Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/6TvkZOubuvL49e587b0iGTDeJrs.roa
File:                     6TvkZOubuvL49e587b0iGTDeJrs.roa (raw, json)
Hash identifier:          eQuXYlPwARdGxcmz9jiG4qi+ztEADVI8qSVY/e/sZY0=
Subject key identifier:   E9:3B:E4:64:EB:9B:BA:F2:F8:F5:EE:7C:ED:BD:22:19:30:DE:26:BB
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018AFE6F8E386C9FABE7322E19FC9FF8F50F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/6TvkZOubuvL49e587b0iGTDeJrs.roa
Signing time:             Thu 05 Oct 2023 06:03:58 +0000
ROA not before:           Thu 05 Oct 2023 06:03:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20454
IP address blocks:        176.57.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:fe:6f:8e:38:6c:9f:ab:e7:32:2e:19:fc:9f:f8:f5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Oct  5 06:03:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e93be464eb9bbaf2f8f5ee7cedbd221930de26bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e8:9c:19:4c:0a:7c:b8:04:fb:77:6b:e9:b1:
                    59:3e:fb:84:c8:7f:39:ba:6e:16:96:d5:e5:bd:b5:
                    48:d8:b1:e5:80:28:93:f7:0c:a9:7e:0b:0b:37:2b:
                    81:f4:98:ff:c7:1d:e6:5a:40:47:e1:18:8f:c2:ae:
                    2c:49:59:4d:98:67:10:fc:48:56:c8:06:5f:48:26:
                    01:c2:e3:79:65:66:cf:01:b9:97:f0:b6:3c:6e:cc:
                    13:a2:6d:d5:b4:ba:b7:3d:35:36:b7:bc:66:d8:88:
                    ae:86:52:31:ef:65:fe:ab:b2:7f:32:79:21:72:07:
                    5a:fc:0b:41:97:09:0b:ee:c2:03:2a:07:0d:3a:25:
                    5f:2a:01:03:d0:2c:36:c7:cb:80:b6:87:18:a2:17:
                    a3:e2:14:54:8f:ce:6d:4b:bb:8b:b7:6a:e5:00:ec:
                    82:eb:22:de:20:aa:3b:b9:09:a4:75:2b:1e:56:ba:
                    9f:b3:81:54:e0:4d:fd:51:e6:a9:a0:20:02:c2:8c:
                    57:ce:76:81:d9:bd:2b:6c:4b:73:4e:d4:3e:f4:a5:
                    34:6b:f7:fb:34:15:66:5b:97:4a:b9:72:68:a2:d6:
                    11:34:7b:3a:e3:b4:77:19:1b:75:a4:72:3d:d8:bb:
                    56:b4:37:84:49:dc:6b:5e:16:40:f7:02:12:aa:f4:
                    aa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3B:E4:64:EB:9B:BA:F2:F8:F5:EE:7C:ED:BD:22:19:30:DE:26:BB
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/6TvkZOubuvL49e587b0iGTDeJrs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.57.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:77:00:49:bb:b4:3e:83:6e:6e:de:c7:3f:9e:d2:1f:59:2a:
         19:0a:b4:dd:56:36:5f:95:58:2e:b3:5b:93:65:9a:52:e4:e2:
         7f:7c:9e:7a:da:75:a7:52:a6:0a:db:81:43:6e:bc:0a:a4:73:
         e2:5d:c7:d9:2f:68:f4:52:ff:8c:cf:6e:46:2d:fe:51:eb:01:
         26:c9:71:54:a5:ec:c8:d5:f3:14:11:8f:4d:7b:7e:6a:46:68:
         1d:67:d1:d2:a9:90:a7:a0:e5:23:2c:72:c4:0c:55:07:2b:6c:
         6f:5e:28:7e:71:6b:bb:a5:cc:7d:37:8d:90:cd:36:02:8e:66:
         3d:76:71:2b:a7:e4:6b:0f:6d:26:aa:e1:01:1e:2a:b9:9f:74:
         66:51:c6:fc:f6:99:dc:bd:7d:88:6d:15:6d:69:79:3a:62:38:
         4b:df:03:48:e6:1e:b9:b0:d8:91:e0:32:21:b2:03:f6:d8:10:
         94:87:d9:88:3e:5d:39:42:86:26:f6:f5:28:9a:f8:d9:30:8b:
         dd:ea:09:8e:ce:ba:03:15:72:c8:71:be:f8:0f:03:6d:a0:79:
         46:ff:e3:32:83:0b:3a:84:7a:77:5a:f0:ef:5a:d3:f5:2a:ec:
         18:4f:42:2b:15:9c:cb:0b:79:4d:7b:6c:44:52:5c:ee:db:5c:
         7f:a5:09:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org