Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/qOOuPlWUICs3aqMLMSYZwZviyGc.roa
File:                     qOOuPlWUICs3aqMLMSYZwZviyGc.roa (raw, json)
Hash identifier:          efOkbHvOUVmmqBfSYEDvcY3EVjqqSSTPIbmCONWFSnI=
Subject key identifier:   A8:E3:AE:3E:55:94:20:2B:37:6A:A3:0B:31:26:19:C1:9B:E2:C8:67
Certificate issuer:       /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial:       0186648B032C22F09BF3FA9CFF57AE5C4013
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/qOOuPlWUICs3aqMLMSYZwZviyGc.roa
Signing time:             Sat 18 Feb 2023 12:41:17 +0000
ROA not before:           Sat 18 Feb 2023 12:41:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     46450
IP address blocks:        185.139.34.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 21 Jun 2023 06:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:64:8b:03:2c:22:f0:9b:f3:fa:9c:ff:57:ae:5c:40:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
        Validity
            Not Before: Feb 18 12:41:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a8e3ae3e5594202b376aa30b312619c19be2c867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:13:a7:79:13:c0:10:04:eb:11:bd:12:38:a3:
                    0f:34:8f:d9:fc:d3:ea:b9:af:f4:cb:f6:ce:ee:38:
                    fd:77:c6:d3:66:2c:4d:74:1e:61:ad:9b:e1:88:23:
                    80:65:90:5c:e5:40:68:84:c0:ae:4e:69:4c:af:76:
                    fa:6e:55:ca:63:6d:2f:e4:32:9c:37:65:14:a2:52:
                    cc:51:f6:dd:ee:9b:7d:fd:8a:ca:96:93:91:42:9e:
                    5c:3d:05:3f:09:ca:e4:bc:ae:b7:10:87:75:fc:e4:
                    99:d3:5a:25:3d:52:9a:a3:76:14:8e:0b:78:89:37:
                    ba:e2:e3:4e:76:65:67:2d:22:5a:f2:8a:74:a8:1a:
                    59:db:ce:04:b0:99:80:52:1e:74:91:a9:db:0a:d2:
                    ba:3f:9f:68:73:02:bb:2e:22:d9:a7:90:c1:8b:7d:
                    d0:df:14:24:5b:b3:18:9e:65:b3:ed:6f:46:83:06:
                    af:5b:f1:d1:b0:17:6a:57:71:8f:90:e1:7b:6d:ac:
                    bc:42:aa:1c:34:c4:dc:db:92:df:9f:f4:a0:f1:ff:
                    aa:33:c1:27:16:55:ea:e0:0b:8e:50:14:3c:9e:02:
                    c8:21:22:f1:ad:ec:54:04:b3:ed:12:9b:df:c3:c0:
                    09:be:57:28:4c:b1:c4:97:64:7e:54:96:96:9e:b1:
                    67:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E3:AE:3E:55:94:20:2B:37:6A:A3:0B:31:26:19:C1:9B:E2:C8:67
            X509v3 Authority Key Identifier:
                keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/qOOuPlWUICs3aqMLMSYZwZviyGc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:d6:a1:cc:15:2b:b0:4b:25:16:40:cb:95:b5:43:55:51:b4:
         94:ff:f4:24:12:54:47:92:f2:23:cd:61:2b:84:36:fe:3b:2b:
         49:d5:49:fe:8c:2f:ac:1c:6b:f4:ba:43:09:a1:85:ae:99:dc:
         aa:e3:23:c3:db:c5:ab:60:7a:a3:2c:14:e6:a8:b7:f2:fc:92:
         77:ea:b7:9e:d4:b2:84:61:37:23:ab:fc:06:12:5a:7b:55:5d:
         45:64:fc:a0:3d:8b:0c:1a:be:5d:90:65:a5:f3:42:4e:bb:b6:
         92:ba:f6:d9:8e:d0:fb:d2:a8:34:48:73:84:85:17:49:b7:70:
         49:98:92:93:dd:b1:c0:03:e2:d4:bc:e8:5d:87:29:da:1a:21:
         f4:54:9c:99:38:10:bf:ee:5f:d3:48:aa:08:7d:b7:0c:76:a3:
         0f:13:e0:ca:c2:2a:56:d2:60:fb:8c:75:ca:1a:f2:a0:95:ca:
         6b:f2:04:b1:52:a2:40:fb:41:53:13:76:66:c9:c1:ce:ea:44:
         7e:a7:41:ba:ef:63:1c:d1:a9:70:f7:3a:1c:af:f0:40:63:04:
         74:e5:6b:75:45:09:f8:7a:a2:18:6b:63:30:0e:7c:c7:99:8f:
         ff:0e:59:d7:38:63:47:25:43:cf:95:7e:2a:83:34:e5:20:87:
         d1:51:1a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:47 2024 by rpki-client on console-ams.rpki-client.org