Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/X_BtdhBQiOnFk5DVdxJtA3NKFW4.roa
File:                     X_BtdhBQiOnFk5DVdxJtA3NKFW4.roa (raw, json)
Hash identifier:          SgTQhHvujbkT7XbVRUHM8QfOOsamxYDLwqVFzkdlDUA=
Subject key identifier:   5F:F0:6D:76:10:50:88:E9:C5:93:90:D5:77:12:6D:03:73:4A:15:6E
Certificate issuer:       /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial:       018C0236E700B32DA9D7FD828C705EBCFBF0
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/X_BtdhBQiOnFk5DVdxJtA3NKFW4.roa
Signing time:             Fri 24 Nov 2023 16:43:21 +0000
ROA not before:           Fri 24 Nov 2023 16:43:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210917
IP address blocks:        185.234.110.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:02:36:e7:00:b3:2d:a9:d7:fd:82:8c:70:5e:bc:fb:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
        Validity
            Not Before: Nov 24 16:43:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5ff06d76105088e9c59390d577126d03734a156e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d5:ac:6f:f2:fe:81:7c:be:6c:e0:a8:19:00:
                    6c:ff:1f:f2:6d:6b:59:33:f3:44:0d:86:b3:2e:af:
                    af:0e:f8:c2:e3:87:3f:c0:45:ce:01:4d:c1:bb:7d:
                    a8:df:15:28:93:7f:88:e3:cf:81:ac:8b:4f:0b:68:
                    ae:ab:82:f3:f6:83:f7:af:3d:c7:78:de:c5:2b:bf:
                    eb:ee:89:bb:cc:49:4b:82:60:2e:c9:09:4a:53:09:
                    80:07:ae:98:51:2a:94:d7:f4:64:5c:92:c1:da:db:
                    f5:ea:33:6b:0c:83:86:f6:37:c0:a0:1f:26:28:76:
                    96:6a:9b:28:26:9a:46:6f:b8:bb:e8:20:0f:b5:04:
                    d5:9b:b6:2c:6c:52:78:3c:09:6f:a0:19:59:30:9a:
                    6c:52:0e:25:3e:3a:5d:99:c0:f6:28:14:5a:aa:39:
                    b4:9f:3e:53:ca:8c:06:e9:43:60:11:f2:c4:7c:84:
                    32:7b:e4:0f:91:9a:3c:04:32:09:f1:4e:1f:73:36:
                    f5:89:62:ac:3a:de:0d:95:29:82:e1:96:73:ac:9f:
                    4c:be:c6:6c:f5:8b:ce:3a:ef:7c:61:eb:83:56:b5:
                    95:d3:be:76:b5:58:f0:3f:5d:cd:8c:13:ac:11:ac:
                    af:68:d1:bb:e8:2c:d5:3d:e5:da:d9:5a:44:08:13:
                    39:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F0:6D:76:10:50:88:E9:C5:93:90:D5:77:12:6D:03:73:4A:15:6E
            X509v3 Authority Key Identifier:
                keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/X_BtdhBQiOnFk5DVdxJtA3NKFW4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:fc:2b:99:cb:f7:cf:9f:8c:bc:df:09:e9:85:d8:9e:95:b0:
         47:c5:99:b1:56:c8:2b:b5:6c:eb:8a:45:5b:2a:68:85:27:77:
         a5:90:e9:f0:57:de:27:a5:e9:ef:30:1f:70:ff:0a:9e:15:c2:
         6b:14:73:e2:30:7e:af:1a:77:10:f2:cd:4d:75:5a:70:11:87:
         73:1a:cb:e1:75:a9:20:3f:86:bc:99:72:e9:1b:1f:45:12:eb:
         0f:69:5b:54:e2:b4:08:4e:d5:5d:d4:af:3f:c8:55:4c:56:78:
         12:67:f3:21:51:25:6f:56:cd:4b:b9:fe:8d:bd:12:30:29:2e:
         e3:4d:d4:6c:05:67:6c:15:ea:ae:7d:fe:df:d5:88:9c:f2:0c:
         d1:a1:4d:3a:51:5b:05:b8:e6:8c:fa:d5:a3:17:8c:04:22:be:
         64:3f:0e:2a:15:29:15:09:91:2a:6a:4c:7c:4f:a2:b9:c5:11:
         30:f7:88:05:1f:75:d1:b7:38:d6:df:9a:19:08:85:22:12:a1:
         b5:c5:03:66:44:c8:9c:14:e6:30:85:44:71:b5:97:30:ef:81:
         a1:2a:5a:b4:7b:06:85:8f:0b:e9:93:fa:0d:42:9f:17:e8:9c:
         93:6b:54:40:c7:35:08:9e:80:3a:72:b1:4c:59:fe:10:9a:75:
         71:8d:b0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:22 2024 by rpki-client on console-fra.rpki-client.org