Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/gkjvveuzBESierHWFNfb5oTXMFI.roa
File:                     gkjvveuzBESierHWFNfb5oTXMFI.roa (raw, json)
Hash identifier:          056C75EvaZwuZQmDwX25TmMGtigv9VjS3d4vJlJlKac=
Subject key identifier:   82:48:EF:BD:EB:B3:04:44:A2:7A:B1:D6:14:D7:DB:E6:84:D7:30:52
Certificate issuer:       /CN=316d95d8836c1f116a71ee21dec0ff671e1e070d
Certificate serial:       01856E38A1BCC1A785E3A284692B4D638685
Authority key identifier: 31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/gkjvveuzBESierHWFNfb5oTXMFI.roa
Signing time:             Sun 01 Jan 2023 16:44:43 +0000
ROA not before:           Sun 01 Jan 2023 16:44:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6730
IP address blocks:        193.222.106.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:38:a1:bc:c1:a7:85:e3:a2:84:69:2b:4d:63:86:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316d95d8836c1f116a71ee21dec0ff671e1e070d
        Validity
            Not Before: Jan  1 16:44:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8248efbdebb30444a27ab1d614d7dbe684d73052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d9:4f:69:86:3a:70:8e:3d:17:fe:d1:8f:6f:
                    88:33:f3:77:f7:03:32:82:55:a4:d3:86:10:ff:85:
                    3c:b9:2c:a4:92:c5:8f:fc:a5:a6:61:5f:38:15:33:
                    1a:de:dc:fe:ba:41:62:85:a9:ab:a6:1b:3e:67:cd:
                    ea:02:a5:85:18:b6:7b:0e:88:21:40:d5:a9:b5:3a:
                    6d:94:bb:b7:86:ba:20:27:d0:84:fe:c5:20:a8:7f:
                    1c:6f:be:c5:83:52:51:63:65:cc:4c:dd:75:6f:e6:
                    f7:b5:a0:03:28:ea:34:1f:09:51:ec:78:27:7d:4d:
                    bd:67:6a:a7:b3:c9:28:d1:23:02:96:4f:c5:a4:43:
                    20:87:26:58:2d:a9:18:8d:9c:1d:21:47:bd:8d:fd:
                    f6:05:e2:c5:b7:de:85:af:33:08:d7:e1:56:c3:6e:
                    91:07:70:46:b1:41:82:87:c6:5e:c1:ca:35:bc:91:
                    08:29:3a:4f:c2:d4:e4:cf:5f:90:0d:18:bd:ee:f8:
                    fa:88:79:b1:53:56:d9:a7:41:d6:9e:b7:74:cf:ba:
                    e2:a0:62:ab:fc:42:88:b1:65:58:d1:62:c6:c5:71:
                    c3:ad:11:c9:01:45:6f:da:15:be:58:d8:53:af:ae:
                    fb:9a:bf:a8:79:7f:6a:5c:78:d8:0f:73:ed:25:df:
                    a6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:48:EF:BD:EB:B3:04:44:A2:7A:B1:D6:14:D7:DB:E6:84:D7:30:52
            X509v3 Authority Key Identifier:
                keyid:31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/gkjvveuzBESierHWFNfb5oTXMFI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.222.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:74:d6:d8:9d:7a:a2:e7:3f:83:ad:d6:65:56:5d:99:2d:aa:
         7e:d2:d2:aa:c9:78:17:61:73:74:dc:3f:65:32:f3:38:73:dc:
         93:fc:40:a4:6d:fc:a1:41:d7:46:fd:4b:fd:54:ba:03:a0:08:
         f5:ef:96:35:34:dc:04:d4:e4:ea:be:82:40:ce:d8:f5:c0:ad:
         e2:27:f1:af:56:c7:03:55:45:a2:ec:ba:53:94:5c:14:58:e0:
         31:eb:f9:36:b6:17:58:90:f6:f8:7c:d3:7a:fa:90:3a:2d:e4:
         ec:49:a8:d4:64:9d:30:3f:2d:03:47:e4:70:06:17:a1:2e:fe:
         cf:4f:a1:5a:9a:64:db:59:20:51:56:37:00:f4:d5:a3:11:e1:
         7a:d8:e0:b8:eb:30:49:48:90:ba:58:07:db:67:bd:f1:82:0b:
         c5:da:f3:ea:3d:78:c3:2e:02:2c:a7:0f:a3:07:ea:8c:ed:38:
         d5:2e:68:d0:05:7c:e2:66:c5:6a:56:33:94:41:b9:23:fc:53:
         82:5c:bb:fc:36:86:9b:c2:fa:f8:8c:42:15:37:62:9f:d9:a9:
         35:79:80:66:1c:6d:29:b3:b0:43:03:4b:4f:b8:1e:39:51:c0:
         3e:57:9e:84:31:ce:c5:b3:de:6f:73:7e:77:3b:0c:fe:c0:6a:
         9c:46:14:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:13 2024 by rpki-client on console-fra.rpki-client.org