Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/6ZoYbAGfe9DCOqMuidTlfvxLLos.roa
File:                     6ZoYbAGfe9DCOqMuidTlfvxLLos.roa (raw, json)
Hash identifier:          wWB9PbJKRJpS0LkA0a3ANQfRFhSbSU4xkPNr+QDwpVA=
Subject key identifier:   E9:9A:18:6C:01:9F:7B:D0:C2:3A:A3:2E:89:D4:E5:7E:FC:4B:2E:8B
Certificate issuer:       /CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e
Certificate serial:       01857102D7ADBCAAB1168D09C9EA9E07BA17
Authority key identifier: BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/6ZoYbAGfe9DCOqMuidTlfvxLLos.roa
Signing time:             Mon 02 Jan 2023 05:44:49 +0000
ROA not before:           Mon 02 Jan 2023 05:44:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48200
IP address blocks:        193.36.46.0/24 maxlen: 32

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:02:d7:ad:bc:aa:b1:16:8d:09:c9:ea:9e:07:ba:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e
        Validity
            Not Before: Jan  2 05:44:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e99a186c019f7bd0c23aa32e89d4e57efc4b2e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0b:c4:50:86:9f:57:2c:47:6a:ef:89:4e:81:
                    04:d7:be:dc:d3:69:69:8a:96:ec:78:94:99:ca:29:
                    f3:c3:9a:fe:74:1f:ce:25:cd:28:e7:ee:e1:78:92:
                    a4:85:80:02:0e:45:63:01:df:b6:9e:2d:a0:04:53:
                    67:8f:7a:bd:ed:38:43:cd:e6:b4:20:88:6d:73:0c:
                    f1:bb:92:62:7f:cb:ca:c1:1e:3d:36:35:e6:17:dd:
                    5c:33:c9:69:cc:bc:bb:c6:04:8f:74:4b:7a:62:6d:
                    13:2c:bf:65:ac:1a:8a:40:fe:1a:1e:bc:8b:96:d4:
                    ac:e0:10:bb:32:1c:57:81:7e:97:87:52:8a:9f:91:
                    95:b9:11:aa:5d:d6:02:89:13:d3:c5:fa:67:46:0d:
                    35:39:e6:bf:5c:ab:8b:65:10:c3:c2:90:54:34:27:
                    81:82:6b:b4:e0:f9:b2:df:1b:95:af:8b:46:a4:7d:
                    f3:70:28:06:ef:94:56:f6:59:6b:c1:c8:5b:10:42:
                    f9:68:fc:f2:0a:7e:f2:92:0c:f2:89:95:45:68:7f:
                    1d:3e:58:df:5a:ef:88:fd:6a:11:47:6f:7e:d7:d0:
                    89:e1:a7:5c:4d:c1:eb:31:be:e6:fa:4f:f3:ba:ea:
                    18:35:3b:d3:ff:f0:9d:19:22:59:2f:59:59:e5:0a:
                    55:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9A:18:6C:01:9F:7B:D0:C2:3A:A3:2E:89:D4:E5:7E:FC:4B:2E:8B
            X509v3 Authority Key Identifier:
                keyid:BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/6ZoYbAGfe9DCOqMuidTlfvxLLos.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:ff:21:6b:31:9c:6d:a1:55:77:3c:22:7f:1f:37:e9:e6:fa:
         0c:4b:92:77:db:21:65:8a:56:ad:fc:22:02:b7:20:c3:bf:bf:
         c5:8b:1a:de:fe:57:aa:09:7b:54:4a:3c:dd:14:0d:21:8b:c3:
         59:c3:10:86:15:08:bb:11:3a:ce:f2:71:bf:26:c9:6f:82:d0:
         25:40:f4:52:4c:42:18:33:c7:06:0d:b5:68:6c:a7:54:f7:0a:
         52:cb:16:86:61:85:a8:45:e7:e3:13:af:64:34:99:d5:3a:d1:
         57:75:a1:8e:64:01:ae:7c:b5:c7:f0:3c:b1:02:43:14:f3:5e:
         56:f6:bf:f8:e2:ca:99:d5:15:bb:34:29:a7:ee:7e:58:c9:b0:
         41:73:c1:bd:58:11:71:fa:24:8e:9a:31:97:1c:7c:70:66:9a:
         10:30:11:9a:7b:6d:89:aa:10:b4:6e:d6:a1:78:66:9d:75:e0:
         43:33:77:5f:7b:66:cf:78:5f:c8:15:e2:42:19:56:2b:7e:c1:
         ca:0c:3c:9e:28:15:16:39:bf:08:44:f9:0a:cc:00:a5:4d:0e:
         18:97:7f:39:92:ee:e3:bb:a1:d5:70:72:4a:3e:7e:33:fd:3b:
         c4:d7:ca:6c:f1:86:53:36:7f:c5:e2:8a:0a:66:ab:3f:f1:b0:
         57:5a:0c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:44 2024 by rpki-client on console-fra.rpki-client.org