Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/x-GCRLjr-I9Ft3Xg7E1GdXonknk.roa
File:                     x-GCRLjr-I9Ft3Xg7E1GdXonknk.roa (raw, json)
Hash identifier:          TGg2MMgW2T/FODVAgxeeqMAuPWAT/3NfaEQ2A+Lin44=
Subject key identifier:   C7:E1:82:44:B8:EB:F8:8F:45:B7:75:E0:EC:4D:46:75:7A:27:92:79
Certificate issuer:       /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial:       0191D220113B084AF4E9D288BCD6FD77F5EF
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/x-GCRLjr-I9Ft3Xg7E1GdXonknk.roa
Signing time:             Sun 08 Sep 2024 14:53:22 +0000
ROA not before:           Sun 08 Sep 2024 14:53:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        185.162.178.0/24 maxlen: 24
                          185.162.179.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 18:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:d2:20:11:3b:08:4a:f4:e9:d2:88:bc:d6:fd:77:f5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
        Validity
            Not Before: Sep  8 14:53:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c7e18244b8ebf88f45b775e0ec4d46757a279279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6c:db:9d:c8:11:40:61:9a:b1:c0:93:e4:4a:
                    9c:31:d9:72:19:af:a8:c8:a5:30:4d:4c:49:e3:98:
                    92:dc:29:71:b0:2c:d0:15:3c:7a:a9:66:1c:30:3b:
                    26:c9:67:20:2d:43:ab:ea:5c:d7:de:25:b6:a2:31:
                    0d:4d:d6:f6:c8:ef:84:b1:c4:aa:29:5b:53:4b:ab:
                    b5:da:52:fa:57:06:9c:6e:5e:d9:5c:29:28:c1:c2:
                    a3:60:db:97:8b:77:c0:c0:45:9d:b7:14:87:af:12:
                    0a:92:1f:93:b5:13:83:94:7a:1a:b2:51:11:58:61:
                    81:47:a4:99:eb:3d:f6:e9:95:f3:94:24:62:28:b0:
                    da:b4:bb:76:b1:3e:a0:29:20:0e:6f:ce:f3:1c:29:
                    7d:71:49:39:36:f8:fb:e6:ea:7b:db:5f:07:60:8e:
                    22:d5:39:0d:2f:89:51:3d:f5:bf:a3:9a:42:2b:95:
                    79:5b:af:13:f2:38:0b:8c:ab:06:16:15:30:38:8b:
                    d0:68:1c:49:ee:a9:dd:ee:bd:d2:12:a0:4b:c8:4b:
                    6c:37:1d:fc:40:ac:a7:4d:94:1f:cf:6d:e4:01:62:
                    39:bf:4e:c9:d5:40:c4:e1:96:6a:19:12:2a:6c:02:
                    c9:e6:a3:87:bf:bb:7e:97:67:de:b3:72:c3:09:60:
                    0c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E1:82:44:B8:EB:F8:8F:45:B7:75:E0:EC:4D:46:75:7A:27:92:79
            X509v3 Authority Key Identifier:
                keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/x-GCRLjr-I9Ft3Xg7E1GdXonknk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.162.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:12:b4:57:0f:4e:46:0f:38:1e:47:81:0c:0e:50:07:16:40:
         02:62:ea:95:33:d4:bd:56:b4:6f:cb:78:f0:01:23:7e:ac:38:
         2f:38:1b:49:d0:a9:3a:e8:5f:c3:da:54:35:40:10:b8:ab:d1:
         0c:8e:4c:fc:2f:6d:35:bd:5d:3d:1a:c1:85:e6:86:a6:77:5e:
         5e:28:79:fa:26:b9:f9:2d:20:3a:f0:cf:ef:fe:4e:4d:5e:da:
         27:1d:4a:f4:bd:26:a1:be:1e:65:08:96:09:7c:01:04:ff:b5:
         a0:61:a5:7f:9c:95:56:76:1d:28:de:bb:6e:0d:6b:27:b6:54:
         37:76:f3:0d:11:7e:fb:b3:53:d7:0c:e2:c7:fc:24:a4:b3:7c:
         38:a4:ac:dc:fc:2d:82:45:21:68:c0:99:0d:9e:c5:af:7a:8f:
         fd:63:9c:05:e6:eb:32:2b:2f:af:97:2f:43:17:32:43:de:00:
         b9:ce:cc:ed:cb:33:2a:15:3d:19:c9:b5:39:ca:48:e9:02:b3:
         19:7a:fb:cf:aa:ba:d6:e0:fa:5d:8c:07:e6:67:67:05:54:00:
         60:19:14:47:00:ad:ce:13:f2:52:6d:37:39:d3:db:f7:19:14:
         22:df:62:2e:d5:00:1d:53:8f:ee:33:b3:e0:7d:87:3c:fd:b1:
         c3:cf:d5:cb
-----BEGIN CERTIFICATE-----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Generated at Mon Sep 9 21:15:14 2024 by rpki-client on console-fra.rpki-client.org