Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/6QGxE-9BuOplkvyTAmamTljXG4c.roa
File:                     6QGxE-9BuOplkvyTAmamTljXG4c.roa (raw, json)
Hash identifier:          jD1arwPMGjBqMSwbDHpd7vMEvmIY04v8ZdMFUxIcN7I=
Subject key identifier:   E9:01:B1:13:EF:41:B8:EA:65:92:FC:93:02:66:A6:4E:58:D7:1B:87
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       01870E99B47590CC29ABE601B018BA158212
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/6QGxE-9BuOplkvyTAmamTljXG4c.roa
Signing time:             Thu 23 Mar 2023 13:12:46 +0000
ROA not before:           Thu 23 Mar 2023 13:12:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211922
IP address blocks:        45.93.166.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0e:99:b4:75:90:cc:29:ab:e6:01:b0:18:ba:15:82:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Mar 23 13:12:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e901b113ef41b8ea6592fc930266a64e58d71b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:87:e9:6c:da:0d:1a:6e:1f:cc:37:c9:7a:a2:
                    a0:00:73:a9:85:41:54:45:67:b9:aa:41:8b:43:46:
                    a6:72:69:34:6b:c3:6f:af:0a:1c:7b:e7:29:90:bd:
                    61:cc:56:69:b9:97:2c:11:ec:f0:32:a8:f6:2b:37:
                    68:3d:67:f5:0b:e5:59:ee:80:9b:c4:32:91:5a:30:
                    31:57:07:2a:0b:89:92:f1:c2:5f:9d:33:dd:51:6b:
                    cf:4c:88:77:c3:da:60:c4:57:aa:c0:e0:4f:af:11:
                    1f:43:3c:39:26:fa:13:ad:ed:53:b2:1f:5a:2f:b1:
                    16:49:8a:3c:b5:9d:99:a3:62:fb:38:91:ac:d9:c6:
                    45:86:76:d2:8a:e3:d5:c9:98:33:23:07:39:1b:6c:
                    d5:60:03:88:43:60:5d:9a:67:9a:02:3e:cf:dc:f6:
                    b0:f7:1c:d3:0b:9c:4c:d5:1a:5f:4e:d3:43:fb:f0:
                    8c:2a:d0:6c:b2:82:5d:fd:25:15:a3:c7:3e:46:cc:
                    48:8d:dc:5c:6f:14:c6:36:7c:08:ad:2a:8f:84:2c:
                    d4:bd:75:5b:60:e3:1a:59:3e:32:f5:e6:ab:87:57:
                    b1:f5:81:81:bb:6f:f6:6d:9a:94:a2:74:39:0a:f4:
                    b6:70:fb:21:5f:c8:e1:35:bc:70:ae:ed:4e:2b:86:
                    b7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:01:B1:13:EF:41:B8:EA:65:92:FC:93:02:66:A6:4E:58:D7:1B:87
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/6QGxE-9BuOplkvyTAmamTljXG4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.93.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:42:ae:e7:f7:9a:e6:4e:95:1d:16:47:aa:4c:b8:a6:d1:5e:
         8e:04:65:37:b8:4d:19:c9:bc:a7:74:1f:bd:3f:a0:be:cf:4e:
         c1:99:b3:46:82:6e:53:8b:f6:12:2b:ac:e2:21:e1:4d:d9:0e:
         ba:d0:de:d1:b8:0f:85:3f:31:a6:7c:9f:32:02:81:a9:42:c5:
         f1:37:3b:f6:30:00:61:78:d3:ac:7e:30:69:00:be:05:aa:da:
         02:b4:fb:7a:8b:f8:8e:fa:53:1f:ad:7c:14:ad:7a:4b:bf:cd:
         ad:eb:22:e4:64:47:5f:c4:01:b9:75:27:fb:90:00:78:3b:a6:
         7a:fc:ea:de:b9:8b:99:cc:60:eb:2d:86:a7:03:9f:40:4b:fd:
         6c:55:8f:b6:01:da:4d:86:73:c4:22:f7:45:bd:c3:8b:64:a8:
         a3:b0:36:52:d3:88:52:00:2b:4e:10:c2:4d:b8:0a:38:c8:c7:
         8e:82:48:9a:7d:7f:e1:8c:a9:b0:33:11:0b:bd:c3:1e:f4:d1:
         bf:be:b9:11:e1:b7:1e:d4:de:47:94:41:04:e0:26:df:1e:e9:
         d0:75:49:0c:ff:11:3b:ad:e4:ab:39:53:4e:55:b2:bf:7d:65:
         42:84:00:b4:e8:88:88:29:2d:13:c1:98:9e:d1:99:ee:cb:fc:
         9b:da:46:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:51 2024 by rpki-client on console-fra.rpki-client.org