Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/6HqmYE-I7Qs6YC4nU1mGXVM444Y.roa
File:                     6HqmYE-I7Qs6YC4nU1mGXVM444Y.roa (raw, json)
Hash identifier:          51LqaUm90Xu391bVM99ruVyb/YopWn7RlFgpmBwAbwI=
Subject key identifier:   E8:7A:A6:60:4F:88:ED:0B:3A:60:2E:27:53:59:86:5D:53:38:E3:86
Certificate issuer:       /CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
Certificate serial:       0186DBF556B04CEE24B687A2A1549B9A9A5A
Authority key identifier: F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/6HqmYE-I7Qs6YC4nU1mGXVM444Y.roa
Signing time:             Mon 13 Mar 2023 17:12:14 +0000
ROA not before:           Mon 13 Mar 2023 17:12:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212219
IP address blocks:        194.15.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:db:f5:56:b0:4c:ee:24:b6:87:a2:a1:54:9b:9a:9a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
        Validity
            Not Before: Mar 13 17:12:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e87aa6604f88ed0b3a602e275359865d5338e386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b1:20:23:5c:31:ac:5c:64:69:d5:e8:d0:b2:
                    42:60:ab:54:23:11:29:9c:5e:80:42:39:d0:67:a4:
                    25:47:c9:e5:85:98:f8:a4:1c:62:29:cf:40:5f:7a:
                    35:c2:af:4d:5a:0f:78:3f:73:15:5d:55:e0:dc:f9:
                    1a:17:4d:3a:21:49:06:31:8e:e4:01:85:4a:a2:11:
                    e3:da:6d:82:27:9f:95:2c:24:3c:99:e4:85:5c:57:
                    de:07:b0:77:57:ec:3c:6a:e8:53:cd:30:dd:6e:71:
                    b3:07:4f:21:0a:93:71:c3:76:19:b0:db:72:82:a6:
                    fc:13:2b:f9:ac:23:31:19:a9:df:8e:58:5e:e1:13:
                    12:e5:1f:af:5d:13:4d:fd:59:a3:97:b3:ff:2b:94:
                    bc:47:12:3c:63:ed:87:a0:22:96:b6:e5:9c:08:27:
                    ca:6b:e9:17:1d:7f:31:de:04:f9:c1:de:11:48:5e:
                    ef:74:79:b5:04:29:79:15:33:ba:68:50:a1:3e:88:
                    cd:08:b1:13:5c:52:c5:81:e3:a4:a4:2e:93:99:fb:
                    64:18:ed:64:92:c9:f3:99:27:19:89:82:f4:d7:16:
                    0b:ca:0d:77:83:1e:ec:f5:27:5d:a8:58:f1:9e:51:
                    f2:e5:86:30:b4:80:74:52:7e:bc:85:04:d8:c6:ca:
                    64:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7A:A6:60:4F:88:ED:0B:3A:60:2E:27:53:59:86:5D:53:38:E3:86
            X509v3 Authority Key Identifier:
                keyid:F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/6HqmYE-I7Qs6YC4nU1mGXVM444Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/9kUNLQIT7kyfMYHv7rLWY_4NNls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.15.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:6e:9b:82:7f:fb:2c:65:d6:35:55:77:ea:d0:c2:98:4c:2a:
         4a:d4:a9:82:55:81:03:cc:13:1a:e2:f9:83:08:cc:b9:5d:f1:
         88:b7:da:b1:03:b9:71:b2:5d:1d:30:a4:7c:fb:b4:70:87:35:
         ac:77:aa:a4:63:8d:7a:8d:19:c0:3b:5a:0a:d9:5c:c8:80:f9:
         8b:e2:57:d3:68:f1:39:e3:fa:31:99:63:4a:68:30:f8:80:ba:
         e4:d3:3a:45:24:27:03:ca:ee:6f:00:b0:e7:1d:2a:70:de:3d:
         f4:e9:a9:1d:4d:35:a4:d9:29:1b:8c:53:6c:17:4a:1d:be:b5:
         f7:84:57:3a:c2:88:18:c9:ad:3f:4f:f2:cf:9b:01:59:ab:ba:
         b6:69:0f:32:77:0c:3e:8e:a1:12:d7:20:72:36:b9:1f:f1:b6:
         6a:e4:da:a3:68:2f:9b:b9:fb:d4:c8:53:47:3a:c3:d8:05:14:
         57:55:e9:fc:05:59:b5:e0:fd:bf:d0:d6:ea:d4:74:ce:fb:63:
         39:a1:50:66:8e:19:82:26:ec:8e:95:1f:9a:dc:f2:e4:e7:ef:
         56:5c:da:7b:9b:3c:77:cb:76:c8:b9:92:a7:71:a0:02:e0:2a:
         94:25:01:e0:35:f6:dd:1a:1a:48:ac:19:50:44:b6:6f:08:2b:
         24:fa:14:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:33 2023 by rpki-client on console.sobornost.net