Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/a5MF1LMxd_-D7kuXYQz_3YoMRbo.roa
File:                     a5MF1LMxd_-D7kuXYQz_3YoMRbo.roa (raw, json)
Hash identifier:          yAvLrWdMWxwib2Xkfg+kL1vfTQ8BF52qgSOwfAXdbzU=
Subject key identifier:   6B:93:05:D4:B3:31:77:FF:83:EE:4B:97:61:0C:FF:DD:8A:0C:45:BA
Certificate issuer:       /CN=b262bf21de51385859416c4c608001e2025a5d25
Certificate serial:       018BA439D82DF8316F0F12B2B288D01DD53B
Authority key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/a5MF1LMxd_-D7kuXYQz_3YoMRbo.roa
Signing time:             Mon 06 Nov 2023 10:42:16 +0000
ROA not before:           Mon 06 Nov 2023 10:42:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57793
IP address blocks:        185.19.150.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:a4:39:d8:2d:f8:31:6f:0f:12:b2:b2:88:d0:1d:d5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b262bf21de51385859416c4c608001e2025a5d25
        Validity
            Not Before: Nov  6 10:42:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6b9305d4b33177ff83ee4b97610cffdd8a0c45ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fb:35:63:78:ea:ab:04:b8:bf:94:d3:5e:04:
                    53:58:72:6d:2d:54:94:d0:53:5a:b5:17:0b:25:7f:
                    e9:56:c0:7c:8f:fa:5f:25:d0:ba:75:47:7a:6b:a1:
                    a8:44:14:82:44:09:a4:34:74:20:a3:79:a4:1f:b2:
                    9a:04:45:b4:1b:d8:27:4a:ba:f6:06:9b:94:e9:d6:
                    ae:58:bf:05:9c:83:6c:30:9b:3b:56:5b:8b:f5:24:
                    6a:03:97:05:2f:5d:a3:33:e8:92:6e:70:d0:3c:48:
                    42:13:92:8a:e6:b3:6c:b1:b0:32:dc:3c:65:c2:17:
                    3a:b3:c7:70:10:3a:99:f8:57:22:7e:7d:aa:21:4c:
                    ee:7b:e0:59:3f:e2:2e:12:a2:24:78:af:42:6b:c5:
                    09:84:50:44:bd:f0:a9:5e:76:ed:e1:92:08:5c:bd:
                    ba:0d:ff:f1:8e:fb:34:0c:37:3d:1a:db:9d:0a:3c:
                    0b:47:09:ca:35:a5:dd:c6:e8:86:a2:c5:0c:bd:e6:
                    b9:34:d6:25:ec:5a:fa:0b:6f:e4:84:35:84:9e:0e:
                    cc:55:ff:e2:82:54:84:3d:a6:2a:c8:66:8e:50:8e:
                    00:ef:a3:e5:44:05:58:2a:5b:27:ed:16:cb:9b:ec:
                    f5:98:0e:05:d0:10:87:6f:5d:2a:80:fb:cf:b4:44:
                    14:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:93:05:D4:B3:31:77:FF:83:EE:4B:97:61:0C:FF:DD:8A:0C:45:BA
            X509v3 Authority Key Identifier:
                keyid:B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/a5MF1LMxd_-D7kuXYQz_3YoMRbo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.19.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:a1:32:aa:c7:73:04:6f:f4:58:2c:7e:32:5a:07:76:21:14:
         6c:a2:bc:68:10:c6:64:54:78:48:16:11:ca:4e:0f:59:56:55:
         89:e1:38:19:c2:0d:0e:84:51:68:62:9f:b6:66:53:02:37:1f:
         59:88:ef:d4:13:6b:d3:ae:84:92:7d:3b:fb:2f:b1:35:34:3c:
         9a:38:e2:7b:5c:08:af:24:03:84:c2:39:bc:b9:ab:72:cd:57:
         5f:1e:dd:9d:60:f4:7d:9d:2a:c8:44:9a:a5:be:d4:e1:3d:64:
         66:1f:a5:47:5c:bd:f8:93:c4:d4:e9:54:c0:17:8c:bb:e8:ad:
         60:82:37:5f:fb:d1:7e:de:fc:15:13:d6:9a:72:8f:d7:63:5d:
         87:71:8e:22:97:9b:3b:66:a6:cd:67:c3:b1:3e:cb:b9:aa:20:
         5f:27:51:30:3a:74:1b:40:5e:73:16:c2:3e:5a:65:3a:09:4e:
         5d:40:53:3a:b4:63:ee:27:30:00:f4:f0:73:75:2c:cb:93:90:
         56:aa:45:90:de:f1:9d:0e:0b:d8:8c:b5:75:5a:15:e7:70:53:
         4f:18:b1:7f:74:8e:bb:ab:8d:6e:86:9f:5f:b9:80:6e:f4:df:
         6e:24:97:e3:33:25:23:b5:4b:c0:08:2e:a6:f5:74:33:e0:b2:
         fe:e3:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-fra.rpki-client.org