Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/6SJQI9-3Jt47jJsBo6Tz_aezjTw.roa
File:                     6SJQI9-3Jt47jJsBo6Tz_aezjTw.roa (raw, json)
Hash identifier:          inE/O+WDvEq3rqZEP5sSqJ6VHT+q53feijs4tXGk1JY=
Subject key identifier:   E9:22:50:23:DF:B7:26:DE:3B:8C:9B:01:A3:A4:F3:FD:A7:B3:8D:3C
Certificate issuer:       /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial:       01929E5A1784A9C088B128939B6DBB893CD7
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/6SJQI9-3Jt47jJsBo6Tz_aezjTw.roa
Signing time:             Fri 18 Oct 2024 06:39:17 +0000
ROA not before:           Fri 18 Oct 2024 06:39:17 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        185.255.56.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sat 26 Oct 2024 08:35:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:9e:5a:17:84:a9:c0:88:b1:28:93:9b:6d:bb:89:3c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
        Validity
            Not Before: Oct 18 06:39:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e9225023dfb726de3b8c9b01a3a4f3fda7b38d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:5d:00:72:a4:58:ca:45:d8:e1:89:b7:b9:
                    98:90:9e:9e:28:7a:9b:24:4e:31:ad:fe:49:95:d0:
                    09:be:38:6a:85:2b:d2:a5:2a:9b:45:75:cd:01:33:
                    fc:e1:fd:d5:6b:95:c3:b4:fb:31:07:a9:9d:5e:8f:
                    e5:9f:74:18:75:ca:d3:14:32:ca:51:a0:d0:e5:95:
                    29:4a:cb:37:a8:57:5b:82:d8:01:c1:45:10:c4:57:
                    1c:81:3e:db:97:96:bf:4d:36:c3:a0:a3:72:03:c0:
                    fb:2e:82:10:63:3d:b0:83:3f:e6:fc:bd:da:7e:66:
                    d2:52:39:f8:02:f5:54:61:24:7a:8c:b4:0c:b2:43:
                    8a:93:48:07:80:be:c6:5f:00:7c:c3:da:44:29:e9:
                    c1:4e:2a:fb:81:bb:1b:30:d2:67:93:8c:31:6b:3b:
                    a8:b0:b1:36:98:69:f4:0c:57:17:f3:13:e5:6c:7a:
                    c8:d4:14:f4:7f:ee:dd:bf:f6:62:ed:ea:05:32:f9:
                    46:8e:d3:7c:82:01:2b:4f:9b:8f:a6:8b:02:1b:e7:
                    c6:21:bf:85:a7:08:1b:e4:4d:b6:80:4f:2d:ec:49:
                    22:43:da:29:3f:45:ba:d7:39:3e:11:ba:1b:6b:c8:
                    f0:bd:4f:3f:fe:83:85:c5:98:b7:30:46:a4:8c:63:
                    80:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:22:50:23:DF:B7:26:DE:3B:8C:9B:01:A3:A4:F3:FD:A7:B3:8D:3C
            X509v3 Authority Key Identifier:
                keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/6SJQI9-3Jt47jJsBo6Tz_aezjTw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.255.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:04:3b:6f:60:59:80:98:0a:86:3b:3b:66:49:0d:14:d0:00:
         b6:79:bf:dc:b0:8f:17:74:a8:85:7d:ce:3f:00:2e:8a:32:77:
         b1:22:ae:14:a7:fe:a4:6e:64:3f:24:1f:c5:4d:15:87:8b:c7:
         9f:15:c2:4f:6c:a4:ce:fa:b3:9d:80:f1:e3:34:87:1c:49:e1:
         a5:49:cf:a4:7a:0b:32:dc:9a:7a:04:9f:dd:c0:3d:d2:66:e6:
         b7:26:77:21:f3:bb:87:cc:44:79:c9:cd:fd:77:b6:44:35:6d:
         bc:ad:b5:f7:d1:88:cb:de:5e:6f:56:c0:89:dd:a2:0c:b2:86:
         14:24:5c:dc:48:f8:e0:2d:df:50:34:db:d0:95:bb:fc:d5:a1:
         3b:92:4c:f9:cc:ef:01:0a:cf:32:97:fd:75:b9:1b:b7:da:49:
         d5:8b:5f:17:12:da:ff:e8:01:1a:78:fd:24:39:b9:83:82:48:
         3d:d0:1e:51:17:28:11:0b:a7:0f:21:32:bd:7d:c9:56:83:33:
         63:17:51:9a:82:70:d0:39:13:7f:31:ca:1b:a5:5d:9d:55:fe:
         b9:6b:b2:14:ee:99:a7:39:92:cb:63:f9:0d:f5:45:29:e7:c8:
         fe:ae:e8:de:bd:c6:8f:29:1f:5e:0a:61:d8:73:68:63:0a:56:
         3d:13:cd:3a
-----BEGIN CERTIFICATE-----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Generated at Sat Oct 26 11:10:50 2024 by rpki-client on console-fra.rpki-client.org