Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/6SUxEQ7jdbesEUxvzHqLf3JlAJE.roa
File:                     6SUxEQ7jdbesEUxvzHqLf3JlAJE.roa (raw, json)
Hash identifier:          +DwpbUPIWMwKyYHsqNfGR3yKHsp9kdX60wp7x6V0yP4=
Subject key identifier:   E9:25:31:11:0E:E3:75:B7:AC:11:4C:6F:CC:7A:8B:7F:72:65:00:91
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       018C43F1E366EED840841C0576D5DACB2804
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/6SUxEQ7jdbesEUxvzHqLf3JlAJE.roa
Signing time:             Thu 07 Dec 2023 11:02:55 +0000
ROA not before:           Thu 07 Dec 2023 11:02:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42689
IP address blocks:        185.106.192.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:43:f1:e3:66:ee:d8:40:84:1c:05:76:d5:da:cb:28:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: Dec  7 11:02:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e92531110ee375b7ac114c6fcc7a8b7f72650091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:08:d1:24:be:4f:d1:0f:9a:43:21:b0:11:fa:
                    eb:8a:a2:b1:21:2c:13:f7:5f:1c:3d:68:af:e0:9f:
                    d6:9b:e8:c1:c9:d8:6d:21:1f:c5:b1:99:01:90:25:
                    6e:36:38:4d:0d:88:c4:3a:b0:f0:a7:51:77:af:ba:
                    bc:f0:00:fb:cf:01:8f:72:8d:91:b3:fa:37:e3:28:
                    70:e2:48:98:f5:74:ca:8d:44:e3:36:46:43:d1:ff:
                    5e:6e:0e:f2:7a:55:0c:bc:43:a5:d1:a8:be:f3:de:
                    9d:b3:8d:7b:ea:4b:62:ce:66:d0:67:c3:2e:33:13:
                    f1:dd:3d:fd:eb:81:5f:92:31:87:44:1b:d1:a3:56:
                    88:ce:41:d8:49:75:3c:5d:7c:1d:ab:39:a9:b5:ae:
                    0e:03:38:49:6b:31:cd:06:41:4d:89:c1:e4:04:2f:
                    fa:1c:0a:dc:f0:0e:c5:7f:d5:8d:63:dc:b4:b0:d9:
                    bf:30:2c:31:0f:ad:3a:72:55:2d:99:5c:d2:61:c7:
                    ce:c7:4f:6f:e7:66:a0:a6:6c:c7:f3:03:88:14:20:
                    f2:57:8d:2b:7c:00:8f:3b:1e:c7:69:f0:e9:68:61:
                    5c:82:d0:66:6e:0e:58:94:6e:68:2b:1a:39:3b:72:
                    52:2b:44:e4:ee:e1:b9:ac:0d:95:9c:61:27:8a:fb:
                    62:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:25:31:11:0E:E3:75:B7:AC:11:4C:6F:CC:7A:8B:7F:72:65:00:91
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/6SUxEQ7jdbesEUxvzHqLf3JlAJE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.106.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:c3:f4:9b:88:bb:21:a0:a7:f6:84:03:4e:94:38:c9:23:f0:
         0b:c3:c9:05:98:f8:b4:37:5d:4e:09:a6:88:ec:99:2b:86:09:
         ad:2f:e5:92:0f:92:b3:fa:2a:62:4b:6f:09:f8:4c:89:bd:9f:
         26:aa:ad:31:d2:26:84:1b:1e:c0:d1:35:31:c9:fd:be:0b:10:
         78:9e:9c:e0:c6:0b:72:48:77:68:8e:03:a1:f7:d4:c3:65:16:
         f7:4f:11:7b:c5:6c:06:6a:81:b6:50:11:cc:b3:60:ae:30:9f:
         cd:f9:e3:28:80:b3:ae:86:70:b4:a2:cf:10:45:2d:c2:76:61:
         6f:ff:c3:fc:cf:24:95:cf:b5:79:00:00:cf:de:2d:7a:6d:17:
         96:ab:0e:76:32:b6:9c:b1:62:56:5e:50:32:79:e1:88:b7:65:
         d3:7c:21:c2:a7:6e:3e:8b:88:b0:1a:38:4d:d5:67:2d:fb:3f:
         3b:5b:bb:f9:a7:cb:a7:b9:12:d2:0d:54:ba:f0:d8:59:bd:35:
         1d:32:80:09:04:f9:70:1e:75:0f:95:1a:c4:e2:ca:86:9d:fd:
         d1:1b:4c:83:09:2e:20:cd:92:b3:09:f6:25:c0:93:12:a7:dc:
         3b:29:09:03:85:04:ef:28:56:a4:86:16:3d:a3:d4:1f:01:f5:
         53:77:32:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org