Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/818tMV3XdGRXpvM5TvaNh052mas.roa
File:                     818tMV3XdGRXpvM5TvaNh052mas.roa (raw, json)
Hash identifier:          xFb5WeVYUYM0uW6d6Nh6K71wla2yA/hW7i6/nEoUkVU=
Subject key identifier:   F3:5F:2D:31:5D:D7:74:64:57:A6:F3:39:4E:F6:8D:87:4E:76:99:AB
Certificate issuer:       /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Certificate serial:       01902483C91BE93F872A90A8C8220499F53E
Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/818tMV3XdGRXpvM5TvaNh052mas.roa
Signing time:             Mon 17 Jun 2024 04:45:34 +0000
ROA not before:           Mon 17 Jun 2024 04:45:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     400866
IP address blocks:        185.115.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 17 Aug 2024 06:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:24:83:c9:1b:e9:3f:87:2a:90:a8:c8:22:04:99:f5:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
        Validity
            Not Before: Jun 17 04:45:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f35f2d315dd7746457a6f3394ef68d874e7699ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:56:46:65:f5:61:77:bf:a7:c2:50:27:74:c1:
                    4b:32:a9:60:1d:6e:3f:7e:8c:4c:a7:8d:c1:e2:e6:
                    f3:5b:73:e3:8a:f3:d5:14:fe:22:e8:d2:12:f6:7c:
                    ed:ac:28:38:6c:38:17:a2:7c:f4:04:b1:76:60:56:
                    a6:30:0a:d9:27:23:b9:dc:7d:39:d8:69:a9:a5:ee:
                    d7:6d:68:97:ca:08:15:d6:80:af:38:e8:d4:db:a3:
                    a7:07:d2:79:b7:67:12:fd:ec:5e:7a:62:b4:5c:f2:
                    c3:ce:f5:bf:6d:27:07:ce:bf:5f:bd:19:6a:f5:34:
                    46:03:de:41:d3:01:d6:43:65:9a:a9:ce:94:ea:9a:
                    21:85:1e:46:14:86:a7:10:48:56:50:e1:0d:31:c2:
                    97:5e:25:2f:65:13:c5:f2:91:e1:8b:9f:da:84:ca:
                    59:47:24:8d:cf:07:8f:17:ad:66:fc:f1:46:7e:5b:
                    b4:55:08:08:72:97:0b:52:01:66:52:f2:e4:c4:b3:
                    12:a6:b8:61:7c:f2:2b:35:56:a1:6f:47:cf:26:87:
                    1c:84:83:d5:dc:94:2a:db:13:81:ba:6e:af:8d:86:
                    74:b3:af:70:16:6b:2b:84:36:2e:9a:c7:e3:2c:42:
                    62:dd:8d:78:90:0e:d7:11:13:2b:da:6a:58:9b:d0:
                    89:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5F:2D:31:5D:D7:74:64:57:A6:F3:39:4E:F6:8D:87:4E:76:99:AB
            X509v3 Authority Key Identifier:
                keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/818tMV3XdGRXpvM5TvaNh052mas.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:b8:78:60:dd:d0:5f:a1:53:fe:69:c3:d0:c4:b4:52:a1:1b:
         ae:68:1a:f0:bf:9d:12:11:da:bb:63:31:18:f6:7b:9d:0c:30:
         54:89:b8:f9:82:9c:00:8a:06:5f:3c:4d:80:ee:6a:9d:42:f1:
         aa:1b:90:08:1d:9f:e3:c5:97:6e:27:a0:4b:c3:dd:a1:d3:bf:
         92:87:48:74:31:fb:7d:00:5b:ac:d5:af:6e:b6:de:a3:bd:d0:
         c8:42:64:4b:33:8c:95:ab:e4:45:6f:86:9a:62:4e:bb:9c:85:
         db:d0:28:f1:b0:57:c9:b1:36:8a:ab:d6:9e:44:1c:0d:50:36:
         77:b9:d8:d0:7a:44:e3:82:da:23:35:97:f6:b6:0a:32:53:76:
         02:7c:2f:03:f5:cc:77:49:15:9e:bf:f5:63:ed:32:b1:80:77:
         6b:17:78:62:bd:38:a7:ff:78:a9:cf:1c:d6:23:14:60:92:62:
         91:9e:a6:5a:08:55:34:f3:53:d8:48:e9:dd:51:1a:da:6b:6f:
         57:86:e8:2f:ad:bb:8b:13:00:7d:8d:94:dc:ce:2c:92:ae:c9:
         c1:6b:6b:b5:b4:ba:ce:a3:e8:0e:50:a3:24:e0:3e:46:75:24:
         dc:15:8c:ab:7a:c7:cd:2b:b5:a4:96:90:4b:40:3a:b1:c3:8b:
         6c:06:15:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 07:46:30 2024 by rpki-client on console-fra.rpki-client.org