Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/YKwEwHoU7q9jTrRzFtoShhOJjyU.roa
File:                     YKwEwHoU7q9jTrRzFtoShhOJjyU.roa (raw, json)
Hash identifier:          TleTuUUikwXsJMNUduNOZBGhI2xVk80DPfjrpwgQBgs=
Subject key identifier:   60:AC:04:C0:7A:14:EE:AF:63:4E:B4:73:16:DA:12:86:13:89:8F:25
Certificate issuer:       /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial:       018BAED159C7EB35087707D449DE3664D36F
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/YKwEwHoU7q9jTrRzFtoShhOJjyU.roa
Signing time:             Wed 08 Nov 2023 12:03:57 +0000
ROA not before:           Wed 08 Nov 2023 12:03:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6730
IP address blocks:        213.146.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ae:d1:59:c7:eb:35:08:77:07:d4:49:de:36:64:d3:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
        Validity
            Not Before: Nov  8 12:03:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=60ac04c07a14eeaf634eb47316da128613898f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:20:4d:cb:bf:6e:df:c4:d3:d6:2c:16:26:c0:
                    8c:9c:71:36:0a:b0:18:16:eb:10:cd:52:df:dc:bc:
                    e1:d1:af:ec:39:a7:c0:bf:f6:29:f0:dd:a6:d0:eb:
                    e1:10:15:d7:5b:9f:b1:c3:5c:26:de:d7:a1:d1:5b:
                    a5:8a:d2:ea:5d:3b:3a:26:f2:26:0d:4d:34:04:30:
                    33:68:81:24:2f:39:e3:31:82:29:b5:63:b7:29:ac:
                    32:7f:37:a4:9b:e5:d0:54:11:d6:17:a8:23:b0:24:
                    ed:44:89:4c:21:4f:ac:46:1e:e3:a3:49:f0:4e:61:
                    79:4a:72:86:10:65:f4:07:c8:cf:c6:41:98:e5:41:
                    98:b6:86:45:df:bb:57:ca:a9:d5:d8:39:f6:de:80:
                    94:44:bf:e3:0a:0b:20:ae:b1:56:fb:30:81:43:30:
                    c6:df:43:29:3a:98:0a:66:14:62:c1:8f:64:a5:40:
                    1b:18:32:38:5f:0e:cb:42:95:c4:58:f8:5b:76:1b:
                    e6:25:3b:20:04:0a:6d:4c:6c:fa:06:0b:68:5c:59:
                    1a:2c:7d:1c:09:c7:b6:f3:2c:16:30:43:d5:4d:90:
                    80:49:24:4e:01:d5:a4:2c:cd:99:37:2f:4d:80:bb:
                    6f:95:4c:fe:25:d3:71:c2:4a:bd:c8:3c:92:e2:1e:
                    92:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AC:04:C0:7A:14:EE:AF:63:4E:B4:73:16:DA:12:86:13:89:8F:25
            X509v3 Authority Key Identifier:
                keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/YKwEwHoU7q9jTrRzFtoShhOJjyU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.146.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:dc:14:88:da:8d:ed:a2:45:f9:21:dc:16:ba:4e:5f:6d:96:
         49:ef:ab:d5:70:09:fd:13:7b:d3:a1:22:df:80:32:03:35:62:
         6b:cc:b6:d5:98:a4:99:4f:58:32:29:8d:00:18:32:07:87:be:
         83:32:bd:99:1e:c0:14:fa:f2:66:27:87:e8:ed:f7:51:b0:ab:
         b6:62:14:61:af:4f:25:ee:2b:80:10:5b:5a:8f:ce:5e:b7:6a:
         5d:a5:f9:d9:f4:c2:ed:cc:fc:40:ac:43:79:0d:48:f6:c2:13:
         a3:a4:67:e4:5e:0a:b5:a0:4c:ad:67:49:da:f4:e6:17:70:df:
         09:4e:de:04:40:1f:a3:de:a2:05:a5:c3:34:c7:32:22:17:e3:
         ed:a1:40:3c:3d:35:10:d5:46:06:f2:f8:2d:7d:da:f0:65:3a:
         2e:40:ad:c5:e5:e8:d8:45:79:58:62:52:1b:a1:eb:ef:5d:1f:
         46:0f:6c:2e:b3:2f:90:f8:fb:2f:7a:71:e5:bf:84:04:aa:ec:
         f9:86:47:b3:a7:37:5c:d9:18:17:81:58:0c:7e:e9:e1:ca:b9:
         6a:c8:6d:ef:c2:10:1e:b1:5b:de:03:9a:a6:7c:5f:da:38:dd:
         03:8d:f0:f9:1b:2e:b4:3e:21:4a:96:e1:45:ce:33:b1:f3:4c:
         67:61:84:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:20 2024 by rpki-client on console-fra.rpki-client.org