Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/dUGqmIadoKdtxIQ04bLIPT4KUnY.roa
File:                     dUGqmIadoKdtxIQ04bLIPT4KUnY.roa (raw, json)
Hash identifier:          oQN69NBiojA0u6z+DW+g7cylny53OtbhGCG4DabCu3Y=
Subject key identifier:   75:41:AA:98:86:9D:A0:A7:6D:C4:84:34:E1:B2:C8:3D:3E:0A:52:76
Certificate issuer:       /CN=6a1a7b80c68462859232b86f2b452658d8f7f849
Certificate serial:       018570FB98E1D0D9D90650447DF79F77FBE2
Authority key identifier: 6A:1A:7B:80:C6:84:62:85:92:32:B8:6F:2B:45:26:58:D8:F7:F8:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/dUGqmIadoKdtxIQ04bLIPT4KUnY.roa
Signing time:             Mon 02 Jan 2023 05:36:54 +0000
ROA not before:           Mon 02 Jan 2023 05:36:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15693
IP address blocks:        195.191.120.0/23 maxlen: 23
                          46.183.248.0/21 maxlen: 21
                          185.29.62.0/23 maxlen: 23
                          185.29.60.0/24 maxlen: 24
                          2a01:8800::/29 maxlen: 29

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fb:98:e1:d0:d9:d9:06:50:44:7d:f7:9f:77:fb:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a1a7b80c68462859232b86f2b452658d8f7f849
        Validity
            Not Before: Jan  2 05:36:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7541aa98869da0a76dc48434e1b2c83d3e0a5276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9c:01:40:73:b9:f7:7d:cf:9e:03:ff:48:c9:
                    00:aa:f8:27:f4:6d:2e:0c:3e:f5:fe:f1:c8:64:dc:
                    a3:2b:f2:f0:95:93:bd:74:fe:c3:1a:79:a0:2e:ac:
                    1c:98:e9:5f:35:34:97:72:2f:23:4f:1f:e4:8b:04:
                    02:00:f3:2e:64:8a:d2:3e:aa:61:49:bb:51:66:a8:
                    26:83:e4:79:2c:88:7c:f3:b4:d8:38:21:be:13:80:
                    69:6e:bc:88:fa:aa:21:cf:d1:9c:02:04:42:80:53:
                    4d:6c:e7:05:4c:35:af:96:53:b9:cb:e6:b3:75:2e:
                    54:5e:96:d8:93:6c:90:b3:82:e5:88:59:24:a5:2b:
                    3e:eb:2f:19:0f:5b:ef:5d:17:a7:50:bd:67:ef:d9:
                    67:09:ec:94:82:fb:cb:fe:ab:87:87:dd:c3:94:dd:
                    cc:98:9c:26:08:4b:73:3f:5e:21:bd:22:9e:54:04:
                    f7:50:23:fe:f5:01:20:0a:db:c4:05:ba:6b:4a:f4:
                    aa:f1:43:f9:0a:3b:41:22:ac:95:c5:9f:7f:f1:b7:
                    f9:0f:8e:ba:82:63:b0:02:b4:5b:2b:f7:5b:71:31:
                    65:4e:50:b6:cd:d5:97:c6:a4:4a:26:88:be:2c:16:
                    ab:33:b0:4f:ee:0f:c6:d7:89:40:99:e7:05:2a:98:
                    6e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:41:AA:98:86:9D:A0:A7:6D:C4:84:34:E1:B2:C8:3D:3E:0A:52:76
            X509v3 Authority Key Identifier:
                keyid:6A:1A:7B:80:C6:84:62:85:92:32:B8:6F:2B:45:26:58:D8:F7:F8:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/dUGqmIadoKdtxIQ04bLIPT4KUnY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.183.248.0/21
                  185.29.60.0/24
                  185.29.62.0/23
                  195.191.120.0/23
                IPv6:
                  2a01:8800::/29

    Signature Algorithm: sha256WithRSAEncryption
         94:6e:b5:8b:b9:60:54:6f:51:68:11:f5:00:73:e3:39:4b:32:
         ee:b4:14:37:9a:9f:9b:f0:9e:8e:4e:00:c2:5b:d8:92:ea:f6:
         f4:7e:e5:f1:b8:09:91:a1:2c:b3:a4:5d:9f:ef:ae:f2:a6:d9:
         93:ea:0a:0a:2c:58:e2:f7:7d:df:ed:9e:63:db:45:d4:18:5d:
         bc:6e:52:e2:f0:3e:51:dd:99:90:7d:5c:39:1e:ab:ea:46:9e:
         b2:a0:07:26:d0:94:18:09:68:ce:9d:15:91:54:fd:2e:72:04:
         c4:8c:bf:d8:d7:8b:49:65:83:7f:fe:3f:7f:02:65:00:52:3c:
         5a:40:ae:83:65:3f:38:fd:fe:ef:06:cb:44:81:0f:c9:8c:d2:
         64:7b:40:3d:66:35:0a:d5:aa:59:03:4a:01:24:02:a3:b9:aa:
         1b:ab:16:0c:af:55:cb:8c:6d:30:e3:0c:2a:9e:a6:88:11:2f:
         83:2c:88:e3:d2:40:c1:d8:0e:d0:bf:94:ba:79:43:e3:22:b1:
         a5:c9:77:ef:a4:1b:55:f5:df:e0:f5:fa:6a:70:45:4d:f3:95:
         92:88:25:38:f8:eb:65:3a:98:ef:62:9b:e4:f9:27:9d:f9:3f:
         bc:a8:8f:5c:52:c6:1d:a4:df:de:96:6b:ab:7d:bb:1c:bf:a3:
         cb:ca:19:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:35 2024 by rpki-client on console-fra.rpki-client.org