Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/M6YK8f5zjG8bNO-T6cDfohE3tyw.roa
File:                     M6YK8f5zjG8bNO-T6cDfohE3tyw.roa (raw, json)
Hash identifier:          JD/5s/6acqejZTDXBgPU8vj/Po2g7Qh5my0Eo+zP8pc=
Subject key identifier:   33:A6:0A:F1:FE:73:8C:6F:1B:34:EF:93:E9:C0:DF:A2:11:37:B7:2C
Certificate issuer:       /CN=b262bf21de51385859416c4c608001e2025a5d25
Certificate serial:       018CC424D193FA60EB895705A085FB3CD6F4
Authority key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/M6YK8f5zjG8bNO-T6cDfohE3tyw.roa
Signing time:             Mon 01 Jan 2024 08:29:56 +0000
ROA not before:           Mon 01 Jan 2024 08:29:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57436
IP address blocks:        185.19.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 May 2024 10:57:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:24:d1:93:fa:60:eb:89:57:05:a0:85:fb:3c:d6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b262bf21de51385859416c4c608001e2025a5d25
        Validity
            Not Before: Jan  1 08:29:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=33a60af1fe738c6f1b34ef93e9c0dfa21137b72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:12:0f:d9:66:97:44:09:07:78:c4:52:fc:f9:
                    e3:41:a9:04:c8:c6:9e:65:ce:80:2a:8f:0c:15:93:
                    35:e1:be:14:ba:fc:32:71:1c:c6:d6:0a:81:97:b1:
                    cd:8a:82:70:b1:32:63:59:fa:64:c7:59:f1:35:ee:
                    a9:35:a3:c1:81:4d:65:9c:81:b1:a6:9b:b1:79:1c:
                    8c:45:13:89:32:26:ec:d3:40:30:37:10:fb:ec:b3:
                    4c:da:6c:59:c7:91:0b:87:55:ab:60:24:cb:83:1c:
                    f4:20:2d:88:b8:e8:95:ba:d1:c5:dc:7e:6b:4d:43:
                    53:c4:49:c7:e0:20:2e:aa:1f:41:d8:e5:e6:f7:a1:
                    ee:5f:a2:f4:71:17:5a:f6:69:ef:bf:96:2e:91:a5:
                    15:63:53:c8:ae:d7:68:3c:40:dd:62:fb:9a:56:e6:
                    61:e2:8a:9e:94:9d:ed:6a:52:72:d4:c4:99:d9:58:
                    08:f0:ac:58:52:b8:2e:04:fb:aa:8b:d3:d0:24:7f:
                    ca:14:8f:50:4d:c6:de:69:ca:76:39:63:21:4a:a3:
                    0f:e5:f7:c2:f6:cb:2c:63:c2:eb:75:a3:f5:20:37:
                    f8:57:24:41:b0:9f:22:c6:f3:d8:4a:23:48:0c:dc:
                    1c:85:36:a4:7c:a8:af:5d:5b:8a:47:3f:51:24:ba:
                    02:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A6:0A:F1:FE:73:8C:6F:1B:34:EF:93:E9:C0:DF:A2:11:37:B7:2C
            X509v3 Authority Key Identifier:
                keyid:B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/M6YK8f5zjG8bNO-T6cDfohE3tyw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.19.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:40:20:e5:99:61:92:da:14:d7:e6:aa:10:3f:27:46:9a:1c:
         fb:23:65:53:b2:b4:d4:9a:ce:b2:29:a5:da:12:6a:ff:43:a9:
         fc:bb:09:2c:a9:42:3c:5f:88:9c:37:b9:66:5f:fb:d9:5d:23:
         1a:a2:c3:7c:6f:6e:98:8c:4f:93:0f:60:1a:61:4f:a2:61:0b:
         a4:cf:d0:e4:4e:07:5f:91:5d:63:61:ac:75:01:b6:1d:bd:05:
         ca:cf:0d:28:7f:46:b4:c8:af:e9:8f:24:20:a3:65:d4:54:a6:
         d1:99:2d:f3:80:cc:06:01:54:34:34:1b:9d:f6:26:97:4e:e5:
         ab:be:f5:a6:98:10:7e:d5:b0:e7:50:bb:ff:26:47:29:f1:01:
         f2:e7:48:35:13:df:05:51:7f:2d:28:28:be:c1:1d:fb:69:48:
         8d:c6:5b:de:a1:36:25:87:13:7a:14:ba:65:2c:2e:f1:f9:cc:
         39:a9:ee:b3:38:d5:1c:d3:42:52:46:32:5f:bf:d6:ef:39:75:
         56:14:2f:2b:20:55:6e:66:76:8d:07:0a:41:46:f3:1c:0b:7b:
         6b:ec:49:c5:09:0e:25:cb:90:d2:60:b3:91:cf:8d:23:fc:a8:
         2c:87:e3:34:ac:c7:6d:2c:f5:22:15:a9:5d:30:f4:03:25:ec:
         34:1c:18:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-fra.rpki-client.org