Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/6i5dy9AQfo-EYNwiIO9kKis0XOE.roa
File:                     6i5dy9AQfo-EYNwiIO9kKis0XOE.roa (raw, json)
Hash identifier:          57Jyrn6ZDONfW1xKvbtSeA1QUEQ0jFs90mdLFz7XqQs=
Subject key identifier:   EA:2E:5D:CB:D0:10:7E:8F:84:60:DC:22:20:EF:64:2A:2B:34:5C:E1
Certificate issuer:       /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Certificate serial:       01857094E2811C9410EA2C6A4337F5BDC1C5
Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/6i5dy9AQfo-EYNwiIO9kKis0XOE.roa
Signing time:             Mon 02 Jan 2023 03:44:43 +0000
ROA not before:           Mon 02 Jan 2023 03:44:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210571
IP address blocks:        185.115.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:94:e2:81:1c:94:10:ea:2c:6a:43:37:f5:bd:c1:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
        Validity
            Not Before: Jan  2 03:44:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ea2e5dcbd0107e8f8460dc2220ef642a2b345ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b3:63:44:9d:20:8a:c1:98:10:0e:02:c6:5b:
                    a1:cf:80:bd:12:23:46:4c:1d:2a:2b:d5:f7:79:4b:
                    d0:1e:80:57:f5:b6:72:09:7b:00:b6:bc:56:27:64:
                    d1:cf:2c:f9:49:4c:8a:f5:76:b6:a6:ed:a8:c0:ce:
                    aa:7a:85:72:aa:6b:40:97:f9:36:c0:16:01:20:58:
                    de:20:c4:d9:cc:a9:b7:28:78:5d:16:38:27:8e:b2:
                    6c:7b:18:2c:76:31:38:58:15:70:3b:97:e9:6d:cf:
                    8e:93:f4:99:0d:80:d1:d4:be:0d:d3:a8:d8:63:c5:
                    69:24:6d:d1:64:67:a5:be:75:8f:19:08:f2:da:10:
                    81:37:dc:36:9e:4b:30:fa:ec:39:54:da:6f:64:66:
                    32:28:bb:3d:41:13:ca:0b:6b:15:de:dc:90:69:db:
                    66:b9:ee:2d:bf:e1:50:05:4a:d7:dd:d8:c2:1a:b7:
                    af:8e:89:0a:5b:cc:f4:bb:98:a2:d1:47:8b:32:f8:
                    48:9b:3e:7c:98:ad:9b:c9:74:0b:e8:bd:49:7a:c8:
                    11:0a:f8:9f:83:58:fe:8a:be:a1:66:45:98:36:29:
                    7e:23:ef:7f:4a:11:31:f2:98:4a:e3:a1:c0:b8:d0:
                    c7:b4:5a:29:42:5f:e2:b5:29:5a:31:cf:a2:d5:94:
                    56:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2E:5D:CB:D0:10:7E:8F:84:60:DC:22:20:EF:64:2A:2B:34:5C:E1
            X509v3 Authority Key Identifier:
                keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/6i5dy9AQfo-EYNwiIO9kKis0XOE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:66:29:e0:e4:11:68:22:d5:ca:23:79:04:e9:74:6c:b6:1c:
         b8:dc:bd:75:92:47:c0:e8:5b:a9:4f:0a:b7:65:7f:59:e6:7b:
         e8:4d:6e:ea:0b:5c:d9:f3:76:02:f6:87:f6:d7:73:bd:c3:47:
         57:48:43:02:b6:9a:1c:02:b1:44:a6:60:13:20:33:9b:64:1c:
         fe:a8:fe:81:83:e1:db:fd:fe:8f:dc:cc:17:bc:9a:cb:b1:73:
         c6:47:51:21:a4:f0:88:97:81:c9:88:93:3e:73:87:37:ce:5b:
         40:63:26:5c:2b:34:61:d2:64:3b:ac:88:d7:d0:ef:ae:cc:1e:
         5c:fc:7c:e9:38:41:c0:ac:aa:f9:1e:d2:f3:63:10:6a:f7:df:
         11:de:1f:37:80:b4:1f:b0:a3:4e:6d:2b:dc:c4:55:9e:74:50:
         06:23:9c:4b:17:d8:c7:5f:3b:16:98:3a:94:c8:ae:72:5c:67:
         fd:c0:7a:8f:4a:14:91:a0:90:e7:5f:95:6a:e9:a4:f6:8d:56:
         5d:b3:e6:54:c1:4f:68:d4:b0:f8:03:c8:fd:aa:a1:28:ba:4a:
         5d:b2:22:32:d6:4e:4b:d0:9e:a1:f5:8e:ce:6c:df:52:2d:a8:
         e3:0e:13:d7:6b:87:08:aa:6a:39:36:e8:77:34:5c:49:15:96:
         05:82:5f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:10 2023 by rpki-client on console-fra.rpki-client.org