Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6dYH0l9vYfDmhzP1YC0xv-nKSLc.roa
File:                     6dYH0l9vYfDmhzP1YC0xv-nKSLc.roa (raw, json)
Hash identifier:          QyMaSQkFB2DfXBCJISTKA0kvxsPPWioCGrM1Czx2xiw=
Subject key identifier:   E9:D6:07:D2:5F:6F:61:F0:E6:87:33:F5:60:2D:31:BF:E9:CA:48:B7
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       018571B63AFEF4FBA671202017AA7DBC1B7D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6dYH0l9vYfDmhzP1YC0xv-nKSLc.roa
Signing time:             Mon 02 Jan 2023 09:00:46 +0000
ROA not before:           Mon 02 Jan 2023 09:00:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200019
IP address blocks:        185.223.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Jun 2023 10:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:b6:3a:fe:f4:fb:a6:71:20:20:17:aa:7d:bc:1b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Jan  2 09:00:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e9d607d25f6f61f0e68733f5602d31bfe9ca48b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1d:43:da:3c:3f:6a:7f:bc:76:5b:01:e4:1f:
                    1d:76:21:b5:61:8c:52:84:d1:3d:e1:15:53:fc:55:
                    d2:a4:25:52:c6:06:9a:27:cc:ac:d9:3f:85:c6:25:
                    c0:3a:d1:8d:ff:0d:bf:dd:51:0e:1d:f6:0d:6c:76:
                    cf:2e:54:5c:fb:23:2b:22:0d:fc:5c:aa:10:6e:9b:
                    cb:bf:93:69:00:48:d4:0e:c3:14:bd:17:31:90:54:
                    7b:38:12:be:4a:42:34:f3:76:38:d8:03:ed:b4:79:
                    2b:c2:79:11:42:3d:e3:15:e7:a1:1b:f0:c2:de:8f:
                    fe:b7:6f:b0:f2:0c:97:4f:66:4f:88:0b:3b:e5:11:
                    a0:45:4c:56:5c:7c:32:c1:9d:d2:14:9c:29:48:ee:
                    26:7d:18:08:d2:6b:28:3a:8a:5a:86:39:58:e2:c1:
                    30:b0:d1:3c:36:32:fd:50:de:bf:90:fb:2b:ec:83:
                    3e:aa:3f:34:52:04:65:1f:19:98:59:fd:49:29:77:
                    7a:31:6d:ce:6b:64:cd:07:9d:22:01:ef:ad:ee:d4:
                    c3:cc:d7:44:ae:c8:26:0e:84:76:0d:2f:a6:9d:f4:
                    17:d3:3a:fe:c1:ae:0e:8a:57:9d:66:e2:70:1d:f5:
                    87:10:14:d8:52:c4:0e:a4:93:58:36:dd:56:7a:37:
                    ce:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D6:07:D2:5F:6F:61:F0:E6:87:33:F5:60:2D:31:BF:E9:CA:48:B7
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6dYH0l9vYfDmhzP1YC0xv-nKSLc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.223.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:2d:92:e5:ea:ad:cd:22:cb:cf:f6:a4:20:65:cd:3a:82:ed:
         24:c9:73:e5:23:c7:31:1e:42:31:9d:10:76:f1:95:26:26:b8:
         18:a7:61:46:d6:e9:02:f2:9e:56:d3:2c:6c:1d:89:3c:29:cb:
         a4:1a:05:44:bc:65:2f:28:9f:1f:e5:4d:0c:ee:06:18:0e:88:
         2b:8b:8d:01:85:f3:66:94:75:63:8a:ba:3e:9d:d1:af:6e:3c:
         11:cb:ef:b2:57:dc:3d:0d:89:4f:17:02:df:78:88:43:b2:e4:
         49:6a:76:d2:a8:a2:f7:3f:0b:cf:05:5e:17:74:20:d9:71:2b:
         8e:28:2c:51:a9:4f:22:6c:be:e1:1a:f1:06:8d:bc:98:fc:2e:
         cd:d5:5f:4c:78:0c:57:51:e6:eb:89:a5:80:bc:e4:17:34:6d:
         78:b8:a6:d5:bf:36:03:82:4c:55:7b:5b:e6:f7:d0:91:a7:6f:
         f6:e7:68:9e:92:14:0f:35:20:da:f5:ab:4c:2d:b6:e9:30:e6:
         67:08:5a:54:be:68:24:4f:fe:c6:c0:96:8b:da:36:ae:66:7c:
         4f:d7:19:62:60:b9:3b:4c:03:42:c8:03:76:6c:64:f3:ed:0d:
         c2:c6:ef:eb:19:36:d8:cb:55:10:d3:37:4c:af:e1:00:32:43:
         5c:ef:44:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org