Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/OyOwOdS9YGCSKzsbTY68KE2lXjw.roa
File:                     OyOwOdS9YGCSKzsbTY68KE2lXjw.roa (raw, json)
Hash identifier:          4uOTd1hbEKSFPYf/S8+kt7tzas7hXYbz6eZSXo0b3gk=
Subject key identifier:   3B:23:B0:39:D4:BD:60:60:92:2B:3B:1B:4D:8E:BC:28:4D:A5:5E:3C
Certificate issuer:       /CN=b262bf21de51385859416c4c608001e2025a5d25
Certificate serial:       018CC424D11DFE4A4649319D1A099A66160A
Authority key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/OyOwOdS9YGCSKzsbTY68KE2lXjw.roa
Signing time:             Mon 01 Jan 2024 08:29:56 +0000
ROA not before:           Mon 01 Jan 2024 08:29:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     30746
IP address blocks:        185.61.113.0/24 maxlen: 24
                          185.61.114.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 May 2024 10:57:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:24:d1:1d:fe:4a:46:49:31:9d:1a:09:9a:66:16:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b262bf21de51385859416c4c608001e2025a5d25
        Validity
            Not Before: Jan  1 08:29:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3b23b039d4bd6060922b3b1b4d8ebc284da55e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:18:e3:41:0d:2a:c8:79:f4:cc:72:41:43:8d:
                    b9:af:de:08:d9:a2:10:89:98:e8:ab:ce:71:d8:21:
                    2f:6b:23:06:eb:91:dc:1c:04:f3:dc:3d:c0:32:bc:
                    b3:31:58:72:09:82:e5:7f:d3:3f:3d:7a:fd:a6:70:
                    dd:c4:ec:b1:03:94:a8:6a:21:e5:70:e0:70:a3:c9:
                    05:11:fb:f0:8a:bc:e9:10:14:41:28:1f:ce:ea:d1:
                    71:d9:da:ea:8f:9c:c6:c0:48:0d:a8:87:66:15:4a:
                    96:3b:64:ab:18:fe:8b:00:28:51:12:34:16:b8:b0:
                    8c:6b:2b:7b:8d:58:ba:29:a1:91:4b:4a:38:e7:f7:
                    22:cc:ba:5a:b4:f6:af:31:91:da:e0:06:2a:9f:3b:
                    b4:c7:69:06:b2:90:83:01:fb:0a:3a:6b:fd:b5:91:
                    ac:39:44:e0:6e:af:0e:44:f3:88:2b:20:d3:92:24:
                    16:ff:17:0a:08:0c:90:62:5a:b6:f3:6f:c9:e2:7c:
                    56:23:d9:9b:bb:65:63:cb:a5:da:14:9f:99:42:bd:
                    60:3d:a3:e9:8e:c7:e3:00:8e:a0:96:c0:4a:58:9b:
                    99:ee:08:73:4a:29:4b:7a:8a:85:49:5e:59:75:1b:
                    49:52:96:c4:a2:aa:68:73:f3:d5:52:a4:8b:c5:75:
                    bd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:23:B0:39:D4:BD:60:60:92:2B:3B:1B:4D:8E:BC:28:4D:A5:5E:3C
            X509v3 Authority Key Identifier:
                keyid:B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/OyOwOdS9YGCSKzsbTY68KE2lXjw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.61.113.0-185.61.114.255

    Signature Algorithm: sha256WithRSAEncryption
         2c:ee:fc:0d:a7:01:76:74:2d:cc:b9:46:a4:14:0b:2d:74:73:
         ed:46:aa:99:d5:32:80:94:fc:4b:32:b7:52:70:ec:b6:78:3a:
         03:b8:0b:4f:46:df:2e:ef:b8:6b:b1:99:d3:e8:58:44:a9:e5:
         e9:37:3f:a8:bf:b7:a7:7f:ba:67:5d:66:d1:22:e7:a2:79:ab:
         08:66:26:57:b0:86:d1:a7:13:4f:f1:2a:5f:43:ed:db:2f:b7:
         71:12:ed:d4:d0:36:42:b7:0d:ed:68:8f:53:c9:56:05:6d:cd:
         b8:92:0d:5e:dd:b0:f9:ec:51:00:0e:ae:77:9a:c3:8c:a1:c9:
         09:0c:ae:72:fb:85:3a:9b:5e:a1:5f:34:dc:49:ea:1d:ae:35:
         cc:ba:c3:cd:1d:57:29:74:ac:e5:bc:ea:53:25:a6:74:d9:08:
         3a:63:54:9f:38:bc:d7:db:20:e5:fc:bc:44:c3:0a:3a:c4:24:
         6f:48:8f:90:c6:66:f6:f3:a5:2f:df:01:fd:bf:87:29:70:f6:
         17:92:8e:70:6b:b3:41:f6:41:fb:dc:52:2b:e8:4c:9a:6b:f8:
         69:88:6c:7f:01:30:a8:b1:59:ce:11:2b:85:57:b8:ed:64:9b:
         29:b2:13:43:c2:92:e4:7a:ea:ad:bc:5f:3e:7a:65:82:eb:64:
         6b:85:74:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-fra.rpki-client.org