Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/Is4kaUhIWY2V-YVtoe45UCFLx3Y.roa
File:                     Is4kaUhIWY2V-YVtoe45UCFLx3Y.roa (raw, json)
Hash identifier:          H7mQBLmIDxAZElLMZdqKlIFzTPOo8B5aSHPlLVUkQXM=
Subject key identifier:   22:CE:24:69:48:48:59:8D:95:F9:85:6D:A1:EE:39:50:21:4B:C7:76
Certificate issuer:       /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Certificate serial:       0189026408A4ECCA2FAA589F8D82665BD2A6
Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/Is4kaUhIWY2V-YVtoe45UCFLx3Y.roa
Signing time:             Wed 28 Jun 2023 14:24:17 +0000
ROA not before:           Wed 28 Jun 2023 14:24:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206150
IP address blocks:        185.205.132.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 30 Jun 2023 16:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:02:64:08:a4:ec:ca:2f:aa:58:9f:8d:82:66:5b:d2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
        Validity
            Not Before: Jun 28 14:24:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=22ce24694848598d95f9856da1ee3950214bc776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:c5:58:3a:f0:d1:4a:a1:8a:00:ed:3f:eb:
                    00:0d:c9:aa:99:b8:96:d1:a7:04:71:7c:bd:e8:4c:
                    43:f3:10:8f:99:7c:b5:cc:2f:2c:10:51:08:d3:d6:
                    00:66:e1:39:ea:ed:3c:f4:95:f4:f5:ae:b3:21:cf:
                    7a:a9:d4:56:30:e6:76:c6:79:7b:b8:0a:86:81:dc:
                    75:58:88:62:6e:28:11:70:8b:eb:0b:c7:f2:57:96:
                    90:fd:22:4b:56:bb:ab:ca:f0:92:4d:05:65:c0:eb:
                    d2:6e:8f:62:b9:68:f8:f0:91:44:c6:8e:4d:fc:88:
                    ab:27:27:f6:e3:33:f0:6f:5e:7e:3f:4c:6d:45:70:
                    d8:ad:a8:06:8a:26:e4:b2:10:2c:cf:f7:ab:cf:b8:
                    af:9f:30:00:4b:34:66:48:c0:6e:6d:99:f8:f4:a9:
                    89:c9:f6:68:aa:30:3f:d8:82:9a:1c:90:82:54:e4:
                    de:e4:a8:46:b5:b2:c9:3f:d1:c5:2d:06:2c:30:ff:
                    f4:fa:b5:74:21:25:57:a5:8d:15:49:07:1d:4d:5b:
                    8a:13:27:7b:ac:76:e9:31:cf:98:14:cc:9c:cf:d5:
                    1f:8c:a6:a5:a2:62:61:e3:38:53:f9:7e:10:ad:52:
                    27:a5:bb:7e:96:dc:3c:a6:5a:f5:2d:07:9d:36:e1:
                    b0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CE:24:69:48:48:59:8D:95:F9:85:6D:A1:EE:39:50:21:4B:C7:76
            X509v3 Authority Key Identifier:
                keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/Is4kaUhIWY2V-YVtoe45UCFLx3Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.205.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:d8:68:a1:eb:4c:fc:fb:d4:d4:3f:17:47:9c:7a:48:85:d9:
         e8:a3:ae:b4:69:c4:c4:8a:4a:34:30:71:dc:41:fe:e0:75:ed:
         c4:ad:15:c8:73:c0:8f:b6:8e:45:fa:e4:84:ec:93:55:00:7e:
         f7:65:4a:55:4a:1f:63:e3:e8:32:01:84:47:cc:cc:e9:5c:61:
         63:26:6c:79:fd:65:0b:5c:75:de:8a:8a:0a:e3:d5:e6:73:62:
         4f:0b:c9:73:62:ad:87:36:a9:ce:9a:08:3a:f7:23:5f:a5:c9:
         a9:35:6c:05:f5:2e:81:dd:35:6a:9c:75:25:1f:17:20:30:3d:
         5b:64:8f:bc:31:86:ad:09:2a:10:4b:e8:e9:68:a6:45:7e:1c:
         1b:59:be:4e:5e:6e:29:3f:86:4d:b6:a9:77:4c:d9:8d:4c:75:
         94:f4:72:d0:7d:f9:7d:aa:92:a3:10:fd:17:0d:99:35:05:b0:
         33:4f:0b:59:ae:6d:8e:fc:ee:19:57:57:6d:95:f3:9f:8f:c4:
         60:91:ed:29:73:2d:64:82:77:13:47:a3:5f:61:7c:f1:89:e0:
         8c:f6:c1:2b:21:9e:0c:96:5b:f7:62:a3:9c:27:37:75:47:30:
         05:c5:d8:21:fe:bc:e8:84:33:43:aa:ec:d5:65:8f:a9:1e:eb:
         5c:ea:ee:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:18 2024 by rpki-client on console-ams.rpki-client.org