Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6sxT3id2gnIqJrY5j9CCJHq2cmY.roa
File:                     6sxT3id2gnIqJrY5j9CCJHq2cmY.roa (raw, json)
Hash identifier:          1yeB40KK4HZuVg07lz/6qJTLmxjMJPebBHUPpYmEmTg=
Subject key identifier:   EA:CC:53:DE:27:76:82:72:2A:26:B6:39:8F:D0:82:24:7A:B6:72:66
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018CC49339C5F1022D7A31B15E9B29131A60
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6sxT3id2gnIqJrY5j9CCJHq2cmY.roa
Signing time:             Mon 01 Jan 2024 10:30:31 +0000
ROA not before:           Mon 01 Jan 2024 10:30:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     61138
IP address blocks:        89.37.194.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Jan 2024 15:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:39:c5:f1:02:2d:7a:31:b1:5e:9b:29:13:1a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jan  1 10:30:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=eacc53de277682722a26b6398fd082247ab67266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e6:35:e7:d3:c7:69:e0:31:0e:cc:5b:63:ad:
                    51:b5:c7:9c:df:cd:a7:ae:a6:45:2c:f1:16:cf:40:
                    25:79:c5:dc:56:31:16:64:5d:30:42:8e:88:41:d2:
                    a6:4d:a6:92:60:1e:cc:5e:f1:2a:22:60:d7:b9:78:
                    b6:1a:df:a4:c8:c6:5d:5c:90:91:59:91:bf:06:ac:
                    bf:15:c2:35:c7:df:4d:59:5f:ab:d1:fa:5f:db:63:
                    d6:82:36:f2:85:0b:1c:09:2a:e0:da:be:9d:08:d2:
                    67:63:c1:ab:9d:c8:b2:d4:a3:e8:24:86:5c:55:67:
                    3e:a7:9c:aa:9f:bd:86:da:50:eb:37:d9:1a:75:c9:
                    91:44:4e:a3:b7:05:d5:8d:24:93:46:53:b0:d0:5f:
                    f7:54:74:b5:09:2b:fb:dd:3e:98:9a:2c:dc:26:79:
                    0e:d6:03:d8:11:c4:30:14:8b:44:dd:0e:9f:f9:00:
                    20:c7:93:68:a0:ab:b8:e8:cd:6e:92:d1:e2:88:23:
                    de:57:6e:f8:99:c9:e2:cc:7b:cf:a6:5d:4d:74:09:
                    4a:47:71:f9:a9:3e:1a:4b:2f:dd:72:18:2e:51:2a:
                    7c:8d:62:cb:a4:c3:84:94:ae:90:bd:02:46:64:a5:
                    64:07:8f:43:b1:49:c8:43:29:c0:2d:ef:7a:0a:97:
                    c0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CC:53:DE:27:76:82:72:2A:26:B6:39:8F:D0:82:24:7A:B6:72:66
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6sxT3id2gnIqJrY5j9CCJHq2cmY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.37.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:bb:b6:8e:2d:d1:e0:dd:7b:30:f0:8b:7d:03:b3:e2:3c:37:
         0b:ce:ba:fe:a3:d3:a3:b8:a2:04:11:cc:93:6a:03:60:a5:a3:
         7e:49:93:4b:c5:b2:56:05:09:3d:08:34:53:04:03:00:df:d7:
         91:79:48:6c:0f:ba:c3:19:6b:a0:3d:9b:9d:38:55:b8:ef:09:
         fd:74:31:0e:c1:83:23:c9:3a:9c:69:74:d4:ca:0a:ae:c0:b2:
         33:7c:82:22:f5:ff:da:c1:6c:38:d5:a7:01:c2:18:4d:f5:c8:
         b0:99:4c:ba:5d:0f:69:72:d1:37:7c:a5:02:52:dd:f7:df:62:
         9e:58:09:75:a5:9c:2e:1c:6d:10:bc:23:c2:fb:92:ed:52:d9:
         25:a5:fb:13:1b:03:c3:fa:92:36:ba:37:ce:89:11:5a:0c:98:
         29:28:a3:f0:72:15:5f:2e:32:f7:80:d2:e6:93:a9:ca:84:af:
         c0:de:f4:5c:1d:91:17:07:d2:61:69:46:4c:d3:11:d7:a3:6e:
         91:d9:58:5a:d4:3d:16:7c:58:56:69:b6:d1:d7:fc:63:42:55:
         44:8d:09:21:a6:3a:a2:f8:0e:ee:2b:f6:79:42:5d:52:22:ca:
         8a:64:77:c1:75:c6:a1:96:56:51:b4:e8:d8:0a:e5:04:e3:ba:
         49:a5:3b:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkznF8QItejGxXpspExpgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwMTAxMTAzMDMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWNjNTNkZTI3NzY4MjcyMmEyNmI2Mzk4ZmQwODIyNDdhYjY3MjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluY159PHaeAxDsxbY61Rtcec382n
rqZFLPEWz0AlecXcVjEWZF0wQo6IQdKmTaaSYB7MXvEqImDXuXi2Gt+kyMZdXJCR
WZG/Bqy/FcI1x99NWV+r0fpf22PWgjbyhQscCSrg2r6dCNJnY8Grnciy1KPoJIZc
VWc+p5yqn72G2lDrN9kadcmRRE6jtwXVjSSTRlOw0F/3VHS1CSv73T6YmizcJnkO
1gPYEcQwFItE3Q6f+QAgx5NooKu46M1uktHiiCPeV274mcnizHvPpl1NdAlKR3H5
qT4aSy/dchguUSp8jWLLpMOElK6QvQJGZKVkB49DsUnIQynALe96CpfAiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOrMU94ndoJyKia2OY/QgiR6tnJmMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvNnN4VDNpZDJnbklxSnJZNWo5Q0NKSHEyY21ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSXCMA0G
CSqGSIb3DQEBCwUAA4IBAQCFu7aOLdHg3Xsw8It9A7PiPDcLzrr+o9OjuKIEEcyT
agNgpaN+SZNLxbJWBQk9CDRTBAMA39eReUhsD7rDGWugPZudOFW47wn9dDEOwYMj
yTqcaXTUygquwLIzfIIi9f/awWw41acBwhhN9ciwmUy6XQ9pctE3fKUCUt3332Ke
WAl1pZwuHG0QvCPC+5LtUtklpfsTGwPD+pI2ujfOiRFaDJgpKKPwchVfLjL3gNLm
k6nKhK/A3vRcHZEXB9JhaUZM0xHXo26R2Vha1D0WfFhWabbR1/xjQlVEjQkhpjqi
+A7uK/Z5Ql1SIsqKZHfBdcahllZRtOjYCuUE47pJpTuw
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org