Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/6GJJ1hZJTv6QWGART7PqmEgEwRA.roa
File:                     6GJJ1hZJTv6QWGART7PqmEgEwRA.roa (raw, json)
Hash identifier:          13NNXCzE3CaIlaTu0gHCMLgTkNJfIjRl/OgRU4Jb81w=
Subject key identifier:   E8:62:49:D6:16:49:4E:FE:90:58:60:11:4F:B3:EA:98:48:04:C1:10
Certificate issuer:       /CN=82f59386fcde596f7459075edea4d74c19b01ca2
Certificate serial:       0187EBF2B7A5F30CB6D96B0A74FEE7793A4B
Authority key identifier: 82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/6GJJ1hZJTv6QWGART7PqmEgEwRA.roa
Signing time:             Fri 05 May 2023 12:46:05 +0000
ROA not before:           Fri 05 May 2023 12:46:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44407
IP address blocks:        193.56.87.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 May 2023 14:18:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:eb:f2:b7:a5:f3:0c:b6:d9:6b:0a:74:fe:e7:79:3a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82f59386fcde596f7459075edea4d74c19b01ca2
        Validity
            Not Before: May  5 12:46:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e86249d616494efe905860114fb3ea984804c110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:cc:d4:24:5c:05:8f:58:b8:28:01:cc:85:45:
                    6f:c3:11:9d:32:2f:20:cc:8a:9c:01:04:a6:57:84:
                    3b:11:8b:12:e9:a0:19:91:f8:5b:9e:e0:64:87:c6:
                    fe:78:a7:da:04:aa:45:50:02:51:fa:35:a3:9d:49:
                    f3:21:4b:d7:9f:6e:45:55:da:7e:01:e4:64:8d:2c:
                    2c:6c:d4:41:52:4a:a6:cf:98:ef:98:90:02:c3:4b:
                    8d:1c:ed:78:79:9d:a9:1d:1c:94:6e:bc:e7:6b:80:
                    93:2e:d9:bc:12:47:79:f6:d8:8f:b6:94:47:aa:92:
                    88:02:ef:d5:c2:5c:1e:38:b6:e3:b8:fa:f0:8d:13:
                    2b:eb:bf:79:50:c1:3b:3c:05:a1:c0:e6:c9:ff:a0:
                    08:05:46:8c:61:7f:07:67:c8:7c:9b:9f:8c:00:9c:
                    8b:32:2d:0b:2a:e4:4e:3e:7d:51:d9:f7:72:02:01:
                    63:97:e4:77:e7:78:2e:c4:ff:d7:c8:6e:6c:94:dc:
                    90:df:ea:7a:a3:f7:78:a0:79:5f:91:98:ab:95:32:
                    92:b2:95:f6:ef:d6:f8:20:05:15:6b:1c:2e:c8:7f:
                    76:b1:9d:44:6f:13:75:ac:4c:47:56:ad:8a:00:ce:
                    9a:83:e8:cf:a4:1d:2f:3f:75:8f:c6:8d:a0:29:db:
                    2c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:62:49:D6:16:49:4E:FE:90:58:60:11:4F:B3:EA:98:48:04:C1:10
            X509v3 Authority Key Identifier:
                keyid:82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/6GJJ1hZJTv6QWGART7PqmEgEwRA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.56.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:14:7a:64:08:e5:98:87:15:1e:0f:04:4b:71:40:75:9b:17:
         28:8f:44:2f:e7:2e:e8:88:53:50:ad:a1:ef:a6:8e:8e:ea:cc:
         93:f9:7d:18:1c:2f:f3:6e:37:69:77:66:88:f4:d7:aa:33:aa:
         0c:fd:93:b2:c0:48:c3:75:47:7f:54:cc:89:6a:b6:4b:b1:dd:
         b8:96:f1:04:ae:d5:07:20:29:66:54:3f:c5:f5:56:80:62:61:
         71:90:dd:2b:0d:03:47:9b:2b:0f:b7:b1:5c:3d:33:2a:6c:e1:
         ae:ff:4c:fe:f9:a5:69:a4:f0:1f:4e:66:f4:bf:52:53:25:9d:
         8c:f0:60:ba:a8:f8:6d:98:39:dd:5c:33:ca:1a:e5:02:75:b1:
         fd:7d:49:98:f1:be:c6:e5:e5:5e:be:c6:38:19:0b:ce:79:5e:
         43:87:88:99:50:06:72:cd:0a:04:1d:08:87:15:65:93:e5:b1:
         66:31:53:cb:f8:26:ed:04:a7:0d:32:c8:08:95:df:b5:98:57:
         03:c0:8a:23:ae:94:fe:7e:7d:e8:fd:bb:4c:90:28:72:8c:5f:
         68:e1:b1:31:22:ef:07:90:c3:73:af:cc:94:38:d2:d2:ad:c7:
         c3:ca:3b:05:e4:c7:25:6a:54:e9:b1:ab:7f:03:bd:33:d5:8e:
         52:7b:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:51 2024 by rpki-client on console-fra.rpki-client.org