Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/6YeMLbczmeKUA0oPlncIbZOiK8I.roa
File:                     6YeMLbczmeKUA0oPlncIbZOiK8I.roa (raw, json)
Hash identifier:          zzbcvvUZPdpGqUaFJBDce5rVpo0sBPGn4Ohlit3tf9k=
Subject key identifier:   E9:87:8C:2D:B7:33:99:E2:94:03:4A:0F:96:77:08:6D:93:A2:2B:C2
Certificate issuer:       /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial:       0187C2C4F96BA0E864AA0DD12EBCF4EB02D5
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/6YeMLbczmeKUA0oPlncIbZOiK8I.roa
Signing time:             Thu 27 Apr 2023 12:51:41 +0000
ROA not before:           Thu 27 Apr 2023 12:51:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212219
IP address blocks:        93.89.215.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 May 2023 11:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:c2:c4:f9:6b:a0:e8:64:aa:0d:d1:2e:bc:f4:eb:02:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
        Validity
            Not Before: Apr 27 12:51:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e9878c2db73399e294034a0f9677086d93a22bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:13:a3:6c:ef:73:4e:3f:05:10:ad:34:a0:43:
                    f3:f7:0c:18:fa:33:39:dc:1e:18:01:06:5f:b1:85:
                    d1:0e:0b:0b:40:b7:8a:fe:59:2e:fc:a5:fb:33:c3:
                    f5:be:a3:9e:68:ea:f5:5f:b7:c0:52:7e:23:c8:09:
                    31:fe:eb:bc:3a:49:2f:3f:19:ff:94:c9:bf:67:cc:
                    84:c2:a7:c6:80:6c:9b:d6:eb:79:6b:5c:ff:ce:13:
                    f8:d2:52:0e:1d:0d:2b:90:2c:8b:fe:5a:08:e1:38:
                    fd:04:9e:81:89:a8:02:d7:0c:2b:bb:af:6c:59:32:
                    87:68:43:9a:57:4b:c6:02:86:75:3d:03:42:30:4c:
                    f6:72:61:27:06:66:65:b2:54:97:71:3f:22:3d:e7:
                    f2:77:eb:35:65:a6:4c:24:10:5f:51:80:26:12:6f:
                    e5:5c:57:1e:bf:5a:cf:43:e8:ff:b9:41:bd:0b:ca:
                    4e:dd:2c:99:5a:e6:bd:61:ea:82:4b:ba:61:52:ba:
                    94:94:80:c2:14:42:94:00:ce:c5:dd:bf:7e:86:d8:
                    53:9c:16:40:4c:7b:1d:fb:d2:89:df:65:25:8d:cf:
                    35:11:8f:2e:f2:0e:2c:bb:f3:d5:f1:5c:24:a5:e9:
                    b6:03:e2:73:3f:f6:50:11:92:86:5c:3b:13:1e:af:
                    ba:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:87:8C:2D:B7:33:99:E2:94:03:4A:0F:96:77:08:6D:93:A2:2B:C2
            X509v3 Authority Key Identifier:
                keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/6YeMLbczmeKUA0oPlncIbZOiK8I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.89.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:52:46:78:ba:d3:98:1d:e0:e4:3b:b4:bc:ce:23:9d:56:99:
         08:67:c0:0a:21:53:f0:5d:97:98:ed:80:fc:e0:cc:21:13:56:
         36:45:af:35:63:50:c6:8d:f3:90:8f:4c:bf:9f:18:59:8d:95:
         a8:6a:7c:f7:2d:10:4f:c1:35:53:ad:b1:e8:1b:d1:77:c5:a9:
         f7:3a:dc:70:f0:38:70:a4:08:12:62:f1:10:66:7e:ea:31:70:
         f3:60:26:aa:20:a6:30:02:58:9d:ac:ad:0e:ee:54:f5:f8:b0:
         6a:65:14:8c:7b:0b:c5:05:cc:14:95:a8:e2:99:fc:93:45:1b:
         60:40:49:cb:4c:88:8c:89:2d:5e:be:7e:7d:48:28:db:46:7b:
         16:c5:3a:26:03:b6:19:a4:51:14:e0:20:ef:82:2c:b9:1d:37:
         49:20:47:38:1b:62:16:5f:ee:bd:9a:6f:20:9f:8a:34:b5:0e:
         45:49:0e:9d:86:58:67:0e:13:1d:2c:f1:58:44:84:96:17:72:
         4e:b0:1d:e9:f8:a4:d7:d2:9e:b2:fa:63:60:9b:2e:8d:38:15:
         e0:5d:3b:b7:5e:a5:95:13:e3:fe:c2:a7:50:f0:3e:3e:0f:3b:
         6a:69:86:f6:d0:73:43:66:82:48:e6:91:79:e7:64:a7:d3:3b:
         47:b8:2f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org