Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/6CSAJBYqNDIbAkGpClnSGttWeIg.roa
File:                     6CSAJBYqNDIbAkGpClnSGttWeIg.roa (raw, json)
Hash identifier:          FBK0Fz+gjBTDpff3vchlyGeMq/bMZW2I9vk0b/K7E9A=
Subject key identifier:   E8:24:80:24:16:2A:34:32:1B:02:41:A9:0A:59:D2:1A:DB:56:78:88
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       018CB5EE8ABBEA7047E0E58B2FD2FB02435D
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/6CSAJBYqNDIbAkGpClnSGttWeIg.roa
Signing time:             Fri 29 Dec 2023 14:15:58 +0000
ROA not before:           Fri 29 Dec 2023 14:15:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49729
IP address blocks:        45.139.178.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 30 Dec 2023 01:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b5:ee:8a:bb:ea:70:47:e0:e5:8b:2f:d2:fb:02:43:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: Dec 29 14:15:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e8248024162a34321b0241a90a59d21adb567888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:50:9d:c4:b3:3b:33:7f:ec:7e:90:09:1e:
                    d2:fa:90:39:2d:6c:4b:86:56:06:57:a7:d9:ff:53:
                    86:31:ba:36:fc:8a:d8:ec:da:cd:bc:00:4f:d0:b2:
                    fa:4b:1c:e2:9f:59:47:6f:e6:45:d6:69:86:48:b7:
                    eb:d6:f0:2e:8c:72:6b:06:9f:d4:16:fd:c4:5c:de:
                    18:12:11:a8:19:e3:9c:44:0a:fb:96:6c:db:4b:ac:
                    18:b8:b7:62:2b:54:72:2f:9d:5a:4e:ba:af:9f:ac:
                    59:80:eb:c2:24:61:59:bd:26:e6:11:5b:3c:ec:3c:
                    92:98:e9:35:69:e0:79:cf:52:ce:b3:4f:d1:4f:db:
                    c8:39:c0:9a:a8:89:61:79:f0:3a:a8:e9:b3:9b:23:
                    18:37:90:36:8f:ab:95:3c:69:b5:5c:5d:2f:6d:a0:
                    38:b8:07:2b:8c:93:c5:c2:44:98:09:66:b5:1e:ef:
                    f3:3c:bf:68:67:ad:5f:e4:19:3a:90:57:4b:98:39:
                    33:0d:65:22:2c:b0:43:cf:6a:d9:71:32:b7:28:ed:
                    53:dc:e0:0d:f3:3c:12:58:0a:0b:aa:96:a6:e6:ca:
                    63:1c:c1:36:d0:81:29:5c:9c:f9:07:27:18:d7:6f:
                    c1:b2:98:b0:8d:f2:6c:2a:cc:b6:21:7f:04:fd:4c:
                    52:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:24:80:24:16:2A:34:32:1B:02:41:A9:0A:59:D2:1A:DB:56:78:88
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/6CSAJBYqNDIbAkGpClnSGttWeIg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:c4:ba:70:ae:5d:fd:16:77:e5:9b:db:6f:ea:12:08:30:2b:
         8d:5f:2a:f3:0a:32:e3:fb:62:ee:59:83:82:20:0d:e5:db:b8:
         b1:08:3c:a5:55:01:f0:cc:04:ab:0a:2d:e2:07:20:f3:36:0f:
         92:fd:87:c8:d4:51:1d:56:f0:6c:3d:ba:02:65:32:8f:41:6d:
         3d:15:22:ff:00:28:91:4d:70:46:8f:34:58:03:92:6a:25:48:
         30:82:81:00:a9:0d:84:ad:83:c0:8b:67:1f:e8:bb:83:16:15:
         90:39:d0:b4:71:dd:20:2a:63:d4:11:50:78:50:df:4a:9a:c6:
         75:67:13:64:d2:ff:a2:b9:61:4c:dd:c3:9d:6f:4c:6a:0b:cf:
         78:68:09:8c:5b:09:21:89:b0:25:5f:91:13:9a:a4:7f:49:9e:
         fb:ba:f4:f8:4e:f0:4f:9e:99:0f:c7:68:3a:01:0b:d6:ec:5d:
         2a:f7:3a:a0:8b:53:f6:d2:28:47:15:c7:a2:f7:ac:fb:f2:a2:
         0e:bd:e0:f4:16:8b:4b:db:53:0d:d9:84:59:54:89:f2:15:9b:
         71:86:8a:db:6f:b3:ee:7f:33:8b:46:d0:6a:aa:39:59:14:9d:
         43:9c:65:4b:45:e0:35:1f:4a:cd:ec:db:02:83:be:c5:43:c3:
         9c:ce:6a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org