Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/6V0DzAVcepAmXOYY0xJO1_Xks3s.roa
File:                     6V0DzAVcepAmXOYY0xJO1_Xks3s.roa (raw, json)
Hash identifier:          ceuimQy0sD8eeO0+6+dlcKvOROfbNTwb3okXrkqt798=
Subject key identifier:   E9:5D:03:CC:05:5C:7A:90:26:5C:E6:18:D3:12:4E:D7:F5:E4:B3:7B
Certificate issuer:       /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial:       0191FEED4862AD959FD58D388B22D4F414B4
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/6V0DzAVcepAmXOYY0xJO1_Xks3s.roa
Signing time:             Tue 17 Sep 2024 07:40:48 +0000
ROA not before:           Tue 17 Sep 2024 07:40:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216300
IP address blocks:        94.159.112.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 18 Oct 2024 15:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fe:ed:48:62:ad:95:9f:d5:8d:38:8b:22:d4:f4:14:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
        Validity
            Not Before: Sep 17 07:40:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e95d03cc055c7a90265ce618d3124ed7f5e4b37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:39:17:70:1e:25:c7:78:45:ba:81:ae:ec:
                    c9:e2:41:3d:6e:94:7b:46:de:c1:3a:f7:55:18:d2:
                    85:00:c0:a2:91:71:14:26:ed:b6:e3:81:f8:2e:c7:
                    55:ce:62:cf:bd:05:ec:d2:a3:48:20:d2:b3:97:2f:
                    2a:45:2e:ea:b9:10:aa:9b:ef:5b:8c:c2:33:09:61:
                    e9:22:7f:d3:cc:6a:7c:a4:ba:b8:c9:96:bd:0f:57:
                    00:7d:66:d8:5f:e9:06:a4:d9:ed:ac:65:fe:3f:00:
                    7a:a6:0d:3b:9e:45:78:56:c3:0e:58:4d:4a:0f:05:
                    2b:cc:89:3b:f4:f0:45:dd:e9:cf:0f:1d:84:1d:31:
                    98:ab:8c:84:6f:96:8c:ee:a7:ba:fc:04:62:6d:81:
                    1d:4d:62:29:ae:02:46:41:b9:a9:5d:07:32:4c:af:
                    7d:ff:27:1a:ce:f2:f1:8d:ef:d5:55:db:54:04:94:
                    ae:72:ff:65:2a:6a:e2:a2:b0:9c:ca:96:bd:ab:a8:
                    b4:90:dd:ed:46:e9:95:f1:ef:fc:91:fc:92:f6:1c:
                    55:06:c3:0d:0c:18:9c:a3:21:be:df:92:e0:9d:5e:
                    81:c6:c6:58:32:58:f8:61:27:9c:36:3e:fe:1a:d7:
                    7d:40:16:1b:ce:e3:cd:43:69:ce:06:d2:25:3a:db:
                    1f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5D:03:CC:05:5C:7A:90:26:5C:E6:18:D3:12:4E:D7:F5:E4:B3:7B
            X509v3 Authority Key Identifier:
                keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/6V0DzAVcepAmXOYY0xJO1_Xks3s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.159.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:a9:00:5f:96:b4:0c:ba:5a:81:ea:61:16:ec:1a:a1:48:40:
         35:41:49:06:19:d6:2a:5a:aa:96:c8:50:b5:5f:fd:a2:ab:a1:
         23:af:bf:f2:1a:12:4a:89:37:89:b2:e9:ba:a4:e5:09:74:90:
         3b:7c:51:d3:e2:fa:39:28:94:58:38:ee:a1:0e:05:e8:f4:b7:
         78:cc:02:57:f9:9e:51:67:56:88:d7:fc:73:21:01:60:b6:8a:
         7e:4a:cc:79:54:a9:db:f3:de:f4:6b:d0:df:d4:08:e0:0b:fe:
         26:ac:e1:6e:7b:c4:61:70:97:95:78:5d:aa:b4:d6:5d:94:f5:
         ab:0c:34:67:d9:b1:a1:8c:74:a9:1a:ec:c5:9d:2a:66:1c:7a:
         a0:3c:84:54:d4:a9:24:df:52:22:83:a9:f7:88:9e:e6:a8:3e:
         46:b5:62:6d:b6:4d:e6:94:e4:a1:f1:11:cc:07:23:af:34:56:
         f2:b7:ba:95:17:e6:87:9b:60:9e:e0:3b:f9:2d:46:a0:8b:3e:
         ba:5b:89:d5:fe:47:15:68:e5:3f:6b:af:37:e2:5e:19:b8:32:
         d3:7b:94:cb:e4:bb:2e:67:29:66:89:ce:de:93:fa:96:ea:5c:
         c0:c5:b7:e0:74:fa:8b:56:51:ae:70:c2:a5:fa:e7:ab:2f:93:
         87:9b:49:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 19:03:25 2024 by rpki-client on console-ams.rpki-client.org