Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/6uo75mrcfddOZsO4FlMx_SBRlzE.roa
File:                     6uo75mrcfddOZsO4FlMx_SBRlzE.roa (raw, json)
Hash identifier:          ml/ulbUSryrYikhBbxGEpuRuTa+jdKvtsi3iqL0eGyc=
Subject key identifier:   EA:EA:3B:E6:6A:DC:7D:D7:4E:66:C3:B8:16:53:31:FD:20:51:97:31
Certificate issuer:       /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial:       018572BA6D0CEA7EB736F31E7B314C791D94
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/6uo75mrcfddOZsO4FlMx_SBRlzE.roa
Signing time:             Mon 02 Jan 2023 13:44:58 +0000
ROA not before:           Mon 02 Jan 2023 13:44:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49581
IP address blocks:        2a0f:5707:aae0::/44 maxlen: 48

Validation:               Failed, certificate revoked on Mon 31 Jul 2023 05:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:ba:6d:0c:ea:7e:b7:36:f3:1e:7b:31:4c:79:1d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
        Validity
            Not Before: Jan  2 13:44:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eaea3be66adc7dd74e66c3b8165331fd20519731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:08:34:4e:b7:ba:e5:f5:f5:07:d2:c7:85:f8:
                    0d:e7:90:e4:b7:97:9b:96:ed:08:24:e2:91:03:78:
                    58:d1:6c:ac:44:21:6a:8e:56:0e:04:3e:13:89:a0:
                    96:49:7d:b3:e6:d0:f0:27:e3:0b:25:3f:ad:8a:f9:
                    81:ec:38:13:0a:d2:9a:5b:29:53:0c:95:06:2e:52:
                    a1:cf:3e:f0:ee:0a:7b:d9:af:66:a7:de:b1:55:f3:
                    07:1c:2a:b8:4f:3b:54:03:f6:18:ee:42:83:c7:31:
                    59:33:80:2b:89:dc:58:43:67:de:53:e8:6e:2d:21:
                    17:df:25:cf:57:31:0e:1f:96:0f:5c:63:91:e8:57:
                    e7:58:c2:b3:1b:f4:c8:e5:25:19:44:57:33:4c:cc:
                    54:e2:16:f2:e2:57:21:41:89:e4:40:fa:15:c8:63:
                    e3:e4:3a:89:5b:54:df:3a:f8:02:53:78:a6:d4:10:
                    1b:db:12:bb:ec:61:82:12:ca:e9:2b:25:f6:3e:40:
                    7d:a7:34:96:25:ae:80:a4:7c:95:69:65:7e:fb:cb:
                    df:76:c7:4d:e0:37:48:ee:7d:8e:3a:89:43:59:2a:
                    d8:eb:16:c6:7c:d6:71:d5:34:47:fb:e0:78:12:8c:
                    42:f4:90:90:e6:9d:8f:27:7f:4e:34:b0:5c:97:1c:
                    2c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EA:3B:E6:6A:DC:7D:D7:4E:66:C3:B8:16:53:31:FD:20:51:97:31
            X509v3 Authority Key Identifier:
                keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/6uo75mrcfddOZsO4FlMx_SBRlzE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:5707:aae0::/44

    Signature Algorithm: sha256WithRSAEncryption
         1a:8c:9b:d9:1a:dd:55:8b:0b:61:61:ab:f9:aa:0e:9b:56:0c:
         b0:4e:35:29:a8:67:ea:e0:3a:c2:60:44:86:8b:33:5f:48:c8:
         29:46:dc:ef:aa:3e:32:ca:01:f2:09:0a:f8:d8:f0:7c:f3:c4:
         8c:92:9a:6f:39:ea:34:33:d8:d4:d7:57:5f:09:95:d9:5b:31:
         e4:17:47:4e:0f:f2:b1:08:b0:4a:0a:75:38:2c:e1:31:d7:93:
         d9:f5:b1:81:69:2e:eb:c3:21:10:6a:b7:72:bc:30:c4:b3:a1:
         be:5a:eb:79:db:32:40:f5:25:2e:af:15:47:1d:00:96:37:73:
         87:cc:76:0b:f7:d2:9e:dd:4a:81:9b:5d:13:da:02:84:f1:25:
         65:b4:eb:b7:57:e6:42:55:d3:f9:37:e9:b6:3e:b9:29:c1:90:
         76:85:15:25:43:c7:e4:fa:a0:5b:d7:ee:89:65:0a:5e:bf:0e:
         1f:ab:ee:50:d7:68:4a:c9:58:8f:bf:66:52:03:fc:88:a3:21:
         d0:29:02:9b:1f:a7:1b:4c:31:7b:74:e5:7a:ba:05:0c:21:20:
         4b:e3:f5:96:ad:ad:01:2e:19:5a:c9:75:23:01:65:1d:42:5a:
         8c:b0:f0:f1:74:be:c9:0a:a6:a6:7c:4a:a2:22:9a:4d:c1:3e:
         2d:92:e8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org