Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/MR3-rcmQGI7ViwR5LBqwQSFZcMg.roa
File:                     MR3-rcmQGI7ViwR5LBqwQSFZcMg.roa (raw, json)
Hash identifier:          a5asrh2cScawGM3ZG0+8lSXW8pBL+9Jt+1luLlsnVLc=
Subject key identifier:   31:1D:FE:AD:C9:90:18:8E:D5:8B:04:79:2C:1A:B0:41:21:59:70:C8
Certificate issuer:       /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial:       018867C0BD5466F11AE8A8A0748227014A2F
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/MR3-rcmQGI7ViwR5LBqwQSFZcMg.roa
Signing time:             Mon 29 May 2023 13:44:24 +0000
ROA not before:           Mon 29 May 2023 13:44:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        185.33.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 29 Sep 2023 13:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:67:c0:bd:54:66:f1:1a:e8:a8:a0:74:82:27:01:4a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
        Validity
            Not Before: May 29 13:44:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=311dfeadc990188ed58b04792c1ab041215970c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f4:96:0b:bf:01:18:64:d2:20:e8:2d:48:de:
                    d2:31:8d:14:10:19:70:7c:dc:15:03:7b:91:29:95:
                    ee:e0:26:4e:ba:b6:ae:88:a5:1d:69:bb:e3:1f:6d:
                    d5:ad:4a:ae:0d:cc:04:9b:79:61:33:de:7a:18:ee:
                    45:8f:99:e0:40:42:fb:c4:3d:39:80:45:04:8e:d9:
                    0d:23:cb:4a:fc:86:dc:6e:7b:4d:50:58:92:0e:2e:
                    dc:ba:00:00:95:39:6a:46:cb:90:1e:5d:9b:95:07:
                    7f:57:6e:8d:a6:ee:54:69:6d:e0:22:38:39:d2:bc:
                    53:69:03:cd:78:a2:03:60:a0:e5:53:e5:18:33:2f:
                    1a:55:41:d5:3d:91:29:fc:a9:4e:7d:02:a9:5f:b8:
                    e2:92:61:c9:14:16:9c:2d:71:03:ef:c7:1d:32:a1:
                    0e:2c:ac:f9:63:9c:7a:2a:9c:fd:5e:20:af:9f:97:
                    e9:e7:8e:6f:98:d8:a4:08:ad:84:95:31:ca:4d:b4:
                    d2:8c:e9:5a:04:fe:02:b6:8c:bb:e1:ad:45:9f:12:
                    b7:0a:09:2e:e8:f2:ca:3f:68:40:5f:7d:30:a4:c0:
                    ff:85:76:93:8b:a4:cc:b3:d4:4a:48:77:d5:d5:f9:
                    71:0f:fa:02:10:89:3a:42:85:ce:b9:65:24:33:56:
                    09:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1D:FE:AD:C9:90:18:8E:D5:8B:04:79:2C:1A:B0:41:21:59:70:C8
            X509v3 Authority Key Identifier:
                keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/MR3-rcmQGI7ViwR5LBqwQSFZcMg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.33.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:62:19:93:a1:de:a6:35:3a:5f:39:c9:42:63:22:61:8e:a8:
         3f:b3:86:3b:63:b1:2c:a2:13:07:ca:b7:01:f0:70:a7:9b:21:
         2e:7a:32:c5:47:15:ef:a2:ec:7a:8a:a2:ee:4c:fe:1d:c9:36:
         06:20:6f:b0:83:28:72:ae:d8:08:df:4d:f9:49:ec:5c:fd:06:
         b8:5c:fc:d5:d0:b4:e9:9c:25:84:5a:56:26:15:df:96:ec:97:
         04:ad:04:c5:1e:51:33:6c:67:64:dd:68:de:aa:95:6a:a8:d8:
         1c:53:1e:fd:2c:bd:28:83:48:cc:45:b0:cb:bf:f7:ee:9f:93:
         f8:f2:ab:5a:a3:95:04:63:1a:1b:df:7b:88:43:cf:6e:b4:b6:
         c4:7b:02:2b:fc:fd:e3:53:0f:77:43:36:49:aa:91:b8:b5:33:
         7a:61:43:91:79:7e:f6:6e:34:3d:16:32:3e:8b:72:8f:8c:ef:
         9d:df:5f:74:d9:ef:a5:ac:e5:1a:59:2e:2b:27:8c:77:de:37:
         ee:be:23:0f:35:0c:78:22:e4:bf:e6:61:5c:4e:af:e6:94:f5:
         de:b1:9b:47:75:36:d7:ee:8c:35:a0:6b:a2:50:4e:e3:59:80:
         60:e7:fe:f6:34:b9:b1:0c:25:30:27:3e:9c:1b:47:98:81:f8:
         c1:10:ce:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:08 2024 by rpki-client on console-ams.rpki-client.org