Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6BeyokrHMXYZBOwEie4t2JB0oWU.roa
File:                     6BeyokrHMXYZBOwEie4t2JB0oWU.roa (raw, json)
Hash identifier:          7onzuSgK1+wbA2S0Yi5J8PVUeBgRtBlunDjekqPgrao=
Subject key identifier:   E8:17:B2:A2:4A:C7:31:76:19:04:EC:04:89:EE:2D:D8:90:74:A1:65
Certificate issuer:       /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial:       018AF724D7D33DFE1ABFC8E81D61671E53C6
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6BeyokrHMXYZBOwEie4t2JB0oWU.roa
Signing time:             Tue 03 Oct 2023 20:05:01 +0000
ROA not before:           Tue 03 Oct 2023 20:05:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42055
IP address blocks:        195.14.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 20 Oct 2023 15:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f7:24:d7:d3:3d:fe:1a:bf:c8:e8:1d:61:67:1e:53:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
        Validity
            Not Before: Oct  3 20:05:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e817b2a24ac731761904ec0489ee2dd89074a165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e8:31:5c:76:f7:fc:2d:1b:bc:9e:08:f5:70:
                    aa:b0:05:35:21:b5:31:35:fe:3e:2b:14:b3:79:d9:
                    77:0b:ef:c8:cf:4e:d9:c8:90:26:cf:7b:7c:4d:31:
                    f2:88:c3:8f:ed:72:24:59:13:f7:a0:31:36:df:2b:
                    4f:32:5a:b8:3d:0b:38:c8:f6:61:0e:37:6a:c5:81:
                    4a:a2:17:80:40:4e:b7:b4:71:ea:af:12:3f:9e:d8:
                    52:a9:f0:9e:f6:3f:fb:d4:3a:03:77:91:90:3b:ae:
                    b0:04:4b:1c:e4:d1:bf:2b:6e:69:87:a8:b3:62:f6:
                    5c:71:a6:16:3b:9b:5d:ac:65:6d:08:16:60:77:88:
                    29:e0:4f:8c:6c:52:b9:d6:47:98:8d:ab:1a:d0:a0:
                    4c:b4:af:b2:7f:d0:69:e3:85:66:4c:81:cc:5d:07:
                    f5:81:b6:ee:d1:a1:35:ad:e0:ef:33:97:78:f9:48:
                    fd:91:27:04:25:e0:66:60:2a:fd:fc:c5:bd:67:31:
                    45:e4:51:ea:4c:90:1c:ca:9f:dc:13:d0:33:70:aa:
                    27:98:6f:30:39:7b:5f:8a:b6:65:7b:fe:98:65:75:
                    14:30:d2:42:ff:5d:01:6d:df:c8:02:dd:6b:b6:25:
                    44:d0:9d:03:2f:f4:f7:0b:76:e0:66:fc:f2:da:ea:
                    2a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:17:B2:A2:4A:C7:31:76:19:04:EC:04:89:EE:2D:D8:90:74:A1:65
            X509v3 Authority Key Identifier:
                keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6BeyokrHMXYZBOwEie4t2JB0oWU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.14.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:f1:d4:d7:18:06:1d:0c:b5:e3:de:e7:9d:a2:2f:9a:a1:99:
         98:20:80:87:95:65:85:a6:6e:05:74:e7:9b:0f:0a:a5:4e:28:
         5b:52:bc:8b:09:d7:a9:1e:a3:66:41:e7:7b:02:34:59:a6:dd:
         49:c7:66:bd:6e:7c:c1:0d:92:19:c5:d7:a9:4b:12:47:53:74:
         fa:e5:10:ac:5d:25:53:16:e6:fe:0b:69:c7:6f:cd:9e:1c:7c:
         e8:dc:e3:a1:d5:84:35:b7:e5:87:f0:f9:c1:76:cc:b0:10:de:
         99:ba:b7:4d:b0:d7:3d:b1:af:56:c9:30:26:c0:17:02:f1:99:
         ba:e9:55:d2:af:58:6b:a8:ea:1d:8a:27:1a:32:51:36:29:9d:
         eb:43:55:38:ec:45:52:9d:a5:53:11:d6:23:f8:6d:17:53:73:
         3c:ad:f3:b5:1b:ae:b7:58:90:57:08:96:71:aa:ef:cf:99:c3:
         bf:0f:81:d7:90:3c:8c:6a:a9:08:c5:4a:d9:cd:bd:42:79:3e:
         23:d1:39:4a:69:b8:90:1e:8a:f7:05:8e:80:a4:80:c0:07:9d:
         4b:66:28:92:df:2a:74:6f:50:bb:f4:be:58:21:13:5d:4c:c8:
         81:10:0a:89:4d:a3:3a:57:2e:f0:f6:36:f2:dc:3b:45:79:6b:
         5a:57:8b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:47 2024 by rpki-client on console-fra.rpki-client.org