Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6OSFGMOLioZkkS_ejHt49_9mwE4.roa
File:                     6OSFGMOLioZkkS_ejHt49_9mwE4.roa (raw, json)
Hash identifier:          5lyPlZ4ko7PchjAuRD/p8cNRtpBP2aZ6ZRtj70ZanUs=
Subject key identifier:   E8:E4:85:18:C3:8B:8A:86:64:91:2F:DE:8C:7B:78:F7:FF:66:C0:4E
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       0188FD83DAC57C536F4B0ECCFCAF52905CBB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6OSFGMOLioZkkS_ejHt49_9mwE4.roa
Signing time:             Tue 27 Jun 2023 15:40:56 +0000
ROA not before:           Tue 27 Jun 2023 15:40:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199614
IP address blocks:        185.112.249.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 27 Aug 2023 14:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:fd:83:da:c5:7c:53:6f:4b:0e:cc:fc:af:52:90:5c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jun 27 15:40:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e8e48518c38b8a8664912fde8c7b78f7ff66c04e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f8:d1:15:dc:0b:45:a6:af:e8:47:65:b7:33:
                    22:2a:56:60:02:b3:a7:9b:bb:d0:92:94:1e:f1:e3:
                    05:7b:b8:f8:99:bb:39:8b:98:e6:2b:e5:e5:11:a9:
                    81:87:ea:e7:4a:81:ef:67:29:6d:e0:9d:62:96:26:
                    82:d3:d2:b6:c4:21:84:8b:77:c4:ba:af:2f:6e:31:
                    c3:e5:96:e2:36:61:bf:17:5f:81:ac:8a:a1:19:31:
                    b7:a4:4c:3e:fd:2c:b6:c2:0a:6b:07:fd:62:b5:66:
                    8f:3e:14:3b:25:df:2d:6e:fa:6f:35:6f:6e:23:b9:
                    c6:d9:68:2f:73:2d:be:66:c9:4a:09:05:80:7e:82:
                    e7:ef:57:6d:83:5f:21:89:38:94:02:93:a5:51:42:
                    a5:93:f2:bc:93:0e:35:b4:f7:55:b6:f3:f5:91:70:
                    25:0a:35:2b:89:90:b7:ee:29:58:d8:8c:07:0b:7e:
                    0d:a6:92:2b:30:55:aa:2b:03:31:f8:87:cf:7b:c0:
                    7e:85:24:48:1a:e7:78:a3:31:fa:55:5d:ef:7b:ac:
                    14:f7:a8:13:bd:80:9e:61:2a:13:45:2d:96:ff:7c:
                    19:b9:ad:bf:31:aa:da:59:ac:ab:3c:cd:da:f2:36:
                    2d:c4:db:60:6f:22:d6:1f:83:a6:2b:c9:57:d5:14:
                    37:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E4:85:18:C3:8B:8A:86:64:91:2F:DE:8C:7B:78:F7:FF:66:C0:4E
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6OSFGMOLioZkkS_ejHt49_9mwE4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.112.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:58:a4:d7:ff:55:c4:c8:47:1a:ee:c8:85:ae:46:66:08:86:
         28:76:13:9e:9c:dd:9a:9a:80:06:a9:66:75:5b:24:ec:43:42:
         43:80:86:fe:b7:0b:bb:a4:91:f3:3b:f8:08:d6:fb:4e:70:ad:
         ab:c3:7e:f7:d1:4b:48:fb:2a:f5:90:96:0a:64:00:40:f5:7a:
         64:db:0a:f6:ac:0f:7e:59:2b:e3:0f:72:c5:ae:06:c1:4d:3b:
         6b:5e:e1:9b:d1:40:b0:81:e3:42:6b:0d:35:10:3c:c6:f6:56:
         9d:62:1f:51:06:0c:67:84:32:d2:8f:1c:33:4a:a0:46:46:a1:
         a8:af:84:cc:13:01:3e:fe:ca:b2:f6:bf:de:a2:7f:b2:eb:b6:
         61:72:b2:6d:da:62:11:b1:e3:40:c9:b5:79:fe:2f:fc:40:02:
         dc:7e:03:9b:07:85:f1:e5:a7:ae:a8:b1:98:fe:e5:e0:c0:9b:
         36:7b:6a:cb:2a:45:12:36:a2:8a:d5:15:49:48:84:4c:38:01:
         5a:c8:27:9d:92:7d:c1:b4:35:a6:98:cc:cf:3f:49:2e:2a:fc:
         6c:a6:1f:f9:23:1a:37:a1:ad:b3:04:2d:e8:0f:f0:79:1b:27:
         af:5a:90:8c:bd:9d:77:3f:1a:aa:6f:5d:c7:fa:ac:22:3a:10:
         da:91:2e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org