Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/5ZWtjZE1C_h_Goel6YOgMesMHpU.roa
File:                     5ZWtjZE1C_h_Goel6YOgMesMHpU.roa (raw, json)
Hash identifier:          Vmrta0yeROcNoV7AyTnjunSEYGsYgC2A7v/hi6Poaxs=
Subject key identifier:   E5:95:AD:8D:91:35:0B:F8:7F:1A:87:A5:E9:83:A0:31:EB:0C:1E:95
Certificate issuer:       /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial:       01920AB0738925DB23045AB36D4D672B8BB4
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/5ZWtjZE1C_h_Goel6YOgMesMHpU.roa
Signing time:             Thu 19 Sep 2024 14:29:48 +0000
ROA not before:           Thu 19 Sep 2024 14:29:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16276
IP address blocks:        185.33.26.0/24 maxlen: 24
                          194.99.156.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 15:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:0a:b0:73:89:25:db:23:04:5a:b3:6d:4d:67:2b:8b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
        Validity
            Not Before: Sep 19 14:29:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e595ad8d91350bf87f1a87a5e983a031eb0c1e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5e:61:ae:ef:c0:df:ae:91:0b:34:ac:56:0d:
                    42:ed:3d:c3:8d:3f:f6:89:ba:ad:9b:46:d6:13:a1:
                    9d:10:4d:03:41:9e:07:f2:6d:e5:3c:5f:16:76:1c:
                    df:70:58:1b:85:13:48:5d:bb:dc:47:25:09:b9:2c:
                    19:44:75:17:45:8a:bf:95:04:a1:f8:68:1c:4e:14:
                    8b:f0:90:ee:13:61:b8:0f:6f:a5:9f:f7:d0:fc:d8:
                    58:71:a9:83:bc:4d:1a:f0:81:b5:c1:1a:01:af:34:
                    c0:d8:53:a1:38:f5:18:c3:d4:e7:2f:a7:45:bd:9d:
                    af:4e:f5:b0:c2:bd:43:ba:7f:ae:1b:a2:18:24:b8:
                    5c:4d:ae:7a:d0:bc:ae:73:70:84:48:90:72:b1:9d:
                    db:b2:a6:14:83:59:2d:88:6e:ba:68:6c:fb:e2:41:
                    88:34:59:55:63:c0:0f:a7:d2:74:0d:28:aa:60:55:
                    cb:08:b1:07:c3:d1:ff:04:e3:44:30:ad:af:7b:94:
                    de:80:bf:69:a3:e4:a2:d3:c5:31:30:45:ae:47:14:
                    3c:3d:1d:3f:e4:11:a0:00:db:e1:bd:0a:a9:b5:0c:
                    bd:37:c7:c1:c8:83:4f:c0:68:3f:f6:ac:99:4d:44:
                    b1:c7:ed:55:5f:77:f3:6c:1b:ba:61:1c:bc:c8:18:
                    4f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:95:AD:8D:91:35:0B:F8:7F:1A:87:A5:E9:83:A0:31:EB:0C:1E:95
            X509v3 Authority Key Identifier:
                keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/5ZWtjZE1C_h_Goel6YOgMesMHpU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.33.26.0/24
                  194.99.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:de:e3:92:71:f1:5a:e5:40:20:db:d2:22:dc:23:88:d2:27:
         3c:db:a4:f0:27:c8:11:06:26:8b:b4:d4:a8:f9:0e:8a:fd:75:
         6d:74:ae:5f:06:5f:78:cf:72:a5:e6:5a:ec:43:02:6b:f2:fe:
         36:ff:10:cb:38:34:35:79:25:01:06:4a:f9:04:31:e5:90:88:
         2a:21:98:c5:38:b6:bc:4c:44:74:08:e0:fa:f0:77:c2:03:be:
         d9:7a:2c:3b:4d:03:e6:7d:8a:7e:a3:5e:62:88:2e:86:6c:4b:
         87:57:44:3e:0a:f3:14:b0:b7:47:cc:5d:c7:b6:b3:53:6f:20:
         e9:b5:3a:3a:79:e5:3c:10:b6:e5:06:13:c5:9d:52:60:9f:3d:
         0d:71:79:49:03:aa:18:6a:fb:59:ff:fa:cf:2d:27:3a:51:43:
         0f:26:78:d5:5d:19:13:60:8e:03:05:9e:b3:5e:56:2e:be:68:
         b2:6e:e6:9b:0d:68:ef:47:84:b0:c4:96:5f:31:73:23:35:61:
         ae:e7:d3:a0:c7:b5:58:22:5c:d6:20:24:d3:45:f9:c9:a3:92:
         b0:df:34:15:8a:db:cc:53:e0:fd:18:7a:9d:29:c3:ad:ab:35:
         2f:05:86:1e:b2:29:bb:39:28:45:25:0a:c0:59:bb:ec:d3:ab:
         00:df:5b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 20:42:51 2024 by rpki-client on console-ams.rpki-client.org