Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/qqOiBdpyLdhxEWLq3jrsnqW5-zk.roa
File:                     qqOiBdpyLdhxEWLq3jrsnqW5-zk.roa (raw, json)
Hash identifier:          /PzSQLyIr9QDocxkiNqAxe6ydXZfX/z1vdbpRmf4q1g=
Subject key identifier:   AA:A3:A2:05:DA:72:2D:D8:71:11:62:EA:DE:3A:EC:9E:A5:B9:FB:39
Certificate issuer:       /CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Certificate serial:       01856ED4BFACFA6B0BB97158C9D72C024DD9
Authority key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/qqOiBdpyLdhxEWLq3jrsnqW5-zk.roa
Signing time:             Sun 01 Jan 2023 19:35:14 +0000
ROA not before:           Sun 01 Jan 2023 19:35:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202767
IP address blocks:        185.155.60.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 18 Jul 2023 06:14:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:bf:ac:fa:6b:0b:b9:71:58:c9:d7:2c:02:4d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
        Validity
            Not Before: Jan  1 19:35:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aaa3a205da722dd8711162eade3aec9ea5b9fb39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ca:0e:aa:2a:8d:b9:77:91:9e:c5:fa:f0:86:
                    a5:53:10:ac:00:a0:f7:68:13:2b:d5:fc:5a:44:98:
                    20:f9:81:1f:1a:78:14:c0:6c:08:d2:f3:4a:25:63:
                    49:d0:2f:d0:e9:da:59:b0:10:b1:bd:71:e5:00:82:
                    58:5f:5f:28:aa:da:48:c9:8d:da:88:e2:d2:18:bc:
                    5f:31:d8:21:f6:e0:34:7a:41:4e:02:50:d4:96:ba:
                    6b:fa:1c:e0:a5:f3:c3:d5:4b:a9:72:ca:4d:bc:4e:
                    d3:59:0f:00:2a:40:a8:b6:fa:03:d6:e9:a7:a6:2f:
                    c0:8d:6f:09:69:88:f8:9a:8e:10:5b:95:47:89:15:
                    6e:d0:e1:43:52:1c:29:dd:85:64:59:08:b8:02:18:
                    41:05:b3:92:c7:76:a4:11:6b:a4:8d:9a:62:33:ab:
                    64:68:38:84:fd:7d:81:09:f9:cd:46:5c:39:66:be:
                    af:38:15:3e:ed:f5:ba:e5:36:3e:30:9f:37:52:d6:
                    a8:ce:8f:1e:fe:6d:48:fb:35:dd:87:9f:1a:cb:63:
                    f2:ad:cf:3d:3b:3a:8a:99:2d:48:51:bf:ea:9d:2b:
                    66:ae:91:d4:0d:a4:67:c3:83:76:c9:a0:01:1e:45:
                    8a:77:a4:a5:55:bd:f2:32:56:a5:83:8f:d5:59:b3:
                    17:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A3:A2:05:DA:72:2D:D8:71:11:62:EA:DE:3A:EC:9E:A5:B9:FB:39
            X509v3 Authority Key Identifier:
                keyid:60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/qqOiBdpyLdhxEWLq3jrsnqW5-zk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:47:72:9b:9f:d3:4a:54:f1:97:08:48:9c:ce:2f:09:66:90:
         6b:c0:ee:63:ca:0b:18:e4:68:57:84:99:6a:05:97:62:67:08:
         01:26:c1:36:f8:81:d9:b4:fc:a2:a0:6e:31:0e:b6:83:70:6f:
         d3:d9:32:b7:be:35:90:d7:bc:3b:8e:a4:a5:57:c0:f5:99:5c:
         cd:e6:93:c3:18:95:9e:d1:1a:e1:f7:e0:06:40:02:f8:55:ba:
         f5:34:08:53:9f:09:95:9f:be:58:5c:58:ca:f9:11:b2:c2:c8:
         af:e7:7e:1e:62:31:a6:9e:5a:58:55:c3:9a:f6:77:bc:e6:e4:
         ea:6b:1c:a4:2e:d9:67:ed:f0:b5:88:2d:28:76:62:8f:e3:46:
         a5:9a:21:6c:74:1a:8e:c5:18:86:f7:6a:e0:20:d7:9b:2e:91:
         2e:1c:1f:eb:c7:a1:cd:f1:bd:04:a5:b4:41:74:13:02:b2:ce:
         1b:d6:41:ee:27:b4:bb:c6:30:3e:a0:49:75:e1:2c:4f:89:c7:
         a7:a5:63:db:a7:06:ee:dc:6d:88:c5:e4:e4:f9:07:19:d9:7f:
         cc:22:04:33:b4:38:86:94:72:8d:33:d5:24:f6:66:08:0a:58:
         15:40:9b:25:ad:2f:0f:f4:d2:cd:07:b0:38:45:1b:03:e3:21:
         f9:54:6a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:56 2024 by rpki-client on console-fra.rpki-client.org