Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/6wRk3m55n8csWiYDtoFXlIQmxu8.roa
File:                     6wRk3m55n8csWiYDtoFXlIQmxu8.roa (raw, json)
Hash identifier:          wmq0MVVXDl7QLohpBvA4E6S3ZnggrHaI7xSHW87PlbU=
Subject key identifier:   EB:04:64:DE:6E:79:9F:C7:2C:5A:26:03:B6:81:57:94:84:26:C6:EF
Certificate issuer:       /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial:       0192430894CC552E2AB594590B833EC83FD5
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/6wRk3m55n8csWiYDtoFXlIQmxu8.roa
Signing time:             Mon 30 Sep 2024 13:04:48 +0000
ROA not before:           Mon 30 Sep 2024 13:04:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209492
IP address blocks:        213.182.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 03 Oct 2024 20:20:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:43:08:94:cc:55:2e:2a:b5:94:59:0b:83:3e:c8:3f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
        Validity
            Not Before: Sep 30 13:04:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=eb0464de6e799fc72c5a2603b68157948426c6ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:de:c1:b0:f1:cb:b4:88:86:e0:ca:60:2d:61:
                    a8:1b:17:a4:73:ef:be:ab:33:ad:a5:d7:aa:d1:35:
                    a3:8b:0c:c3:31:92:ef:71:01:3e:67:bd:d7:f2:7d:
                    40:d4:dc:ed:5b:fa:84:68:59:67:ad:52:29:7f:60:
                    8f:56:d0:71:65:ef:52:39:d4:09:29:3a:92:40:61:
                    e6:bb:70:0d:6b:39:90:fc:59:dd:2f:1c:fb:bb:5e:
                    2c:65:3f:5b:c9:26:60:3b:93:2b:1a:5b:4b:b9:bb:
                    b2:5c:a5:45:3b:94:35:4c:24:7d:8b:6e:c0:f5:d9:
                    79:f6:c4:86:83:cb:59:c4:a1:69:9a:85:da:de:00:
                    c5:fd:2e:c8:e5:b2:98:5c:cf:95:ae:1a:b4:f9:32:
                    da:56:c0:e6:a4:74:4a:94:47:cc:fe:20:58:16:4d:
                    80:d9:1e:7d:4d:5b:8d:5d:eb:99:50:42:68:05:f0:
                    aa:cf:3b:30:7d:e8:b8:39:bb:3d:cc:7e:8a:ed:de:
                    9f:ac:b7:a5:f8:92:9f:f8:aa:3f:86:8d:d1:e3:d6:
                    4a:c8:2c:e7:42:1f:83:0c:aa:a2:0b:5d:e8:3a:a5:
                    ef:23:d1:f3:ad:7d:29:46:6c:90:93:9c:5a:fa:8b:
                    49:9d:1e:6f:3e:ba:5a:93:fc:a3:6b:f6:90:fb:40:
                    f2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:04:64:DE:6E:79:9F:C7:2C:5A:26:03:B6:81:57:94:84:26:C6:EF
            X509v3 Authority Key Identifier:
                keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/6wRk3m55n8csWiYDtoFXlIQmxu8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.182.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:0c:d7:f0:68:68:9f:24:96:1a:50:3a:ee:67:19:66:17:60:
         14:9c:0f:a7:be:7d:69:72:12:db:0c:90:3b:62:2f:f9:c1:ed:
         0b:5f:41:e3:9c:e8:a7:b3:15:2a:eb:2c:b9:3d:e3:b7:82:75:
         d9:c8:65:e2:27:cb:be:73:dd:2c:2d:03:e2:a6:e1:3f:2b:ba:
         49:16:3f:a1:0d:22:28:d4:5b:b6:ff:84:42:58:03:90:63:85:
         36:df:b6:a6:9b:da:0a:79:86:a8:c3:e7:e0:19:d6:b5:b6:d7:
         d4:a8:49:46:7c:1b:87:f4:1e:89:6f:c5:8e:18:d6:46:74:80:
         74:34:6f:d4:e4:a8:f6:9e:10:76:4a:81:87:37:57:c6:bf:14:
         74:e1:dc:35:49:37:a7:d1:27:ad:12:8e:fd:18:49:3f:7a:2f:
         42:44:c1:c9:0f:fb:21:33:91:66:26:7b:f5:22:64:3e:2b:e1:
         6f:a8:23:69:f6:53:8c:fb:99:8c:21:c7:cf:6b:58:54:3d:18:
         86:e6:5e:66:8c:20:e7:ca:29:97:68:01:d8:e4:16:1a:28:0c:
         f5:92:f4:51:e6:06:64:e2:93:fa:6e:9a:a7:f2:32:0a:75:db:
         6f:94:33:06:ac:9a:2c:f6:cf:29:6d:d4:da:aa:25:32:b6:3a:
         05:34:e7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 21:58:07 2024 by rpki-client on console-fra.rpki-client.org