Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/MK7Dsbt19fJj5LAblyIcV2Bn1vg.roa
File:                     MK7Dsbt19fJj5LAblyIcV2Bn1vg.roa (raw, json)
Hash identifier:          nwqKdHghwbVZn5JxpsfsBK9S2jAMoKioDiMsW1kCShA=
Subject key identifier:   30:AE:C3:B1:BB:75:F5:F2:63:E4:B0:1B:97:22:1C:57:60:67:D6:F8
Certificate issuer:       /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial:       018C2C6A1F2E5CB7177CEC93D0718716166C
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/MK7Dsbt19fJj5LAblyIcV2Bn1vg.roa
Signing time:             Sat 02 Dec 2023 21:23:21 +0000
ROA not before:           Sat 02 Dec 2023 21:23:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7029
IP address blocks:        185.33.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:2c:6a:1f:2e:5c:b7:17:7c:ec:93:d0:71:87:16:16:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
        Validity
            Not Before: Dec  2 21:23:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=30aec3b1bb75f5f263e4b01b97221c576067d6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:79:58:2e:7e:94:a1:4c:d3:a6:65:1b:3e:03:
                    ec:20:d6:8d:36:96:02:a8:28:f1:c3:57:9e:c0:6e:
                    fb:ec:6f:e3:08:99:12:36:af:44:5b:4e:69:15:b8:
                    c4:23:0a:3c:fa:e1:6d:07:c0:d5:fd:00:77:a4:b9:
                    c3:6f:3a:b0:e6:05:bb:0b:b2:0a:67:e7:cb:6f:07:
                    ad:cb:95:c8:85:23:e8:0f:b0:3e:ab:b2:5a:a9:4d:
                    d4:3d:5e:44:61:ba:7a:f9:78:bd:eb:b8:c7:02:20:
                    61:c9:df:91:99:96:1d:15:e2:ca:ba:b4:2f:8f:a0:
                    93:31:cd:9c:de:c8:89:8b:a9:bb:28:e5:4e:04:c0:
                    ff:6f:fb:b1:83:46:0b:92:b0:bf:ea:7d:cc:c1:80:
                    35:bb:ee:f1:df:e9:2c:5d:f1:c2:6b:09:6d:48:89:
                    21:18:7f:a4:ec:e6:21:9a:dc:95:4a:5d:42:5b:ce:
                    99:f8:6e:62:45:e4:ff:92:b2:d5:fb:19:6d:21:88:
                    8e:28:01:6f:5e:c3:98:b0:4b:7e:a3:3b:73:19:f3:
                    b4:31:7c:f1:e0:32:b1:87:44:14:93:d5:52:cb:c1:
                    0b:08:34:9a:dc:07:22:71:5f:be:a7:60:4c:42:67:
                    5f:e1:ba:38:04:db:94:2a:40:cc:21:7b:2a:b5:d8:
                    41:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AE:C3:B1:BB:75:F5:F2:63:E4:B0:1B:97:22:1C:57:60:67:D6:F8
            X509v3 Authority Key Identifier:
                keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/MK7Dsbt19fJj5LAblyIcV2Bn1vg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.33.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:b6:79:7a:ec:6d:7b:e8:f4:87:dc:f5:93:7a:1d:05:62:3c:
         d8:c0:9b:c1:cd:30:f4:48:7a:4b:b3:eb:9e:e1:b7:c6:71:90:
         fd:1e:01:99:c3:e1:c7:e2:4d:fc:90:25:2a:66:c5:35:9d:f0:
         58:7f:05:e0:f2:32:9f:79:a7:88:50:56:da:95:ed:43:a9:3a:
         a6:ec:ef:83:5a:88:39:a1:5c:57:3c:4d:8f:da:e9:8c:c7:67:
         52:93:0d:0e:37:f2:56:7e:00:ab:78:e1:f2:c3:32:1d:22:e2:
         7f:86:6f:2e:4e:88:93:00:2c:01:a6:19:8a:04:a7:c3:03:f7:
         4f:82:fd:be:1d:14:f4:bb:2f:06:ae:8d:9c:d0:65:47:37:f5:
         20:0d:a0:e7:b9:a0:d7:0a:86:22:76:f7:6b:c6:fe:51:e8:3b:
         db:46:23:ec:8d:e3:ed:38:97:fa:d9:ed:6d:aa:e7:f2:a4:15:
         f1:13:16:60:c0:60:fd:38:d6:26:b2:de:a6:66:fe:f6:3b:b4:
         ce:4b:47:a8:6c:05:8a:d1:85:76:c9:97:97:cb:4b:59:b6:ed:
         0f:b2:94:7a:aa:34:f1:73:9a:9e:3b:9b:24:ea:9f:94:86:05:
         b1:57:94:78:3f:fb:04:9f:d5:23:73:8e:75:70:84:83:4f:60:
         1a:af:9e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:32 2024 by rpki-client on console-fra.rpki-client.org