Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/6q3nDf3pY549OxnEAIls4Obrvgc.roa
File:                     6q3nDf3pY549OxnEAIls4Obrvgc.roa (raw, json)
Hash identifier:          92fsN6/DHIVyBOuKtnSjkqsbhCwQLWaYGwZAqUAqaps=
Subject key identifier:   EA:AD:E7:0D:FD:E9:63:9E:3D:3B:19:C4:00:89:6C:E0:E6:EB:BE:07
Certificate issuer:       /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial:       0188444E0896980D65E5DC3F004F3B5BD27B
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/6q3nDf3pY549OxnEAIls4Obrvgc.roa
Signing time:             Mon 22 May 2023 16:32:24 +0000
ROA not before:           Mon 22 May 2023 16:32:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16633
IP address blocks:        185.201.18.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 22 May 2023 18:42:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:44:4e:08:96:98:0d:65:e5:dc:3f:00:4f:3b:5b:d2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
        Validity
            Not Before: May 22 16:32:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eaade70dfde9639e3d3b19c400896ce0e6ebbe07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f7:c8:89:df:12:89:89:1a:c7:6d:ad:40:42:
                    5c:b5:23:ca:fc:f2:d1:f2:ed:00:4c:48:55:27:b0:
                    af:48:69:8d:b2:5d:98:2a:8e:b8:2f:36:8c:5c:1d:
                    6c:08:f2:85:c5:02:b4:d5:f7:83:61:2e:eb:b0:aa:
                    fe:63:c3:b1:55:d8:d7:5b:32:14:1b:1b:91:40:18:
                    a0:cd:3d:47:b0:f1:25:21:12:1a:a5:f6:13:7f:9f:
                    f3:63:42:90:ae:59:09:1a:4f:95:d7:d1:9d:42:1e:
                    6d:89:5f:91:0a:4f:5a:8d:2a:ae:79:3b:0f:6b:12:
                    74:87:90:4a:be:19:b5:58:31:b1:5f:4e:5a:d3:36:
                    47:4a:b5:9c:9d:17:a5:06:f7:38:93:ef:c1:8b:7f:
                    e0:93:9b:3b:4a:de:0f:7c:f5:6a:50:51:ed:40:3a:
                    72:af:6d:c1:35:37:dd:5d:90:24:c9:dc:53:02:d4:
                    26:51:0b:13:e5:e9:10:d6:00:27:ba:2d:24:e6:57:
                    a1:11:74:b1:83:8a:eb:c4:f4:e4:84:36:91:18:1d:
                    4e:b4:98:bc:b8:5e:2a:b8:26:42:1e:d4:bf:31:e6:
                    2e:56:c8:2b:78:9d:6a:a0:4e:50:ed:f6:66:ea:20:
                    1b:10:55:81:2a:0d:df:6f:e1:e8:ee:2a:c2:cb:35:
                    de:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AD:E7:0D:FD:E9:63:9E:3D:3B:19:C4:00:89:6C:E0:E6:EB:BE:07
            X509v3 Authority Key Identifier:
                keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/6q3nDf3pY549OxnEAIls4Obrvgc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.201.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:50:ef:65:9d:82:30:ce:14:f0:82:46:fd:af:6c:33:13:10:
         8b:f4:7f:43:e6:c1:1e:11:b4:ee:c8:6f:32:08:33:5b:c8:4f:
         f0:c4:8e:fa:3d:1c:3b:cb:b0:e8:bb:33:0f:3a:fd:ca:2a:40:
         c5:df:52:db:e1:f4:e2:86:f7:9e:ca:e7:6d:c1:6a:b1:30:8c:
         62:31:13:95:b3:ad:df:c1:a3:16:48:05:5d:0c:55:eb:74:ef:
         a3:d3:51:c9:80:70:6f:dc:18:85:7d:de:09:22:fe:b0:b6:4c:
         fc:92:eb:30:d5:bf:6e:86:75:03:b4:50:38:83:14:16:2c:90:
         83:fd:e9:5c:e9:f0:24:4e:67:f5:2a:61:95:b4:48:11:45:a8:
         5e:4e:77:98:a7:e1:bc:31:cf:bd:42:cc:41:03:e2:d2:88:1d:
         cc:31:c6:ce:ac:76:c2:31:50:36:12:82:09:59:7d:7c:ed:73:
         7f:1a:a1:d1:61:64:91:28:09:3d:02:c8:c2:67:f5:f1:38:b5:
         27:0b:ce:2a:98:d4:72:6b:9e:7a:b7:2b:10:90:68:de:95:1b:
         2d:e4:a3:a0:58:62:f5:6c:fa:c1:11:bd:08:db:f1:03:56:bc:
         d8:a4:03:6c:9c:74:b6:c0:f0:fb:8b:3a:a7:86:5f:ff:97:72:
         cd:04:f8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:32 2024 by rpki-client on console-ams.rpki-client.org