Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/6aG9xQ_YaWzb_s3QEIWKlqHjzyE.roa
File:                     6aG9xQ_YaWzb_s3QEIWKlqHjzyE.roa (raw, json)
Hash identifier:          GiepByU1szF5yqvYeUfkf3tMrJPrcxPYpJeAUR3smlo=
Subject key identifier:   E9:A1:BD:C5:0F:D8:69:6C:DB:FE:CD:D0:10:85:8A:96:A1:E3:CF:21
Certificate issuer:       /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial:       01867ABAF092F2E3AB093B627F8DA48EF2FC
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/6aG9xQ_YaWzb_s3QEIWKlqHjzyE.roa
Signing time:             Wed 22 Feb 2023 20:05:17 +0000
ROA not before:           Wed 22 Feb 2023 20:05:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        193.109.160.0/22 maxlen: 32

Validation:               Failed, certificate revoked on Wed 12 Apr 2023 15:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7a:ba:f0:92:f2:e3:ab:09:3b:62:7f:8d:a4:8e:f2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
        Validity
            Not Before: Feb 22 20:05:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e9a1bdc50fd8696cdbfecdd010858a96a1e3cf21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d3:29:c4:28:70:70:a8:86:b6:51:6d:04:6d:
                    86:fa:67:73:89:6c:75:4d:cc:d8:66:20:45:77:f2:
                    9f:e8:af:09:7f:63:44:4e:29:a6:47:76:ec:ca:d3:
                    6f:e5:15:25:37:f1:e8:78:82:2c:af:93:8d:3f:97:
                    98:5f:4c:ac:9e:8f:c6:de:63:b8:53:a4:0c:e0:47:
                    1f:bd:91:3a:f0:09:5b:01:b4:1f:da:00:f2:0c:b4:
                    5b:bc:1e:58:9b:8f:e2:88:09:ee:37:bd:ee:a5:84:
                    5e:61:b4:26:ae:f7:5f:da:52:31:a7:ee:ff:ca:87:
                    f3:28:fc:cd:6c:bb:ca:17:ff:cf:37:48:a5:a1:65:
                    25:85:1d:4b:7a:ed:64:5e:b8:c7:e9:ac:da:f3:d1:
                    f1:07:d1:48:31:e5:1e:dd:f9:e0:9c:c4:66:c6:5c:
                    00:f4:f4:9b:4d:b2:a0:e2:7b:2c:e8:43:21:c6:0b:
                    fb:13:e9:98:4a:67:6b:67:c8:ca:7a:e9:19:6d:5f:
                    b2:3f:2e:a8:54:4c:5d:e2:19:1d:3b:3d:81:b3:e7:
                    6c:db:67:ce:02:b5:dc:d1:a1:a2:4f:e9:bb:d8:ce:
                    ce:bd:66:63:c8:57:56:7c:3a:d5:6c:16:ae:9d:3f:
                    d1:ab:55:4b:71:d2:9b:6f:d2:43:20:d8:c3:b3:af:
                    5c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A1:BD:C5:0F:D8:69:6C:DB:FE:CD:D0:10:85:8A:96:A1:E3:CF:21
            X509v3 Authority Key Identifier:
                keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/6aG9xQ_YaWzb_s3QEIWKlqHjzyE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.109.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:0e:b8:14:02:79:9e:bd:e8:e4:75:66:dc:92:8a:5d:be:92:
         1d:ff:84:40:17:47:b5:04:59:63:b4:90:91:2c:44:e5:58:5d:
         96:80:b6:aa:92:f7:e3:de:7b:9f:25:d2:a6:ff:ac:3f:06:db:
         22:d2:14:6d:ce:99:d8:43:c5:46:5e:be:f8:72:d6:39:3f:7a:
         c7:04:da:a3:82:1d:83:da:0d:98:2b:ee:c1:49:36:f4:4e:f1:
         5f:ac:e7:f8:76:f3:f7:c9:09:4f:69:1a:78:38:d2:2c:59:6c:
         34:dc:7e:4d:97:76:a7:fb:11:a7:da:b8:08:fc:a7:24:d7:c9:
         e1:b2:af:32:a7:15:20:7f:b4:9e:0a:56:20:c8:f8:22:22:1e:
         4c:7f:db:9c:41:60:f9:f9:3d:60:ba:32:b5:45:f5:93:3a:4b:
         24:63:e6:5e:1c:5e:be:dc:4d:76:46:03:18:61:31:a3:e6:75:
         da:24:44:e8:11:83:55:04:a7:cb:6c:43:33:0b:53:6b:02:10:
         5e:21:05:af:4c:1e:3b:2a:c3:72:d8:33:4e:f7:2f:0b:51:f8:
         b9:a0:d6:df:a1:ce:3c:4d:07:67:02:30:5e:6f:6a:69:73:01:
         54:f0:b5:c1:21:98:76:4a:5e:ac:d9:7c:8b:26:23:9f:e1:71:
         51:7a:2d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org