Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/6Fl8wOliTArCZmpEWvmjZgykFe8.roa
File:                     6Fl8wOliTArCZmpEWvmjZgykFe8.roa (raw, json)
Hash identifier:          2qoScFRAd6IPjWpQ4/a45qv+9oGmaR/Zjhx8E0iuEAI=
Subject key identifier:   E8:59:7C:C0:E9:62:4C:0A:C2:66:6A:44:5A:F9:A3:66:0C:A4:15:EF
Certificate issuer:       /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial:       01878E2FFB658FC5BED495187ED3AB598613
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/6Fl8wOliTArCZmpEWvmjZgykFe8.roa
Signing time:             Mon 17 Apr 2023 07:48:41 +0000
ROA not before:           Mon 17 Apr 2023 07:48:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.81.183.0/24 maxlen: 24
                          93.114.61.0/24 maxlen: 24
                          93.114.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:8e:2f:fb:65:8f:c5:be:d4:95:18:7e:d3:ab:59:86:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
        Validity
            Not Before: Apr 17 07:48:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e8597cc0e9624c0ac2666a445af9a3660ca415ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:0d:5d:fb:df:18:39:a3:a4:c8:cb:81:4f:
                    1f:50:e3:b1:84:94:89:12:23:06:ff:dd:dd:88:7b:
                    1f:79:8c:01:8a:db:87:0e:a9:1d:5e:32:53:2e:c9:
                    44:fb:cb:c9:a3:a1:c9:69:39:b7:1b:e0:84:f4:c7:
                    55:e3:c3:ea:14:b1:a3:24:6d:76:4c:91:f8:62:58:
                    a8:d3:b0:7a:cf:61:d6:27:3b:9a:23:18:8a:eb:4c:
                    2e:60:40:08:3a:ab:07:ae:01:39:39:43:bb:83:88:
                    e4:20:c4:c4:38:71:f1:1f:b6:1b:2a:08:41:55:be:
                    ae:50:da:d6:6b:a0:48:03:19:d4:4e:d4:20:cf:71:
                    57:f6:25:1a:3a:7c:c2:30:70:f0:7e:06:a6:d7:98:
                    6f:bb:b7:6c:a0:78:d8:0e:0a:9f:c9:ff:80:46:2c:
                    b1:98:d0:62:09:2a:e4:6f:43:a4:d1:52:e9:31:95:
                    fb:d6:5e:b0:6e:31:09:bb:28:dd:99:a9:ee:8e:dd:
                    6d:74:14:3e:b7:c7:4c:cd:8e:0a:64:98:74:eb:95:
                    63:db:29:c6:cf:1a:43:9c:39:22:df:47:be:65:57:
                    3f:2f:12:5e:fe:63:f2:67:98:f0:85:59:7c:5a:e4:
                    aa:be:4c:27:32:6d:ef:87:14:82:12:c6:9b:84:e9:
                    b7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:59:7C:C0:E9:62:4C:0A:C2:66:6A:44:5A:F9:A3:66:0C:A4:15:EF
            X509v3 Authority Key Identifier:
                keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/6Fl8wOliTArCZmpEWvmjZgykFe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.114.60.0/23
                  185.81.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:d0:75:6c:fe:a4:7a:f4:ef:69:8a:71:ef:5f:cf:30:56:d7:
         44:59:03:63:ce:54:74:3e:f7:58:82:1b:20:1b:e3:f4:eb:f8:
         3b:a3:f1:35:fc:dc:02:85:61:9f:1c:0f:5d:f5:6c:93:d0:11:
         98:75:fb:65:12:74:1d:87:e4:64:d9:e5:53:0b:c8:b9:7e:93:
         11:81:81:df:39:26:b4:2b:4e:4f:b3:c9:a1:50:90:fa:bb:28:
         6a:5d:3e:30:21:fd:3a:ee:60:d4:dc:d9:b8:20:d7:75:95:e5:
         a6:d7:a3:6e:9d:f5:9f:12:19:2e:fe:92:e4:c9:1e:4c:26:d6:
         89:f1:d8:cf:57:d7:3a:23:b2:da:00:f4:ef:31:9e:bd:61:01:
         77:9e:3c:74:7b:54:d4:ee:9f:52:d3:ff:ac:2f:67:bd:9b:20:
         cb:e3:88:1e:96:31:f3:a1:86:61:85:80:b5:f2:d2:ec:e3:51:
         15:15:01:69:ec:57:70:68:3a:a6:94:83:f1:81:cd:bf:00:d8:
         70:40:df:a0:22:9e:27:d4:fd:a9:01:04:ea:3e:09:f9:86:8d:
         31:fd:e5:55:ce:bd:e9:dc:55:16:1d:00:a2:ee:8a:02:0d:dd:
         dd:6a:42:ff:e7:37:d8:0b:ca:5f:ee:92:41:1b:c9:7d:11:3c:
         c4:b4:64:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:09 2023 by rpki-client on console.sobornost.net