Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/s6B097Nnd4PlsBw0baJR4k7csWk.roa
File:                     s6B097Nnd4PlsBw0baJR4k7csWk.roa (raw, json)
Hash identifier:          IChmaZba3oO3u/SvT1xItOQBQ0hsSvmd+bxGzQ9KQ40=
Subject key identifier:   B3:A0:74:F7:B3:67:77:83:E5:B0:1C:34:6D:A2:51:E2:4E:DC:B1:69
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       0185BEC3828970166F64AF2F4E2D4687AD5B
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/s6B097Nnd4PlsBw0baJR4k7csWk.roa
Signing time:             Tue 17 Jan 2023 08:06:02 +0000
ROA not before:           Tue 17 Jan 2023 08:06:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3320
IP address blocks:        178.253.40.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 12 Apr 2023 17:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:be:c3:82:89:70:16:6f:64:af:2f:4e:2d:46:87:ad:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Jan 17 08:06:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b3a074f7b3677783e5b01c346da251e24edcb169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:60:71:60:05:ba:ed:b0:cf:64:51:3e:ac:9b:
                    22:01:91:f9:44:68:f9:82:21:5a:c5:b7:c2:19:3f:
                    2f:f0:43:f2:a5:cc:60:93:04:a3:69:2a:02:6e:34:
                    f1:b9:89:51:ff:d0:3a:3e:ff:66:7e:f1:19:bc:f6:
                    b3:be:ef:a9:e4:c9:58:02:19:83:8e:37:38:73:3d:
                    21:27:fc:9c:00:95:e7:14:fb:c2:c9:a5:16:16:4b:
                    00:58:21:70:f6:0a:76:0d:7c:18:73:c8:ca:1f:0a:
                    40:4e:6f:2d:63:eb:e5:3a:da:db:5a:3f:88:d8:e0:
                    66:ee:01:23:69:33:f6:77:d4:c9:e6:b9:e6:81:b9:
                    96:5a:29:a2:6d:c8:d2:6a:04:13:01:f8:db:b6:a0:
                    75:5b:f5:32:fa:35:03:76:11:53:d1:18:0b:ef:d6:
                    43:5a:2a:71:d3:b2:c6:98:1a:cf:07:66:cf:90:48:
                    f2:80:d0:2f:e3:e3:82:74:95:96:12:e5:8f:93:8b:
                    f2:1a:85:d3:e8:87:85:29:d1:89:5e:20:f2:f2:95:
                    63:32:af:6c:38:bf:29:5a:d9:09:b8:b5:a8:6a:e8:
                    c1:68:0d:af:24:4b:cd:5d:aa:82:bb:07:78:06:94:
                    c2:cc:9b:fd:e6:28:65:36:8d:9e:1f:b9:51:3f:2d:
                    3f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A0:74:F7:B3:67:77:83:E5:B0:1C:34:6D:A2:51:E2:4E:DC:B1:69
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/s6B097Nnd4PlsBw0baJR4k7csWk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.253.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:cc:9b:47:a5:64:f2:20:f2:84:d9:29:9a:c9:b7:12:e6:dc:
         49:47:50:07:8c:02:9a:4f:75:c8:3e:bc:46:44:ac:4b:3c:f1:
         3e:b5:74:d5:a7:a5:18:e6:3a:67:15:cb:ab:ee:38:8f:aa:f9:
         f4:0a:5a:21:f8:41:4f:8d:cf:2f:56:53:12:bd:4c:75:a2:42:
         19:86:8d:03:17:0e:d6:ea:4c:6f:f4:64:9e:01:ee:05:1d:64:
         2e:a7:be:04:e4:75:23:e8:19:0f:e1:af:5f:d4:9b:ce:13:24:
         0e:b1:30:36:bf:15:0d:7e:60:db:5f:6e:f2:34:2b:15:ae:9e:
         6e:cc:f6:f4:c8:da:f7:3b:c0:86:ff:11:5a:d2:71:d8:61:52:
         81:3a:db:0a:9f:5b:c6:66:22:5c:92:b9:71:df:7e:95:8b:e8:
         fa:e2:c5:58:2f:2c:43:0e:53:54:f7:32:e2:c9:af:e1:68:a9:
         c5:db:c9:ac:22:d3:74:bf:2a:be:aa:47:be:52:0f:85:52:a3:
         84:b9:f2:7e:d4:1b:c3:eb:e0:6e:e5:26:30:5d:65:f8:37:e4:
         c2:21:cc:4b:0f:58:ed:c7:46:bd:0e:f6:43:7f:74:3f:7e:5d:
         38:d2:ae:77:23:f8:02:78:c6:df:2c:20:54:2e:3a:b0:81:12:
         cb:ea:2f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:10 2024 by rpki-client on console-fra.rpki-client.org