Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/mV2Cf6bLkDcqaf8FqvDnGppfyU0.roa
File:                     mV2Cf6bLkDcqaf8FqvDnGppfyU0.roa (raw, json)
Hash identifier:          3/WkYXLJF3BR8I0p/bKOAL3QkQEfD2c1a5OjlGxnW78=
Subject key identifier:   99:5D:82:7F:A6:CB:90:37:2A:69:FF:05:AA:F0:E7:1A:9A:5F:C9:4D
Certificate issuer:       /CN=064983d3a4a1c26aa295034869c584f757380b2b
Certificate serial:       01856D0AE54228D12B42AA9E215951A3209E
Authority key identifier: 06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/mV2Cf6bLkDcqaf8FqvDnGppfyU0.roa
Signing time:             Sun 01 Jan 2023 11:15:08 +0000
ROA not before:           Sun 01 Jan 2023 11:15:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57246
IP address blocks:        185.26.73.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:0a:e5:42:28:d1:2b:42:aa:9e:21:59:51:a3:20:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064983d3a4a1c26aa295034869c584f757380b2b
        Validity
            Not Before: Jan  1 11:15:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=995d827fa6cb90372a69ff05aaf0e71a9a5fc94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5d:31:17:a5:c2:b5:0a:7d:3e:ca:c7:87:a9:
                    1f:71:89:5d:d1:3f:98:94:b8:9f:e5:49:78:b3:f1:
                    76:6e:39:cf:89:e8:cf:f3:53:27:aa:0c:21:98:70:
                    d8:d0:b7:c7:59:96:8b:fd:2e:2e:75:f1:6f:59:aa:
                    87:8e:a9:68:24:f3:db:65:25:8e:4b:a5:d1:b6:44:
                    40:c4:c9:1f:e6:e0:3c:a6:61:d7:e9:0a:29:b5:39:
                    35:71:d5:fc:e0:df:07:07:af:ae:13:7d:88:9f:c8:
                    fb:b4:3f:98:fc:d1:74:ca:ef:57:02:fb:42:28:91:
                    d7:74:1e:df:14:c6:ca:09:37:2a:50:32:94:5a:9e:
                    e2:3e:16:97:2b:83:cc:c5:8a:c5:bf:83:7a:90:88:
                    ea:6c:91:4b:a6:77:78:ff:9f:c5:21:99:24:42:a5:
                    ba:21:7c:62:c8:13:e4:2e:6a:d5:c9:42:36:50:6b:
                    22:c9:34:dd:6b:3b:42:39:f2:d0:a4:89:44:dc:8f:
                    15:49:65:26:01:1a:7a:b0:18:9f:a5:eb:01:42:af:
                    34:5c:40:85:05:f7:da:c2:89:a6:1b:fa:47:68:e2:
                    0d:34:ac:44:5d:9a:89:ad:ed:d6:f3:18:ba:8d:5f:
                    b5:27:fb:53:5a:af:21:94:fe:e8:d4:41:1a:e9:07:
                    50:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5D:82:7F:A6:CB:90:37:2A:69:FF:05:AA:F0:E7:1A:9A:5F:C9:4D
            X509v3 Authority Key Identifier:
                keyid:06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/mV2Cf6bLkDcqaf8FqvDnGppfyU0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.26.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:94:8f:ab:10:cb:5e:ab:70:f4:85:f5:12:0b:d1:a4:ac:02:
