Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/FWzxJCmhvygoKd2QkMPhqZEMEqQ.roa
File:                     FWzxJCmhvygoKd2QkMPhqZEMEqQ.roa (raw, json)
Hash identifier:          vBCZBAbUZN6rw6QK9bYhfPmkhhBdD/givZdHvq2RQR4=
Subject key identifier:   15:6C:F1:24:29:A1:BF:28:28:29:DD:90:90:C3:E1:A9:91:0C:12:A4
Certificate issuer:       /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial:       0185CED1494B0A61E046DDC10AC3BBD059EC
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/FWzxJCmhvygoKd2QkMPhqZEMEqQ.roa
Signing time:             Fri 20 Jan 2023 10:55:00 +0000
ROA not before:           Fri 20 Jan 2023 10:55:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56339
IP address blocks:        185.33.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 01 Feb 2023 13:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ce:d1:49:4b:0a:61:e0:46:dd:c1:0a:c3:bb:d0:59:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
        Validity
            Not Before: Jan 20 10:55:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=156cf12429a1bf282829dd9090c3e1a9910c12a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:80:27:18:fe:d1:bc:ae:ad:d4:05:7a:a3:20:
                    7f:62:32:7b:95:37:01:f2:2f:ef:31:0f:79:ae:1f:
                    e5:ff:af:3c:61:99:e7:30:3d:75:27:90:87:98:55:
                    a8:91:4f:77:0d:2d:5b:bb:4e:8c:63:21:03:36:b4:
                    21:68:96:ef:e5:27:f9:4e:f5:16:a5:60:60:7c:5d:
                    e5:90:16:06:2c:f0:70:f4:53:51:27:33:73:27:0a:
                    27:33:da:00:ae:78:08:23:73:7a:29:97:82:35:ec:
                    39:9f:7a:df:b2:6b:5d:fa:70:34:d6:65:40:2d:2b:
                    d6:72:81:44:69:7f:07:25:f0:a4:07:77:99:5c:75:
                    d7:17:43:93:96:3e:04:51:2e:51:c9:e2:7c:ed:a7:
                    da:4c:23:ba:68:c3:d3:3d:72:97:38:b1:25:e8:c9:
                    84:fe:59:fb:41:87:24:fc:a2:bc:13:13:1f:1e:a8:
                    a9:d2:da:c4:d1:e0:b7:35:56:a3:f1:63:c7:22:6a:
                    ff:8c:73:b3:c8:ab:6f:86:75:b9:12:d7:b2:db:64:
                    b6:14:8b:02:4c:35:26:8a:2d:ef:88:4a:de:ab:e9:
                    cf:aa:a2:72:2f:b7:14:76:bb:c4:f6:30:19:b1:2b:
                    3b:ec:4d:c8:68:49:0d:ad:74:9b:af:4b:e5:0c:2e:
                    c7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6C:F1:24:29:A1:BF:28:28:29:DD:90:90:C3:E1:A9:91:0C:12:A4
            X509v3 Authority Key Identifier:
                keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/FWzxJCmhvygoKd2QkMPhqZEMEqQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.33.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:81:a3:68:ca:b3:da:66:bd:8b:bb:4e:c5:32:f2:0e:7b:b6:
         78:5a:cb:b0:91:cf:53:53:d2:75:33:c6:59:10:a2:fc:9c:b7:
         aa:bf:a8:64:3d:ed:39:25:02:9e:83:76:44:12:ab:9a:19:35:
         ef:b8:44:c7:e3:1b:b7:4f:d0:22:69:60:91:53:33:85:b8:38:
         d1:c4:f4:e6:5d:66:fc:b1:70:7a:e9:ca:e2:30:a3:20:05:51:
         89:e1:e6:8e:2e:3f:ab:dd:52:65:a3:fb:5a:35:e0:a1:23:34:
         8e:79:ef:91:ad:d3:f0:e5:7c:d7:6f:e7:1e:f6:cc:4f:fb:b1:
         d0:d1:8e:e7:29:e2:54:24:e5:46:a8:02:0f:e5:fb:79:0f:a4:
         35:6e:6b:fc:83:ff:c2:cf:02:2d:0b:33:e0:fe:75:54:6e:ab:
         f6:4f:2c:81:75:ae:36:bf:51:c7:bc:72:47:5c:a4:e3:b7:d5:
         a2:98:1d:af:0b:ab:99:d7:2a:40:00:1c:b6:ac:9a:82:a0:66:
         57:64:a7:65:df:df:a0:da:41:f5:75:cb:0d:74:00:24:c0:01:
         5b:d7:cd:08:6f:fb:fd:de:4d:fb:ee:f5:86:49:f2:32:03:3b:
         c7:c0:d2:ea:d3:8a:c9:d9:89:7d:36:f9:c9:7e:11:ac:7a:a2:
         f8:f9:f3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:08 2024 by rpki-client on console-ams.rpki-client.org