Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/6kM19_aQ02BFCc6qkhSAZhvEdLk.roa
File:                     6kM19_aQ02BFCc6qkhSAZhvEdLk.roa (raw, json)
Hash identifier:          r1JZqRU36VV5iwcRwJjhEt9AS97o+zimGI6ssMKRddk=
Subject key identifier:   EA:43:35:F7:F6:90:D3:60:45:09:CE:AA:92:14:80:66:1B:C4:74:B9
Certificate issuer:       /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Certificate serial:       01856D6634CA3BBB75BF38ED124584D651AF
Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/6kM19_aQ02BFCc6qkhSAZhvEdLk.roa
Signing time:             Sun 01 Jan 2023 12:54:52 +0000
ROA not before:           Sun 01 Jan 2023 12:54:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208165
IP address blocks:        178.57.95.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:66:34:ca:3b:bb:75:bf:38:ed:12:45:84:d6:51:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
        Validity
            Not Before: Jan  1 12:54:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ea4335f7f690d3604509ceaa921480661bc474b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d8:50:f9:42:ba:92:ee:38:a7:fe:80:65:ed:
                    3a:fb:8d:17:ba:56:83:94:c8:7b:db:43:ec:64:50:
                    cf:6f:e0:64:cc:87:4c:87:b2:56:40:eb:48:7f:20:
                    34:01:88:e4:d0:25:bc:fc:d2:06:09:03:1a:a1:61:
                    a4:df:ef:15:fc:03:b5:03:5d:84:b6:8d:8d:43:5e:
                    4c:d3:3c:ea:3b:b9:fc:01:40:ee:37:c4:55:c3:5f:
                    68:d7:7f:83:00:70:59:34:d0:f2:d0:6a:56:c4:77:
                    a1:94:0d:37:28:bd:d0:d9:6e:92:de:5b:4e:14:44:
                    4b:c3:31:5c:4f:c1:d9:e7:e8:2d:10:0b:2f:3a:1e:
                    df:97:96:4b:cc:4f:ad:83:e3:96:eb:0e:06:94:8c:
                    70:38:41:14:e0:a1:52:6c:19:b2:a5:bb:10:f5:27:
                    fd:22:3d:a2:33:95:0d:94:1b:9b:87:d6:1f:3e:d3:
                    6c:de:e1:8d:a6:b6:ad:d5:41:3a:c1:f0:af:20:87:
                    a2:44:ae:37:69:e0:76:1a:3f:31:14:ce:b8:be:7b:
                    2d:31:86:93:9b:09:20:7b:f0:53:94:66:ac:48:82:
                    d2:aa:74:e0:15:0b:84:00:5a:a5:b5:bf:82:2e:65:
                    a6:e5:05:7d:74:91:ff:cd:55:80:d9:ae:df:a3:37:
                    25:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:43:35:F7:F6:90:D3:60:45:09:CE:AA:92:14:80:66:1B:C4:74:B9
            X509v3 Authority Key Identifier:
                keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/6kM19_aQ02BFCc6qkhSAZhvEdLk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.57.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:6e:67:26:16:d9:81:60:4a:8e:9e:99:c4:c0:3b:05:f8:b0:
         56:ae:24:0d:d4:8e:30:c4:24:47:fb:0f:d7:1b:eb:f2:93:ec:
         63:05:3c:66:9f:c3:60:db:66:ec:b2:d0:96:ba:ae:2a:e1:07:
         7c:b1:da:4f:eb:d0:79:de:11:ca:e5:e9:7c:af:c7:79:d4:35:
         cd:1e:3d:32:b4:e4:c4:2c:0b:ac:5e:78:55:d4:da:34:1b:e9:
         1b:8b:92:cc:17:42:dd:aa:6d:83:84:ea:2c:72:02:c2:23:12:
         e3:e7:d5:d1:0e:b7:76:7b:46:d3:d8:5c:0f:1c:01:47:c6:11:
         5b:2b:c9:22:83:6f:e1:60:8e:2b:51:11:f7:be:ad:f8:e7:b8:
         ec:93:58:79:7e:11:b2:68:bb:8b:35:4e:89:7f:d8:f5:f4:40:
         1d:05:30:cc:03:9c:3e:f2:2e:bd:27:d0:58:7d:4c:e1:99:ea:
         db:6b:7b:47:d1:e4:0c:a2:df:27:45:bb:ed:e9:4b:e4:a4:e9:
         82:92:11:98:3b:ac:df:3d:e9:22:0b:e2:96:05:67:5f:07:66:
         ed:7b:3c:9b:f2:f5:32:04:fc:25:dc:23:9a:8f:bb:d4:bc:57:
         28:86:c8:aa:0c:ca:c0:c4:8b:3d:02:b0:44:d6:19:fa:31:dd:
         0c:77:2c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:19 2024 by rpki-client on console-ams.rpki-client.org