Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/t6ykEht9btzAf63rxHEpmvekhUE.roa
File:                     t6ykEht9btzAf63rxHEpmvekhUE.roa (raw, json)
Hash identifier:          uaJ0tYu/HudtKXvBxfES/meywsPDLpJl0oidJupLGk8=
Subject key identifier:   B7:AC:A4:12:1B:7D:6E:DC:C0:7F:AD:EB:C4:71:29:9A:F7:A4:85:41
Certificate issuer:       /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial:       01856C413E5D15F34E722D76B8C0B90D62E7
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/t6ykEht9btzAf63rxHEpmvekhUE.roa
Signing time:             Sun 01 Jan 2023 07:34:53 +0000
ROA not before:           Sun 01 Jan 2023 07:34:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        185.1.191.0/24 maxlen: 24
                          2001:7f8:105::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:41:3e:5d:15:f3:4e:72:2d:76:b8:c0:b9:0d:62:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
        Validity
            Not Before: Jan  1 07:34:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b7aca4121b7d6edcc07fadebc471299af7a48541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f2:09:a1:f8:5f:66:2b:52:91:00:f4:40:a8:
                    24:c1:74:a2:af:ef:a4:50:18:75:66:4b:42:38:0b:
                    ea:03:56:92:0c:45:f5:88:c2:66:6f:9c:5b:49:da:
                    3b:f2:42:e0:f7:83:62:08:13:02:3c:9e:93:54:6d:
                    b9:4a:e9:39:79:3b:c3:e9:17:82:54:b1:31:32:6a:
                    a5:9d:d0:55:bf:ca:2f:8f:dd:73:5e:22:0e:ab:d4:
                    5e:af:68:d1:0b:ba:fd:c4:7e:8f:6a:ac:6b:5a:36:
                    a3:7a:0b:97:38:64:34:d2:b6:af:d9:96:43:b6:7c:
                    b3:ca:5c:e0:d4:44:07:86:00:e0:6a:8d:e0:21:9c:
                    93:72:2e:c9:11:3c:cf:31:c8:5b:4d:04:37:81:43:
                    7a:1b:5d:59:30:31:a9:ac:64:06:19:0a:63:77:4c:
                    29:84:56:9c:6b:cb:e4:5a:19:6f:9f:cd:4e:66:d0:
                    d4:fe:ea:f7:2c:3f:f9:ec:20:8b:34:e6:75:60:72:
                    d4:36:5b:62:86:0f:41:b8:89:7f:39:4a:81:46:fe:
                    97:2c:d3:b7:dd:ab:38:2c:a3:d9:e3:16:f9:91:e7:
                    d6:47:d5:ca:a0:16:ca:6d:ba:5e:d8:e0:7a:c7:f2:
                    f4:35:04:e7:c8:38:40:92:e4:7f:e0:9f:e7:6e:9d:
                    94:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AC:A4:12:1B:7D:6E:DC:C0:7F:AD:EB:C4:71:29:9A:F7:A4:85:41
            X509v3 Authority Key Identifier:
                keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/t6ykEht9btzAf63rxHEpmvekhUE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.191.0/24
                IPv6:
                  2001:7f8:105::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:ad:ea:6b:d6:cb:23:59:13:36:65:7d:65:f9:be:fe:0c:cd:
         b3:8b:7f:97:d7:1f:c9:02:06:3a:8d:06:96:b1:18:fc:c7:b6:
         88:56:4b:25:5a:7d:6f:e6:85:74:88:dc:da:dc:0d:00:63:3b:
         c7:01:a7:44:ec:21:53:2d:ab:ce:92:6d:07:f7:17:9d:a8:5f:
         6a:7c:6f:83:5b:cd:a6:53:79:3b:b4:eb:5e:05:63:a8:2c:d0:
         9f:65:8e:5f:ab:18:a4:9c:b5:9b:78:37:e0:27:18:a2:ef:de:
         88:c1:dc:a3:7f:4e:41:a3:95:93:17:62:93:4c:4e:01:b6:9a:
         86:26:f9:bf:b8:8f:35:ce:43:18:29:2f:5f:92:89:2c:bf:e9:
         5d:ba:06:9c:7a:77:22:7a:dd:28:7c:19:29:ce:e7:71:c4:44:
         20:b5:f1:07:08:1e:9f:c3:ac:13:e9:06:9a:6f:61:48:a2:20:
         21:2b:16:a3:ef:f7:85:e7:b8:30:44:77:dd:ca:8a:1b:4d:32:
         2d:0c:0e:3f:77:d0:de:96:e6:37:29:ac:f9:e7:37:46:67:23:
         dc:b4:a9:ee:af:89:b6:7a:20:e4:6e:26:a4:e9:14:bc:73:89:
         19:ec:98:c4:af:7a:a9:be:f5:af:57:ec:c6:d6:b6:66:cc:3f:
         6a:c2:fe:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:34 2024 by rpki-client on console-fra.rpki-client.org