Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/6Sdil-hh8cxapU5KaF7G6bSnJMY.roa
File:                     6Sdil-hh8cxapU5KaF7G6bSnJMY.roa (raw, json)
Hash identifier:          1TZ5kHb3UgYQk3Wp6mt1n4KKo825IwuGfQbGI1NIhG8=
Subject key identifier:   E9:27:62:97:E8:61:F1:CC:5A:A5:4E:4A:68:5E:C6:E9:B4:A7:24:C6
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       018964895AEC4EF49EADDE1FBBBBCA7CC4F8
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/6Sdil-hh8cxapU5KaF7G6bSnJMY.roa
Signing time:             Mon 17 Jul 2023 15:47:50 +0000
ROA not before:           Mon 17 Jul 2023 15:47:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48031
IP address blocks:        193.142.253.0/24 maxlen: 24
                          195.245.102.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 17 Jul 2023 19:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:89:5a:ec:4e:f4:9e:ad:de:1f:bb:bb:ca:7c:c4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: Jul 17 15:47:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e9276297e861f1cc5aa54e4a685ec6e9b4a724c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:15:58:fe:ff:7d:55:93:3d:29:29:22:dc:31:
                    ea:ff:25:5e:5e:95:57:cd:5d:fa:02:df:c5:08:f7:
                    e0:57:79:70:94:05:89:61:75:8a:9b:a3:fb:d8:1e:
                    df:ec:69:ef:ec:e1:81:ae:7d:ab:55:b8:a6:0c:37:
                    64:b8:ae:58:8b:cb:4a:be:b1:3b:c9:d3:41:af:32:
                    21:28:94:e3:6a:04:a0:c4:8b:e4:cd:41:2b:ae:84:
                    a3:87:e7:19:ca:81:2c:c7:8a:08:18:05:c7:92:08:
                    63:c0:1a:72:14:41:4d:e0:82:c0:34:df:ae:2c:17:
                    7b:d1:11:11:5b:a7:e6:79:88:10:c9:67:15:f8:2e:
                    e2:05:fa:51:4e:7f:aa:13:42:d7:84:32:5a:16:a8:
                    b5:74:87:ca:a3:50:5e:37:74:b6:93:1e:17:2f:01:
                    27:de:ac:77:a2:3c:c4:63:66:b0:8c:e8:dc:c5:c4:
                    6e:5d:55:69:78:ee:38:db:e5:f5:af:88:08:92:38:
                    49:1d:8e:46:7a:87:73:5d:ce:1c:96:00:f3:4a:ff:
                    63:a0:aa:3c:af:ae:16:fa:8d:19:9c:72:c3:d7:c6:
                    25:50:28:d4:a2:09:59:a4:98:60:a8:9a:af:60:31:
                    e9:f2:11:54:a8:02:9c:3f:09:40:58:62:a2:60:7b:
                    cb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:27:62:97:E8:61:F1:CC:5A:A5:4E:4A:68:5E:C6:E9:B4:A7:24:C6
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/6Sdil-hh8cxapU5KaF7G6bSnJMY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.142.253.0/24
                  195.245.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:05:d9:69:d5:90:d6:8a:2b:6b:bd:7d:8d:62:63:e1:ae:db:
         ef:08:19:c1:55:cd:b6:5a:37:5e:46:43:87:78:8d:22:3c:8a:
         fd:e1:d3:73:5c:8d:c9:77:5a:15:cd:14:06:6e:d4:22:8e:32:
         16:8e:24:4d:ab:a6:a6:21:c4:f8:a7:00:f5:ea:5f:c7:92:9b:
         eb:5f:61:24:66:3a:38:3e:64:7b:e2:2e:1f:03:39:de:fd:1b:
         93:33:d8:53:be:b2:eb:74:b5:53:56:c4:7c:72:cd:9d:da:cf:
         c7:35:54:86:39:28:ee:d0:04:27:09:82:e3:53:0b:5b:be:6a:
         1b:14:ad:49:41:49:6d:68:bf:50:a3:8e:fa:f3:a9:da:77:4d:
         71:c7:60:d0:53:ce:1d:f9:fb:a9:bf:ac:a6:e4:ce:c3:17:f0:
         08:2c:68:18:4c:6e:f3:2f:41:c0:bf:02:6c:67:73:50:84:d1:
         68:ba:a3:1d:f9:20:0c:dc:17:84:7b:e1:09:89:fe:88:db:cd:
         41:3b:ca:7d:1c:4f:c1:d9:70:ae:b4:cf:c8:82:87:e5:fd:06:
         fc:41:c2:f4:e2:d7:fb:35:d5:5f:c6:ff:3d:81:23:a6:18:e0:
         97:24:28:3c:74:6c:c7:37:0e:0e:4c:67:8d:2d:c7:20:34:6e:
         a1:c7:3c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org