Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/f-QY61o6kp61XwIBmiodK8lT5Ow.roa
File:                     f-QY61o6kp61XwIBmiodK8lT5Ow.roa (raw, json)
Hash identifier:          6a04lB6RKhD/Xv8jdwyWfxXmp9OZUBZSYI+8/oJkrUk=
Subject key identifier:   7F:E4:18:EB:5A:3A:92:9E:B5:5F:02:01:9A:2A:1D:2B:C9:53:E4:EC
Certificate issuer:       /CN=064983d3a4a1c26aa295034869c584f757380b2b
Certificate serial:       0188E2DE41A17D76BC7D09A1A239064284BA
Authority key identifier: 06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/f-QY61o6kp61XwIBmiodK8lT5Ow.roa
Signing time:             Thu 22 Jun 2023 11:29:56 +0000
ROA not before:           Thu 22 Jun 2023 11:29:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     31500
IP address blocks:        185.26.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e2:de:41:a1:7d:76:bc:7d:09:a1:a2:39:06:42:84:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064983d3a4a1c26aa295034869c584f757380b2b
        Validity
            Not Before: Jun 22 11:29:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7fe418eb5a3a929eb55f02019a2a1d2bc953e4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e0:03:6e:39:93:99:9d:eb:4d:5a:b3:75:53:
                    cf:37:b0:44:03:a5:71:ba:c7:23:86:fe:a6:57:62:
                    92:eb:aa:90:6b:c0:02:3e:57:ed:1c:56:e2:18:e1:
                    ce:cd:a0:36:64:50:30:17:60:61:e3:d4:77:ce:e1:
                    82:8e:a3:fe:12:83:9c:7e:3f:8b:e2:35:80:0b:0b:
                    df:4e:e9:10:ec:2f:43:74:70:25:67:5e:f5:aa:a7:
                    2b:d2:00:24:90:54:1f:73:a6:ba:48:c8:31:ed:dd:
                    f7:c1:d0:01:8c:ab:27:34:dd:ae:12:80:12:b1:75:
                    3d:7e:5b:0b:cc:a7:0d:cd:6e:e6:3e:06:4e:0d:ae:
                    e8:d7:9e:cc:49:44:25:c9:65:f1:d6:20:ed:6b:f6:
                    4f:7b:f6:b9:90:b9:bb:c0:df:c6:21:aa:2b:41:8d:
                    a4:ef:92:9e:8a:96:f2:f9:26:8b:5f:12:f5:44:75:
                    bd:ca:83:44:c2:cd:51:ca:94:0f:a1:da:52:cc:a4:
                    6a:95:b6:d4:d7:e5:a5:32:45:c0:be:fa:f5:0c:36:
                    63:ca:a7:3e:ca:54:a8:ac:3a:0b:f6:44:b9:45:e7:
                    84:e0:33:60:d8:06:3a:d9:d4:82:d0:fd:ba:ca:c5:
                    27:ac:e4:6f:79:ba:98:77:d7:56:63:fb:fe:29:13:
                    f3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E4:18:EB:5A:3A:92:9E:B5:5F:02:01:9A:2A:1D:2B:C9:53:E4:EC
            X509v3 Authority Key Identifier:
                keyid:06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/f-QY61o6kp61XwIBmiodK8lT5Ow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.26.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:57:37:bd:ff:fa:72:3f:2f:14:4c:80:6c:d5:a0:1c:d2:7f:
         a2:55:ec:8f:37:16:ad:02:73:d7:d3:4b:1d:e7:d1:99:5c:44:
         19:f4:82:00:ea:53:57:56:bf:f7:94:06:77:87:e1:f6:ab:48:
         5b:bb:d2:93:ab:57:10:c9:27:0e:5c:5e:6a:9f:ee:16:68:16:
         fd:0e:66:ca:31:a2:ac:d4:b5:31:27:61:ce:7d:c9:81:fc:67:
         10:2b:18:de:a6:aa:4f:c4:b2:9c:a8:8e:94:e8:a9:96:43:af:
         6e:3f:03:0a:45:97:ae:c6:47:9d:37:79:e5:e9:02:32:44:93:
         ac:fa:70:e8:db:58:8d:7a:fc:8b:07:b0:66:44:80:77:ff:24:
         99:3f:98:9e:20:9c:08:5f:a3:71:fc:aa:73:aa:b8:75:90:af:
         96:38:51:84:c2:71:74:cd:f6:6a:04:4a:63:13:96:83:42:0f:
         86:a0:68:55:4b:15:45:9a:f1:2f:4e:73:d1:54:2b:60:74:e7:
         ed:02:1f:6e:c8:54:8d:da:fd:c0:10:80:8f:97:60:c0:30:1d:
         8a:c4:74:4e:eb:73:d9:e7:83:56:39:b5:a0:8c:d7:3e:59:1e:
         22:6c:94:8a:79:87:31:d7:45:b2:be:76:dd:c0:c4:75:85:50:
         5c:c6:86:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:25 2024 by rpki-client on console-ams.rpki-client.org