Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/6ebCfs7CGTCI28qwmjszpNagCAM.roa
File:                     6ebCfs7CGTCI28qwmjszpNagCAM.roa (raw, json)
Hash identifier:          Ocn+iQdJg523rLgLeTpNWsRvFj1BV+q07dIpg0GXGgk=
Subject key identifier:   E9:E6:C2:7E:CE:C2:19:30:88:DB:CA:B0:9A:3B:33:A4:D6:A0:08:03
Certificate issuer:       /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial:       01857255B24C07D669CC6394B955E63021FF
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/6ebCfs7CGTCI28qwmjszpNagCAM.roa
Signing time:             Mon 02 Jan 2023 11:54:56 +0000
ROA not before:           Mon 02 Jan 2023 11:54:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202232
IP address blocks:        62.228.250.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:55:b2:4c:07:d6:69:cc:63:94:b9:55:e6:30:21:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
        Validity
            Not Before: Jan  2 11:54:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e9e6c27ecec2193088dbcab09a3b33a4d6a00803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b3:d8:53:7e:da:71:9a:43:71:64:c3:af:8e:
                    c1:9a:33:ca:9f:fe:d0:9e:7f:8a:87:b0:59:ae:c9:
                    5f:fd:18:d0:a3:13:cc:07:95:88:0f:56:da:c5:3a:
                    67:75:ea:e3:37:f7:80:64:87:ca:26:4f:2d:bc:35:
                    71:d3:84:99:fc:7e:15:25:46:80:80:bb:44:e1:1e:
                    19:d4:58:54:b9:e6:71:3b:62:0c:f9:2c:6f:fc:ea:
                    68:8c:f5:94:32:62:f7:0b:1f:37:01:ac:b2:3c:1f:
                    7b:45:77:ec:83:b3:e7:df:f2:19:2b:f3:9e:67:27:
                    e2:fc:5d:45:51:3a:a4:24:17:4e:1e:05:de:e0:f3:
                    41:cf:d1:01:7f:bb:90:e6:95:10:de:1d:52:1e:3f:
                    8e:cc:ea:af:e7:18:b4:5e:d7:98:bd:ff:6a:a7:77:
                    73:4f:2e:70:24:cc:c4:9f:37:bf:76:cd:23:ae:25:
                    5a:60:72:7b:13:09:1c:83:fc:ff:de:12:e0:21:5d:
                    b3:df:38:f1:7a:9a:64:52:c9:7e:30:5e:49:bb:b2:
                    bd:1c:d6:30:06:28:40:3b:74:e1:a5:eb:03:b3:13:
                    cd:86:ab:68:d8:12:0e:30:83:3a:6d:f8:70:1c:af:
                    db:f3:96:fc:ba:88:37:db:28:12:28:bc:35:ab:61:
                    d0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E6:C2:7E:CE:C2:19:30:88:DB:CA:B0:9A:3B:33:A4:D6:A0:08:03
            X509v3 Authority Key Identifier:
                keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/6ebCfs7CGTCI28qwmjszpNagCAM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.228.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:2b:aa:c0:54:d4:01:a1:01:c0:ca:2b:aa:b4:da:3a:b9:8e:
         99:55:36:d1:75:61:7d:20:76:2b:6d:f1:4e:6c:c7:81:50:69:
         4c:d3:1f:72:3c:20:e1:6b:fe:c2:7d:c9:a1:5e:df:9e:00:40:
         80:7f:8f:64:02:c3:d6:38:22:f6:3e:7f:e6:24:b5:da:07:5a:
         90:3c:18:98:45:9a:b3:50:50:77:a9:52:09:77:c0:53:7d:f0:
         1b:76:f6:26:60:24:87:e5:53:b1:76:d4:2b:89:15:76:e6:7f:
         e5:72:18:1e:1a:62:4a:32:2e:fc:20:63:3c:2f:9c:a3:f5:b0:
         32:5c:72:8f:f0:f2:2b:e4:9c:b8:5b:a7:57:8d:02:34:ae:cb:
         6b:4b:f3:f6:6c:7a:d1:77:2c:11:31:96:ca:04:c7:b7:d0:50:
         1d:99:51:74:ac:00:60:6e:f8:f9:7f:d9:1c:bf:c2:a5:b5:db:
         46:06:d4:c9:15:72:66:23:46:aa:d8:bf:60:6c:fa:24:53:59:
         ee:6d:09:37:14:87:df:84:42:a5:aa:71:39:0e:03:ec:6a:ae:
         41:b5:64:4a:ac:21:19:ae:72:8e:0a:46:59:22:3d:8f:9e:4c:
         33:75:e1:39:69:c9:17:3b:92:ce:95:2f:0a:d3:8e:d1:13:79:
         a2:28:e0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:17 2024 by rpki-client on console-ams.rpki-client.org