certificate serial:       018573038D9DB136484853D1976A766DA404
Authority key identifier: 78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/6rDnNvAbkQs9UlPXvsxZ12_LLfo.roa
Signing time:             Mon 02 Jan 2023 15:04:50 +0000
ROA not before:           Mon 02 Jan 2023 15:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3223
IP address blocks:        185.181.104.0/22 maxlen: 24
                          45.87.156.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:03:8d:9d:b1:36:48:48:53:d1:97:6a:76:6d:a4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78356c6a831680e9b8b7c95514953007a9407e87
        Validity
            Not Before: Jan  2 15:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eab0e736f01b910b3d5253d7becc59d76fcb2dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:92:9e:36:a8:13:e4:56:61:42:9f:6e:b4:bf:
                    bb:a8:72:6e:42:bc:cd:cb:82:f1:7b:5f:64:98:69:
                    75:21:af:28:59:46:b8:d3:ca:23:53:3a:ad:19:d5:
                    b7:41:b4:a2:27:f4:ac:63:ec:8d:f7:86:8a:c5:97:
                    39:48:06:b0:d2:b4:88:d6:fa:81:89:3a:ec:c1:ce:
                    8e:70:e9:fd:91:5c:bb:f7:9c:d3:30:a6:e7:64:06:
                    c8:b3:55:e1:70:f4:72:e8:e8:24:91:8c:9d:93:e6:
                    ee:2b:b6:1a:36:b9:34:a2:3e:19:0b:ba:8d:eb:a6:
                    7d:5b:04:08:6e:00:08:e9:e4:ae:d1:4b:bf:bd:d5:
                    f3:e4:27:4f:56:43:ec:aa:fe:fd:81:e0:7b:d9:a7:
                    fd:55:03:93:1d:d6:a3:9c:63:3a:b8:f8:9a:74:ea:
                    16:cb:eb:8c:b7:19:b4:1c:d5:bd:04:0a:a2:3c:22:
                    ed:d9:a9:05:a8:b6:53:21:fb:23:e0:2b:6b:a7:18:
                    ad:90:9c:0d:5d:a5:ed:b7:04:f0:b3:7d:c9:c8:64:
                    44:5b:5b:19:21:42:c3:8e:9e:1a:7d:11:a9:ab:4e:
                    cb:8a:31:2e:8c:28:bd:c5:f5:39:18:79:69:b4:36:
                    f4:71:bb:56:be:1b:05:5a:e1:f6:f7:d8:36:2e:bf:
                    44:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B0:E7:36:F0:1B:91:0B:3D:52:53:D7:BE:CC:59:D7:6F:CB:2D:FA
            X509v3 Authority Key Identifier:
                keyid:78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/6rDnNvAbkQs9UlPXvsxZ12_LLfo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.156.0/22
                  185.181.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:c0:21:16:19:29:f8:cb:9e:1a:f9:f1:47:07:ba:fc:7b:6a:
         37:84:81:70:e8:d4:c4:b7:2f:35:95:f2:ba:3f:71:3f:fe:bc:
         fc:28:8c:79:7a:94:a8:cb:97:72:e1:b7:cc:7c:83:55:b2:86:
         6b:6b:8a:a7:05:3b:84:a9:5c:d0:65:b0:b7:42:a3:94:e8:d3:
         28:0f:04:f6:ac:3c:a3:e0:9e:a1:f9:cb:54:44:50:63:6b:58:
         e4:23:69:19:f9:26:e9:05:0a:8e:a7:0b:ca:2d:8d:48:4b:7d:
         a8:6d:23:57:9d:27:53:28:51:a6:81:58:24:b4:de:ff:17:dc:
         d1:a1:b6:a1:27:8b:67:f6:91:38:4d:66:f8:ce:bb:dc:45:97:
         e0:0d:65:ff:ce:92:d2:29:70:9c:c7:a7:34:bd:76:d8:2e:88:
         00:86:e4:df:5c:f2:4c:a2:61:44:30:8a:a1:32:6c:97:ea:48:
         a5:40:0d:88:8e:9a:f4:93:29:2b:bc:21:e2:f3:6e:10:12:da:
         87:67:de:0b:9d:21:d8:39:61:02:76:29:d7:10:59:15:d0:17:
         12:f7:e5:b8:18:c7:fc:59:8b:fd:c3:65:04:07:c9:50:ea:c0:
         ee:ad:0b:b2:4d:23:3e:49:9f:bb:04:ab:a7:89:76:e0:75:81:
         ea:6f:0c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:24 2024 by rpki-client on console-fra.rpki-client.org