Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/e6VSN_BHUZ5GzJ-vLlcjaDHcAcE.roa
File:                     e6VSN_BHUZ5GzJ-vLlcjaDHcAcE.roa (raw, json)
Hash identifier:          uel7Na2mqKytWwCI5vv2HRBscGQ2rNok+kccgLwci1g=
Subject key identifier:   7B:A5:52:37:F0:47:51:9E:46:CC:9F:AF:2E:57:23:68:31:DC:01:C1
Certificate issuer:       /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial:       018668E8DF09869AE68B090D0A900FF37CC4
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/e6VSN_BHUZ5GzJ-vLlcjaDHcAcE.roa
Signing time:             Sun 19 Feb 2023 09:02:17 +0000
ROA not before:           Sun 19 Feb 2023 09:02:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15897
IP address blocks:        193.31.7.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 19 Feb 2023 09:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:68:e8:df:09:86:9a:e6:8b:09:0d:0a:90:0f:f3:7c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
        Validity
            Not Before: Feb 19 09:02:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ba55237f047519e46cc9faf2e57236831dc01c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e9:a8:d9:d1:fa:80:36:e9:66:b9:d9:0f:2f:
                    62:a7:e3:cf:e0:77:ca:30:09:33:fd:d2:e3:21:ac:
                    1f:0d:e2:e5:28:d7:77:f0:68:e1:a0:ce:25:fd:12:
                    8f:f7:2d:cc:79:45:d6:cc:a6:82:7c:28:e7:c3:ab:
                    bb:5c:54:b1:5b:89:08:cb:fc:34:a8:48:9b:d9:69:
                    ff:e1:b1:52:99:05:5a:9d:a0:9c:8a:e0:99:48:14:
                    9b:2b:80:ac:71:33:e2:e5:a2:71:52:12:0b:cb:12:
                    51:a6:fe:6d:81:de:25:48:5b:cd:8b:6d:60:7a:84:
                    82:1f:9a:e7:bc:0e:c8:c9:a5:e8:a9:4b:24:29:60:
                    dd:3c:41:a2:0a:b9:f7:a9:51:8a:ad:01:2f:98:33:
                    a4:da:61:b7:3c:34:fb:37:0e:a9:26:6e:ec:6b:20:
                    5a:1e:bd:8e:75:5b:e4:18:0f:ef:71:a6:7a:ab:3f:
                    f0:ec:e8:fe:7a:d8:06:8d:50:b7:a3:72:65:86:91:
                    cc:fb:92:a6:a8:7b:51:a0:31:d4:67:db:b1:bb:87:
                    8b:a6:7f:65:f3:a6:04:39:22:07:b8:e9:32:db:8a:
                    ff:98:aa:87:7b:71:75:fb:b9:1d:30:5a:b2:2f:88:
                    3b:93:c3:3d:bc:d0:fd:6c:00:a4:4c:ee:2d:56:ff:
                    f7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A5:52:37:F0:47:51:9E:46:CC:9F:AF:2E:57:23:68:31:DC:01:C1
            X509v3 Authority Key Identifier:
                keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/e6VSN_BHUZ5GzJ-vLlcjaDHcAcE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.31.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:ea:bd:44:a1:96:53:f8:24:d5:cc:3e:ca:ae:a4:66:59:21:
         05:b7:8c:3b:f9:fd:c6:34:d3:bc:83:22:ba:c6:f3:25:42:e0:
         cf:d5:f4:03:83:0f:7f:87:e4:4d:ce:72:58:ea:73:c1:87:a2:
         25:f1:18:91:b5:c8:6f:ae:20:0f:04:7b:d0:d8:bc:d8:c1:60:
         01:f8:62:92:47:4e:2b:ae:1b:ba:62:8b:f7:2c:5f:33:ed:13:
         09:d8:1c:5b:02:f3:bd:13:a1:90:0c:60:de:40:d1:79:65:c1:
         92:28:e4:ec:cb:98:ea:bc:62:25:05:41:a9:e8:47:b0:2a:4c:
         6b:51:fa:0a:2d:40:bd:8c:a0:a5:4f:97:19:78:80:38:22:0d:
         5a:ac:a8:4a:a1:7a:8f:c3:04:41:a3:35:aa:0f:38:0d:1e:44:
         bc:0d:05:66:ae:48:0e:b6:73:65:5e:1a:cc:75:af:83:37:87:
         50:1b:df:2b:b2:19:db:c3:9b:5b:42:15:5e:79:3c:e4:48:6d:
         49:fb:14:9d:2c:c9:0f:86:5d:35:84:b9:e9:46:30:60:a9:fa:
         fc:44:d3:58:62:2d:e2:b1:66:76:33:79:61:70:35:f7:9c:72:
         7f:ae:94:65:bb:2a:3c:32:a8:e1:80:0f:b9:27:be:98:1f:df:
         1b:63:fd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:24 2024 by rpki-client on console-ams.rpki-client.org