Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/6OB358-M7F7_E_6x9MrRdMWsJp8.roa
File:                     6OB358-M7F7_E_6x9MrRdMWsJp8.roa (raw, json)
Hash identifier:          luP/grRLb0gnNnhMnTACsSZl47rk/Ac6P7mrOi8K/Vg=
Subject key identifier:   E8:E0:77:E7:CF:8C:EC:5E:FF:13:FE:B1:F4:CA:D1:74:C5:AC:26:9F
Certificate issuer:       /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial:       01863A906988D700CE9A3BDA721C92BD680E
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/6OB358-M7F7_E_6x9MrRdMWsJp8.roa
Signing time:             Fri 10 Feb 2023 09:03:08 +0000
ROA not before:           Fri 10 Feb 2023 09:03:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49386
IP address blocks:        185.225.202.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:3a:90:69:88:d7:00:ce:9a:3b:da:72:1c:92:bd:68:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
        Validity
            Not Before: Feb 10 09:03:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e8e077e7cf8cec5eff13feb1f4cad174c5ac269f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b3:c0:97:dd:e8:a6:9f:af:4e:b9:8b:61:29:
                    1b:4e:ef:99:5d:4f:63:fd:df:4a:2d:46:e1:1d:ab:
                    61:fa:05:ea:c7:a4:01:cd:eb:ef:a3:30:c4:1f:0f:
                    06:bb:30:37:ef:8d:b7:53:5e:ff:e6:34:3a:3f:86:
                    cc:a2:fb:7e:4d:ea:94:05:98:61:8a:18:b8:a8:4d:
                    cd:c5:16:6e:ab:9b:1f:67:f3:13:c6:f3:61:4d:46:
                    5f:66:d5:c9:1f:84:b6:88:ba:1a:cf:60:94:13:f9:
                    68:e6:cb:32:3b:e6:c2:d7:c8:c3:00:93:82:43:fa:
                    5b:df:18:b9:7f:a8:2b:cc:a5:a9:71:1e:48:cb:0b:
                    22:04:43:c6:a0:e8:22:0e:26:d2:16:4c:3f:67:21:
                    b9:eb:3f:6b:9c:b5:d1:e1:09:33:e0:0d:2d:9d:26:
                    2a:54:52:ef:6a:0e:9f:09:8b:27:ef:d6:ce:6f:8b:
                    e6:8f:61:b6:5d:23:c7:42:39:7f:78:0d:83:93:36:
                    9f:b3:d6:43:ef:83:8d:c0:78:23:ca:17:7b:d5:c2:
                    df:60:24:7b:54:01:3a:d4:fa:c3:7b:51:b5:d0:81:
                    dd:c2:b1:32:b0:42:cf:3c:dc:96:bc:a9:f9:33:7a:
                    a1:c7:28:fc:45:e9:01:83:68:a2:1a:13:f9:b6:2c:
                    e2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E0:77:E7:CF:8C:EC:5E:FF:13:FE:B1:F4:CA:D1:74:C5:AC:26:9F
            X509v3 Authority Key Identifier:
                keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/6OB358-M7F7_E_6x9MrRdMWsJp8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.225.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:97:45:50:12:cf:9c:f5:99:92:04:13:04:e1:52:0d:03:b6:
         e9:5e:02:be:0d:f7:5c:fa:54:d9:00:3e:f7:21:9c:73:bb:ff:
         9f:11:38:23:a9:ef:6f:f8:cb:6f:63:fb:e1:57:b0:08:d0:80:
         c5:32:a1:82:32:a0:3a:f6:2a:5d:85:2b:10:3a:e0:5f:07:56:
         1a:2f:72:30:ba:a9:0a:b6:f2:0e:41:88:78:08:c1:35:d6:7f:
         05:c8:c9:be:36:99:f9:48:11:46:ee:37:0d:18:40:fd:aa:c9:
         ee:41:e6:c3:05:f1:34:21:76:ca:e9:9a:1d:7f:b0:88:08:82:
         5c:3e:ff:6d:76:a9:59:47:5a:a4:70:50:57:54:16:53:68:a8:
         cd:52:03:26:50:66:7f:d3:61:72:7a:48:1b:6a:ee:01:6e:f1:
         d9:a4:c0:1d:9b:45:1c:46:06:37:34:4e:cf:c8:91:43:3c:16:
         13:b3:34:76:72:f6:b8:99:c0:b7:d7:1c:33:b2:39:c6:f6:86:
         a5:a7:e7:f5:92:7e:e0:4c:6c:d7:3a:47:ad:64:51:17:78:54:
         f7:3c:f1:ce:10:82:19:2b:d6:6a:2c:3e:36:f4:57:17:3f:b6:
         03:d9:fa:41:8c:14:f1:ab:6c:90:2f:de:2d:77:6e:5f:5d:f0:
         e3:98:44:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:34 2024 by rpki-client on console-fra.rpki-client.org