Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/vMYyqdzCoMshqlNZcEp0ID59pRM.roa
File:                     vMYyqdzCoMshqlNZcEp0ID59pRM.roa (raw, json)
Hash identifier:          nUb3IAe6fqVjC/Bkucyx+6pfEW0gZdAzlns6jqR4tuw=
Subject key identifier:   BC:C6:32:A9:DC:C2:A0:CB:21:AA:53:59:70:4A:74:20:3E:7D:A5:13
Certificate issuer:       /CN=b795582c73302eb0a974477603049850833bd210
Certificate serial:       01856E26912440743DC692D0D9065C317D15
Authority key identifier: B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/vMYyqdzCoMshqlNZcEp0ID59pRM.roa
Signing time:             Sun 01 Jan 2023 16:24:59 +0000
ROA not before:           Sun 01 Jan 2023 16:24:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206640
IP address blocks:        185.180.112.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:26:91:24:40:74:3d:c6:92:d0:d9:06:5c:31:7d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b795582c73302eb0a974477603049850833bd210
        Validity
            Not Before: Jan  1 16:24:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bcc632a9dcc2a0cb21aa5359704a74203e7da513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:13:35:2e:a9:b9:9f:0c:b1:c7:dd:96:0b:a6:
                    b8:83:9a:b3:3b:b1:db:b9:d7:46:70:30:8f:f7:60:
                    48:57:8a:57:f7:3b:ea:8f:7e:a6:ec:d5:74:76:f6:
                    dc:d0:0c:dd:36:06:f5:31:be:7c:31:bb:56:48:c6:
                    36:c2:95:83:bd:92:84:f5:1b:e2:2e:f6:95:09:34:
                    ee:4f:b6:78:a5:89:b3:2c:70:a9:dc:ee:d7:ff:67:
                    a8:00:eb:36:df:50:0b:12:8b:fb:ec:cb:e7:ef:bd:
                    cd:30:23:d3:11:58:da:ae:91:ab:f4:28:1e:31:9b:
                    7e:59:23:99:f3:2a:78:7c:e4:66:79:95:50:94:7b:
                    68:bc:9a:b4:f7:a0:0e:90:d9:af:28:df:5d:f8:50:
                    57:c9:c5:f0:d1:ee:0a:a2:ec:ad:92:6b:10:15:eb:
                    7f:d7:08:69:f6:6e:01:5b:2f:84:9b:48:f6:15:c5:
                    b6:21:df:9d:1b:49:36:31:d1:7c:67:b0:98:69:4f:
                    5a:8c:22:7b:89:cb:8a:c2:6d:f9:77:b8:55:3a:14:
                    39:e1:8b:17:6a:c1:5f:7d:63:6f:14:06:ec:e9:55:
                    a1:00:87:fb:88:2f:e3:6f:16:19:0c:0a:5b:0d:1e:
                    42:75:a4:b9:df:62:94:2d:71:a3:a5:cc:1f:9e:88:
                    29:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C6:32:A9:DC:C2:A0:CB:21:AA:53:59:70:4A:74:20:3E:7D:A5:13
            X509v3 Authority Key Identifier:
                keyid:B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/vMYyqdzCoMshqlNZcEp0ID59pRM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.180.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:dc:ea:68:47:b9:b1:9d:94:13:65:b1:fe:8c:72:d1:4d:0d:
         62:65:15:ee:ac:42:12:2f:57:f7:35:2f:84:24:fc:ee:77:f6:
         e7:94:cd:2c:9e:49:f3:84:f5:23:a8:e0:e2:d7:65:02:44:78:
         79:0f:31:c4:ee:a5:05:8c:0d:b7:73:54:41:c4:96:21:6d:91:
         f7:2c:22:78:51:d4:36:5c:f7:d1:1b:7c:06:78:f1:dd:8e:33:
         25:2f:a1:ea:d1:4d:b3:46:b5:24:d8:28:da:f2:7d:ab:16:14:
         da:53:81:70:0b:2e:15:b8:5b:56:58:6d:d8:2c:bd:39:dd:66:
         a8:f5:ca:53:cb:91:ea:f4:0d:3c:59:b9:7e:f7:d9:c9:19:c0:
         cb:b8:78:1d:f4:e9:27:36:08:49:d2:f7:89:78:04:3e:6f:ac:
         15:93:5e:9a:e4:97:74:7e:8f:b2:4e:21:36:62:d3:8f:72:a4:
         e7:44:e0:6d:5f:b7:77:1b:0f:63:ac:63:fc:eb:74:01:07:e9:
         2c:6f:79:30:d0:9e:91:f8:c8:6a:8c:9c:ed:aa:ba:71:91:ee:
         36:1e:00:55:c0:73:48:ba:4a:6a:25:30:17:ab:51:f2:48:3a:
         aa:1c:8e:52:b5:20:01:bc:4a:ce:d2:cc:a2:7d:19:48:e2:1b:
         51:79:56:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:23 2024 by rpki-client on console-ams.rpki-client.org