         e9:a6:ef:8d:b1:63:ad:be:7f:90:3b:70:65:61:f6:be:8f:72:
         0d:07:94:c8:02:e6:14:f3:11:ab:b9:56:bc:66:36:a8:e4:7f:
         bb:d4:94:f3:2d:29:fe:ac:00:91:47:3d:b6:51:26:0b:a8:17:
         62:bb:f8:b3:b4:27:a2:21:f0:48:a6:63:85:a2:4e:79:7d:b9:
         c3:16:a9:b4:56:b0:19:e1:ad:92:a2:95:7c:ed:e1:1c:86:c6:
         65:ea:34:7e:15:9a:dd:af:3c:74:45:f4:74:54:22:67:01:e1:
         98:06:b9:e5:c7:5e:b7:f6:4b:21:70:c4:61:73:ae:d6:fe:b1:
         56:2a:4c:87:3d:4a:06:6d:08:c7:c9:59:f9:87:8c:2d:cc:11:
         17:64:e4:7a:1f:ed:31:6d:2f:e6:08:b3:f4:8e:37:1d:db:f6:
         e9:8f:47:fb:a3:f9:da:5e:6a:35:10:26:86:4a:d4:d9:01:f2:
         45:9d:be:6d:d9:0a:27:a1:4d:02:6c:a6:0d:de:9a:60:07:15:
         48:6e:2f:55:66:63:ad:71:8a:09:c3:c3:d8:b2:21:0c:c9:f5:
         8c:bc:db:2a:89:f1:e5:f5:47:e4:28:17:cc:30:77:45:e1:f8:
         b4:60:73:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtCuVCKNErQqqeIVlRoyCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NDk4M2QzYTRhMWMyNmFhMjk1MDM0ODY5YzU4NGY3NTcz
ODBiMmIwHhcNMjMwMTAxMTExNTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTVkODI3ZmE2Y2I5MDM3MmE2OWZmMDVhYWYwZTcxYTlhNWZjOTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF0xF6XCtQp9PsrHh6kfcYld0T+Y
lLif5Ul4s/F2bjnPiejP81MnqgwhmHDY0LfHWZaL/S4udfFvWaqHjqloJPPbZSWO
S6XRtkRAxMkf5uA8pmHX6QoptTk1cdX84N8HB6+uE32In8j7tD+Y/NF0yu9XAvtC
KJHXdB7fFMbKCTcqUDKUWp7iPhaXK4PMxYrFv4N6kIjqbJFLpnd4/5/FIZkkQqW6
IXxiyBPkLmrVyUI2UGsiyTTdaztCOfLQpIlE3I8VSWUmARp6sBifpesBQq80XECF
BffawommG/pHaOINNKxEXZqJre3W8xi6jV+1J/tTWq8hlP7o1EEa6QdQCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJldgn+my5A3Kmn/Barw5xqaX8lNMB8GA1UdIwQY
MBaAFAZJg9OkocJqopUDSGnFhPdXOAsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmttRDA2U2h3bXFpbFFOSWFjV0U5MWM0Q3lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kMzc5MTUtNmEzOS00NGQxLThlMjEt
NGJhM2ZjMzQ4NGNlLzEvbVYyQ2Y2YkxrRGNxYWY4RnF2RG5HcHBmeVUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9kMzc5MTUtNmEzOS00NGQxLThlMjEtNGJhM2ZjMzQ4NGNl
LzEvQmttRDA2U2h3bXFpbFFOSWFjV0U5MWM0Q3lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRpJMA0G
CSqGSIb3DQEBCwUAA4IBAQB3lI+rEMteq3D0hfUSC9GkrALppu+NsWOtvn+QO3Bl
Yfa+j3INB5TIAuYU8xGruVa8Zjao5H+71JTzLSn+rACRRz22USYLqBdiu/iztCei
IfBIpmOFok55fbnDFqm0VrAZ4a2SopV87eEchsZl6jR+FZrdrzx0RfR0VCJnAeGY
Brnlx1639kshcMRhc67W/rFWKkyHPUoGbQjHyVn5h4wtzBEXZOR6H+0xbS/mCLP0
jjcd2/bpj0f7o/naXmo1ECaGStTZAfJFnb5t2QonoU0CbKYN3ppgBxVIbi9VZmOt
cYoJw8PYsiEMyfWMvNsqifHl9UfkKBfMMHdF4fi0YHOu
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:25 2024 by rpki-client on console-ams.rpki-client.org