Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/6-r3Qq6Qf3eXzshFedfMkqTN2Gw.roa
File:                     6-r3Qq6Qf3eXzshFedfMkqTN2Gw.roa (raw, json)
Hash identifier:          jo7IAznsISyLHeYdqj2x5ngzXcx/vXKm94DsRJAWmvM=
Subject key identifier:   EB:EA:F7:42:AE:90:7F:77:97:CE:C8:45:79:D7:CC:92:A4:CD:D8:6C
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       018CE06730D4C4BFA6A0B34A0EA7F56FAC19
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/6-r3Qq6Qf3eXzshFedfMkqTN2Gw.roa
Signing time:             Sat 06 Jan 2024 20:11:48 +0000
ROA not before:           Sat 06 Jan 2024 20:11:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     61317
IP address blocks:        45.141.196.0/24 maxlen: 24
                          213.139.228.0/24 maxlen: 24
                          91.191.186.0/24 maxlen: 24
                          85.209.105.0/24 maxlen: 24
                          85.209.107.0/24 maxlen: 24
                          85.209.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Jan 2024 19:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:e0:67:30:d4:c4:bf:a6:a0:b3:4a:0e:a7:f5:6f:ac:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: Jan  6 20:11:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ebeaf742ae907f7797cec84579d7cc92a4cdd86c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0b:3f:0b:04:2c:92:71:8d:1b:06:40:71:6a:
                    04:f6:d1:d4:5a:7c:e3:0e:cb:9f:31:17:fe:e3:3b:
                    b4:2e:6e:a7:40:b3:4c:7d:f1:ed:13:a1:c6:d7:b1:
                    7f:2e:53:09:8a:e5:89:5c:58:bc:77:79:8c:fa:d4:
                    29:77:f3:e4:5b:b0:a8:ab:8d:71:72:ee:69:79:7a:
                    a8:f3:e0:c6:4c:3a:2a:91:07:e5:cc:c8:0c:67:4b:
                    b9:5c:90:a7:a9:62:6d:6d:b3:ac:60:cb:6e:1d:c4:
                    2b:2d:71:8b:c1:52:0e:12:37:48:32:f4:17:fa:20:
                    f9:f8:bb:8f:65:0b:0b:e3:42:f9:43:8b:a2:27:b2:
                    2a:38:62:1a:95:da:90:4e:11:ec:5a:55:58:f9:6d:
                    35:ac:7d:1c:ec:ea:96:9b:c6:92:4a:24:2b:8c:a0:
                    8e:46:d5:20:57:8d:89:aa:02:d1:19:37:48:4d:8d:
                    b1:b0:e2:26:c9:41:f3:9d:92:d1:9a:3b:4a:2f:c6:
                    e0:6a:45:11:0b:61:cf:a2:9b:90:ec:ac:cf:a3:d7:
                    72:de:7f:d4:f9:65:f2:20:3f:f2:6a:03:e1:f0:53:
                    3d:e3:7f:0a:f9:7d:7f:b8:23:73:17:fe:5b:4c:df:
                    a1:34:41:1b:a8:a9:0f:cc:90:50:98:d8:75:08:12:
                    4c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EA:F7:42:AE:90:7F:77:97:CE:C8:45:79:D7:CC:92:A4:CD:D8:6C
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/6-r3Qq6Qf3eXzshFedfMkqTN2Gw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.196.0/24
                  85.209.105.0-85.209.107.255
                  91.191.186.0/24
                  213.139.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:52:eb:90:88:14:51:73:b6:29:3f:f5:6d:ff:40:80:0f:74:
         3e:c2:15:cf:21:ac:8a:8b:bf:c0:7d:b0:1f:40:2b:41:00:30:
         50:71:8f:51:3d:e0:73:b4:a5:c6:8c:d1:b4:81:09:c7:e3:cd:
         4d:43:70:c7:17:b8:8c:b0:12:c1:a2:87:ff:9e:ad:73:28:96:
         c0:e6:12:6a:4b:86:13:48:26:2b:64:57:06:e8:76:23:37:4e:
         b3:c3:50:82:d4:10:fd:58:83:74:1b:a3:b6:eb:31:e2:56:9a:
         5b:75:1a:b1:bc:10:73:b7:6b:f6:23:62:69:ca:11:32:3b:a8:
         c7:cc:44:b4:1a:d6:56:2b:fc:b8:25:25:cf:b2:38:57:0f:75:
         0e:05:20:1f:0c:34:25:ff:98:17:f8:48:d3:19:0d:59:59:f0:
         e7:d3:db:cd:c6:43:29:3b:3d:87:ae:4e:05:01:d6:3f:dd:d8:
         5a:4d:68:e1:6d:96:55:96:18:6c:f7:5a:79:0f:6a:80:70:38:
         34:66:2f:b9:5f:c2:6e:ab:63:b2:8a:7f:94:ca:c3:04:82:4e:
         b5:da:13:ae:51:f4:17:31:ce:86:d2:8c:c5:a0:0b:fe:e2:b5:
         fe:dd:62:30:64:3e:b6:70:cc:61:8f:72:de:7d:be:41:26:95:
         3a:ae:54:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org