Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/pt6-C0NyYfm7mcP1WEbvewReIdw.roa
File:                     pt6-C0NyYfm7mcP1WEbvewReIdw.roa (raw, json)
Hash identifier:          a01nJsv8YMzawXrmXnLXS5KYTavfslel6wDvzNn+W7M=
Subject key identifier:   A6:DE:BE:0B:43:72:61:F9:BB:99:C3:F5:58:46:EF:7B:04:5E:21:DC
Certificate issuer:       /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial:       01856E01FA8F7AD93C7AF9822092A6A2F37A
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/pt6-C0NyYfm7mcP1WEbvewReIdw.roa
Signing time:             Sun 01 Jan 2023 15:45:01 +0000
ROA not before:           Sun 01 Jan 2023 15:45:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     328608
IP address blocks:        178.236.235.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 29 May 2023 08:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:01:fa:8f:7a:d9:3c:7a:f9:82:20:92:a6:a2:f3:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
        Validity
            Not Before: Jan  1 15:45:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a6debe0b437261f9bb99c3f55846ef7b045e21dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bc:82:89:24:57:c5:c7:c1:57:0e:f5:de:88:
                    3b:a4:bd:f2:9c:c1:d3:ea:9f:a5:3e:10:7b:e4:a8:
                    81:c9:ef:e2:02:23:e4:c7:bc:14:4a:79:97:f8:03:
                    08:da:8e:23:38:60:3a:c6:b9:16:bb:ed:bb:dd:0f:
                    2c:e4:f0:69:2d:33:4e:a9:23:58:ad:ad:12:70:6e:
                    fc:59:eb:e9:48:37:b1:b9:4a:0e:34:99:2a:80:a9:
                    9c:c0:7f:34:ca:ea:ef:98:ef:b1:70:77:b1:ba:69:
                    dc:d6:c6:9f:fe:6d:0f:a1:65:07:b1:28:ba:49:91:
                    8b:ac:15:a2:22:96:3d:6c:3a:b8:ea:d3:31:d8:2e:
                    a9:4d:7b:4d:e9:a5:3a:25:ff:0d:34:f6:80:66:1d:
                    37:02:44:2a:e4:0c:2c:ec:f6:c6:11:d1:1e:a9:de:
                    aa:59:58:f3:71:56:6c:53:18:b2:c4:2d:5a:03:87:
                    ef:a8:8c:8a:1d:14:62:ce:cf:30:8d:69:f9:72:32:
                    67:ba:fc:3c:a1:96:31:c3:80:3f:a8:57:e3:c1:ee:
                    cb:15:6e:99:28:f3:98:05:14:f7:68:07:2b:9b:00:
                    4a:0a:05:9e:be:a3:dd:78:56:e6:2c:ab:5d:2b:34:
                    81:45:7a:17:ea:12:eb:06:fa:0c:b1:70:ca:c7:41:
                    cb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DE:BE:0B:43:72:61:F9:BB:99:C3:F5:58:46:EF:7B:04:5E:21:DC
            X509v3 Authority Key Identifier:
                keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/pt6-C0NyYfm7mcP1WEbvewReIdw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.236.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:9b:ac:20:5f:fa:e0:ce:ce:12:ed:04:e4:22:e6:f8:56:90:
         f3:58:c4:b4:85:cd:e2:7a:91:a4:bf:21:96:e6:5c:1b:3e:1f:
         b6:b5:57:b5:c7:ff:cd:b2:63:bb:f5:c8:58:57:8a:47:23:39:
         07:0d:75:ad:a3:51:e4:9c:04:02:34:e9:ef:33:29:56:bc:85:
         75:39:89:54:87:2d:ce:a4:44:27:6f:c7:6f:42:d1:de:f3:07:
         2c:3a:eb:d4:a5:d1:b1:1c:ce:1b:11:a5:08:95:16:6a:c5:18:
         67:87:7c:10:86:e3:ef:45:ff:82:ce:bf:a9:9f:71:11:89:fb:
         5f:db:73:05:06:98:31:ed:15:cb:5b:27:0c:89:ed:fa:f7:47:
         79:1e:cf:df:a0:21:a1:7d:7a:10:9b:93:55:ee:14:cf:89:75:
         f8:d2:aa:5c:70:c2:62:d9:31:e1:d5:84:c9:a1:3f:9d:19:70:
         57:82:12:47:5b:d8:0f:14:70:d0:ec:b2:70:22:31:ed:b1:24:
         64:54:61:49:90:6a:4f:94:bb:4f:63:87:c8:7f:30:c4:7f:30:
         04:89:45:09:88:8c:ae:52:17:87:78:ba:06:d2:02:9a:0a:a0:
         17:00:76:3c:1b:09:e2:cf:7c:22:91:a8:8e:b6:5a:10:f1:91:
         90:b2:b9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:19 2024 by rpki-client on console-fra.rpki-client.org