Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/vseF0Z8bDi1vfwnm2zDwjl8gQr4.roa
File:                     vseF0Z8bDi1vfwnm2zDwjl8gQr4.roa (raw, json)
Hash identifier:          xBI7D27XU3HaeHKHE9pCQ8A/tKXf+HycKJ2Q/xExat4=
Subject key identifier:   BE:C7:85:D1:9F:1B:0E:2D:6F:7F:09:E6:DB:30:F0:8E:5F:20:42:BE
Certificate issuer:       /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial:       01924216E20B0265FDB5C1F0270768F0D0E9
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/vseF0Z8bDi1vfwnm2zDwjl8gQr4.roa
Signing time:             Mon 30 Sep 2024 08:40:48 +0000
ROA not before:           Mon 30 Sep 2024 08:40:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        185.162.179.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 01 Oct 2024 14:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:42:16:e2:0b:02:65:fd:b5:c1:f0:27:07:68:f0:d0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
        Validity
            Not Before: Sep 30 08:40:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bec785d19f1b0e2d6f7f09e6db30f08e5f2042be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:16:34:fa:de:26:9b:dc:aa:43:b9:c7:84:1f:
                    07:c9:8c:a0:29:cc:36:52:3d:af:02:da:02:bf:4c:
                    b2:ab:75:bf:7e:93:94:eb:b5:a9:94:ab:8d:03:88:
                    7d:7c:1f:21:c2:f2:b2:4c:1c:4b:a7:d7:fb:15:6f:
                    a8:35:06:2e:ef:2b:99:56:0a:58:d7:49:e8:d5:84:
                    c6:3c:92:9d:3e:39:b6:c0:ed:20:04:15:57:fc:2d:
                    51:db:e6:46:b3:64:d8:72:af:09:67:29:a6:58:b7:
                    85:87:de:49:40:d3:97:5e:a9:00:21:3a:e8:23:3c:
                    27:74:33:aa:e3:7f:78:27:13:00:b5:18:f9:62:25:
                    2a:8e:b6:cc:b0:4e:1f:0e:bb:09:bb:5d:50:66:a1:
                    d0:7d:77:f3:c5:86:21:05:34:a1:9b:2f:2f:38:0b:
                    24:de:25:fa:58:a7:47:61:9d:8d:8b:c8:33:c9:ef:
                    6d:0b:69:f1:a4:8f:f6:12:ac:55:89:8c:e6:93:00:
                    56:93:33:00:13:4f:30:81:56:36:97:a5:db:53:cd:
                    90:41:f9:a5:b8:79:39:9f:ee:da:34:ec:6f:85:99:
                    20:3b:48:7b:25:bd:81:95:63:bb:a2:9f:d9:8a:b5:
                    08:c2:50:cd:2a:b9:b2:8f:8a:01:9f:2d:d3:4d:8a:
                    21:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C7:85:D1:9F:1B:0E:2D:6F:7F:09:E6:DB:30:F0:8E:5F:20:42:BE
            X509v3 Authority Key Identifier:
                keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/vseF0Z8bDi1vfwnm2zDwjl8gQr4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.162.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:53:3d:b4:1f:32:57:ea:f7:ff:a9:f1:7b:67:b4:d1:1f:7f:
         98:2f:49:12:5f:dc:48:8f:a2:b3:8a:9e:20:08:be:40:6b:3b:
         cb:9f:85:7a:51:92:d3:ad:96:ab:73:d6:5f:48:3f:ff:9e:6f:
         c1:5e:d7:d0:9f:11:25:75:15:5e:e1:6d:19:d2:6f:d5:e7:9a:
         e4:72:bd:1c:c3:ac:12:fd:9f:12:8a:a0:1d:5c:84:ca:3c:63:
         14:87:72:9e:7c:d2:7a:13:5d:e1:56:38:67:e9:10:46:cf:aa:
         db:48:ee:dd:a2:2b:4e:33:85:6e:32:11:ae:fe:6b:e8:69:a1:
         77:71:e0:a6:97:0d:3b:d3:b1:09:49:46:e5:74:8a:be:50:0d:
         be:05:ee:ca:f7:37:11:37:65:0b:5d:ed:c1:8e:01:86:81:8b:
         14:a6:fb:30:2f:f7:f3:96:6b:45:16:e3:32:ee:69:b1:a2:b6:
         ae:54:0f:02:c2:7d:c1:d5:d1:a1:a5:31:55:c6:11:23:9a:f1:
         48:82:af:a4:36:8f:02:06:96:24:4f:81:b0:94:17:46:5c:9e:
         b9:d5:45:62:cc:58:ce:b3:5e:5a:8e:3f:a5:3c:5d:2a:5b:36:
         83:cc:45:44:c0:3a:31:43:0d:aa:35:f6:79:d0:e9:76:e6:35:
         72:0e:55:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 17:51:30 2024 by rpki-client on console-ams.rpki-client.org