Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/xW6nvlSjAM87LjUyhasEH1_9Q3k.roa
File:                     xW6nvlSjAM87LjUyhasEH1_9Q3k.roa (raw, json)
Hash identifier:          AzYFHEdSmLcwpRbvjPkaXxN7DtkaLDj02R52p8kFiuA=
Subject key identifier:   C5:6E:A7:BE:54:A3:00:CF:3B:2E:35:32:85:AB:04:1F:5F:FD:43:79
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       018CD308F3607EDEB7314326CB1E7D62F0A0
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/xW6nvlSjAM87LjUyhasEH1_9Q3k.roa
Signing time:             Thu 04 Jan 2024 05:53:48 +0000
ROA not before:           Thu 04 Jan 2024 05:53:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202673
IP address blocks:        176.105.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 02 Nov 2024 18:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:d3:08:f3:60:7e:de:b7:31:43:26:cb:1e:7d:62:f0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Jan  4 05:53:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c56ea7be54a300cf3b2e353285ab041f5ffd4379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:66:b5:58:ab:cc:88:28:15:92:76:0d:06:85:
                    ae:34:05:13:3c:1f:a0:03:71:09:6a:e4:78:a5:80:
                    51:18:1d:90:61:d0:cd:32:55:23:fc:78:a2:9f:dc:
                    33:a8:b2:b2:c8:3b:14:2a:05:8c:4a:d0:e0:e0:da:
                    98:48:85:4f:59:db:da:25:ed:cd:3a:17:8e:ad:69:
                    6b:f8:81:af:1a:92:6a:fd:8f:29:cb:1e:b1:f8:5b:
                    4d:e6:45:23:58:1a:ac:0c:dc:93:6a:7f:74:21:6b:
                    bc:54:da:9e:54:e0:20:f9:36:69:1c:20:b1:88:c4:
                    a4:0d:43:1e:13:46:f6:10:2d:1a:86:ae:22:2e:ab:
                    8e:1e:8e:7a:e1:61:4f:d5:20:90:a7:88:43:07:e4:
                    fa:76:d2:ad:a9:af:53:87:f7:41:79:7f:dc:8e:f9:
                    1f:53:e1:94:5d:60:38:f9:40:42:05:7f:49:f6:a8:
                    b8:6c:9f:6d:6e:a5:dd:b5:6b:d0:df:a7:de:b9:f1:
                    38:1f:10:eb:48:0a:66:d9:74:34:90:b7:3a:a4:51:
                    f8:42:35:a0:be:2e:2a:b8:18:e7:54:90:7b:1c:67:
                    dd:44:d1:d8:7b:00:5d:71:87:35:52:25:22:87:67:
                    5a:90:ea:ae:cf:19:98:e4:9e:be:2b:a7:8f:f2:f1:
                    bf:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6E:A7:BE:54:A3:00:CF:3B:2E:35:32:85:AB:04:1F:5F:FD:43:79
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/xW6nvlSjAM87LjUyhasEH1_9Q3k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:0b:47:05:d3:cf:7f:11:04:2d:66:27:49:b5:73:36:fa:f2:
         c4:38:a6:44:9f:02:1d:02:79:6b:14:4e:7f:58:a7:1c:94:c9:
         da:08:f4:0e:c5:e8:f0:ef:13:d9:d4:65:6b:0b:ab:f2:ae:d1:
         6f:6c:4d:97:d8:fe:de:8c:23:28:1f:9d:42:b0:38:1c:44:73:
         6f:21:b8:06:38:19:8f:6c:0b:52:f3:f4:6d:8b:ef:9b:e6:1e:
         6f:9f:fd:f6:4f:98:b9:5c:6c:33:b6:d7:3e:cc:ae:7d:57:39:
         4c:88:1d:24:53:08:26:09:f1:1c:2c:80:d8:d4:f3:50:8a:df:
         17:fb:e7:21:43:f9:cd:5d:83:d5:89:f3:d4:52:33:b0:ac:ce:
         e4:a8:5e:5e:de:78:8e:dd:f8:97:a2:8a:f1:0a:dd:1c:c4:80:
         00:fb:24:72:f0:39:2f:67:0b:09:b4:b0:65:02:82:1a:25:d7:
         91:10:08:c5:49:aa:7f:86:ef:9d:a7:cc:1d:d2:2c:27:e8:bc:
         a1:1a:bd:15:a1:f8:33:22:2f:d0:47:47:32:4e:7f:04:c6:54:
         b0:c4:98:42:ac:13:8b:38:c2:14:f7:22:ac:70:08:c9:35:da:
         27:9d:ec:df:f8:e1:98:c1:1a:9a:0d:de:d5:86:9f:7c:ce:41:
         7a:25:4d:05
-----BEGIN CERTIFICATE-----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Generated at Sat Nov 2 21:11:46 2024 by rpki-client on console-fra.rpki-client.org