Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/6_M--MhON1hhxHTEOnjSw30MeZY.roa
File:                     6_M--MhON1hhxHTEOnjSw30MeZY.roa (raw, json)
Hash identifier:          Gzny85d+5UjgndjDo5/wstIlYgrUcvFpeIE+C+Ghudo=
Subject key identifier:   EB:F3:3E:F8:C8:4E:37:58:61:C4:74:C4:3A:78:D2:C3:7D:0C:79:96
Certificate issuer:       /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial:       01857039998C714B9E33D4260F77A24A5FCA
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/6_M--MhON1hhxHTEOnjSw30MeZY.roa
Signing time:             Mon 02 Jan 2023 02:05:01 +0000
ROA not before:           Mon 02 Jan 2023 02:05:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56782
IP address blocks:        95.107.175.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:39:99:8c:71:4b:9e:33:d4:26:0f:77:a2:4a:5f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
        Validity
            Not Before: Jan  2 02:05:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ebf33ef8c84e375861c474c43a78d2c37d0c7996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3e:a5:e5:c8:10:11:e0:63:e9:06:0c:34:1c:
                    b5:e2:80:47:59:5e:07:61:27:49:6f:f8:fa:88:78:
                    20:1e:8f:1f:42:28:73:af:60:2b:87:12:4e:0e:62:
                    f0:43:a1:42:58:bc:5f:b6:ac:a1:de:b0:e3:d9:9b:
                    85:d3:6a:7d:a0:6d:ae:a6:2f:13:cf:cb:be:15:3b:
                    f1:62:17:10:2d:fb:1a:a9:7b:bc:71:26:4d:d6:77:
                    3c:e7:81:bd:a0:bf:66:7a:fb:86:8f:ea:4b:e4:40:
                    be:91:3f:93:cf:53:a1:f1:5e:92:59:77:9b:e0:3b:
                    f4:a1:99:b7:63:3d:02:62:19:71:13:b0:de:39:62:
                    79:07:ec:17:73:31:f2:d3:ce:13:dc:40:96:19:36:
                    97:ce:c9:b8:a0:15:fb:fe:b7:cf:f1:e8:c4:59:3c:
                    e1:80:bf:d0:47:e1:d1:2b:00:e8:e6:27:ac:32:2c:
                    fb:44:ec:bf:a8:5f:e4:28:69:f8:7e:28:21:af:ba:
                    a2:fa:c4:28:9b:36:cf:0b:39:11:00:45:7a:99:a1:
                    1b:87:5d:59:f6:0d:18:46:37:47:68:9e:76:8c:dd:
                    18:ef:5e:4c:74:a4:d6:9d:07:53:9e:e7:bd:a8:49:
                    9b:28:38:8b:de:2c:0a:9b:14:14:e4:99:b3:de:d2:
                    65:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F3:3E:F8:C8:4E:37:58:61:C4:74:C4:3A:78:D2:C3:7D:0C:79:96
            X509v3 Authority Key Identifier:
                keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/6_M--MhON1hhxHTEOnjSw30MeZY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.107.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:58:bb:b5:35:55:6f:85:53:91:a8:bf:e9:8b:21:57:ce:42:
         fe:e7:e7:49:2f:80:44:bd:ac:1c:18:30:55:5e:23:14:3f:3b:
         28:06:ab:a4:d8:df:30:08:6b:51:95:26:3d:c3:f5:61:4e:57:
         a7:93:a8:49:68:87:a7:c5:34:e1:6b:38:65:40:be:db:1b:1f:
         9f:b2:25:c1:8b:86:fb:88:86:90:66:04:b2:4f:46:03:6b:78:
         db:91:b2:22:2c:d8:0b:78:71:79:84:21:85:44:62:f2:c5:bb:
         1e:38:2f:3c:e7:61:79:70:e7:d0:83:d6:01:53:3a:5b:22:1e:
         9d:f7:78:0d:d6:e0:b6:96:55:60:70:96:29:da:c5:57:0c:3b:
         00:84:35:54:67:0d:6c:13:0b:e6:fe:ca:d6:0b:12:4c:52:a9:
         81:22:f7:47:dc:17:f8:f5:27:94:4a:77:7a:d5:1b:41:dc:c9:
         69:f1:03:d5:a8:01:92:bc:f7:20:5e:c2:fb:8e:4b:a3:f6:9a:
         e3:78:b9:11:e0:3c:6e:a2:5d:b6:19:e5:7e:79:55:33:bd:cc:
         c2:85:9b:dc:b8:0d:46:68:4e:a7:f3:c5:7d:1f:f8:76:05:70:
         95:99:8e:af:b4:0d:af:8f:4c:ac:9a:40:24:7f:99:a3:f4:b7:
         7a:9d:84:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:49 2024 by rpki-client on console-fra.rpki-client.org