Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/gTELWC8G4twhd3_IiWRdoKBzAUg.roa
File:                     gTELWC8G4twhd3_IiWRdoKBzAUg.roa (raw, json)
Hash identifier:          EtNhCkM+Dlmr+caZvZ6F5QletYmi6QKui1Ye4ZunbmY=
Subject key identifier:   81:31:0B:58:2F:06:E2:DC:21:77:7F:C8:89:64:5D:A0:A0:73:01:48
Certificate issuer:       /CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Certificate serial:       01856CF879B75DC8F7D6EFD460F8E247EDFC
Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/gTELWC8G4twhd3_IiWRdoKBzAUg.roa
Signing time:             Sun 01 Jan 2023 10:55:01 +0000
ROA not before:           Sun 01 Jan 2023 10:55:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29518
IP address blocks:        185.63.72.0/24 maxlen: 24
                          185.63.74.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:f8:79:b7:5d:c8:f7:d6:ef:d4:60:f8:e2:47:ed:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644
        Validity
            Not Before: Jan  1 10:55:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=81310b582f06e2dc21777fc889645da0a0730148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b2:a4:5f:3e:10:e3:41:24:b7:8e:6b:2e:0a:
                    9d:b4:45:b4:d4:d7:8b:42:67:b3:83:b4:a0:c5:84:
                    47:9e:e4:f5:cd:b7:43:3e:61:d6:a3:4b:2a:46:a1:
                    f7:e4:9f:65:55:40:96:81:d7:7e:c6:46:1f:e3:e4:
                    af:5a:e0:78:83:c1:33:a0:81:9b:a3:ff:3a:3a:33:
                    0a:2d:34:51:89:4f:a7:ed:c1:fe:b1:28:5f:ab:b8:
                    bf:3c:1b:e7:69:09:93:a3:00:fa:52:4b:1b:40:d7:
                    0f:a8:ae:a5:ac:e1:4a:60:a5:23:b4:b7:4c:4c:4a:
                    0b:03:cd:45:9a:46:3f:15:fc:12:6e:3b:84:6a:41:
                    77:23:7a:67:39:38:08:38:e3:38:7b:55:d4:0b:7e:
                    58:d5:2c:3f:b6:2d:29:6f:1a:b8:ca:54:20:00:c1:
                    e5:7d:5d:f8:c7:ca:44:53:a6:b2:a7:59:93:0a:2c:
                    5c:b9:ea:36:b3:a8:9f:6b:59:79:e7:3a:1a:8b:cd:
                    be:c5:10:91:76:db:23:ca:7a:18:36:0d:15:80:5d:
                    63:d0:d5:23:05:f2:08:a4:3c:0d:2a:8a:2c:8c:dc:
                    13:46:8d:3d:e4:f6:cd:da:92:ef:6a:e1:3d:5f:3a:
                    5e:41:3b:13:92:fa:98:77:ae:b8:88:c6:0f:5b:a0:
                    82:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:31:0B:58:2F:06:E2:DC:21:77:7F:C8:89:64:5D:A0:A0:73:01:48
            X509v3 Authority Key Identifier:
                keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/gTELWC8G4twhd3_IiWRdoKBzAUg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.63.72.0/24
                  185.63.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:68:70:14:e3:d9:fd:ba:13:f0:f8:ff:4a:44:e4:3c:29:50:
         08:0e:78:5d:87:1e:86:97:c0:db:e3:f6:8e:39:aa:bb:f3:54:
         db:b7:83:30:d5:f4:7f:c6:3f:8a:0e:da:ee:ef:35:a9:4d:c0:
         5a:f2:a9:96:74:55:71:b0:41:d3:00:f8:03:e6:50:28:0b:0a:
         eb:e7:fe:c3:ef:5b:dd:2e:b8:df:84:77:36:3c:a2:4e:6d:45:
         05:c3:3d:a3:8e:89:b7:04:ab:d7:5e:8f:71:0a:0c:d5:55:1f:
         cd:e0:c0:71:87:b4:7f:25:f8:36:15:31:4d:90:a5:cd:45:d8:
         5b:cd:25:e4:65:a1:10:ed:f6:42:d8:65:03:96:5e:9d:4e:cb:
         c5:ad:48:80:6e:48:0b:57:bf:06:cc:bf:05:f3:d6:cc:18:ef:
         99:59:2c:78:42:73:4c:f4:94:ed:29:32:4e:72:39:4d:c6:d0:
         0f:91:77:61:14:fb:75:8f:f6:63:bd:34:e9:39:c4:71:45:9c:
         37:88:8b:9b:80:84:22:71:6d:6e:21:6d:3d:f7:4a:9a:f0:eb:
         c9:80:c7:ba:5e:0c:f7:bf:33:ba:9b:c6:03:60:36:26:59:48:
         71:84:04:f9:01:c2:d7:dd:64:54:90:11:a7:aa:2c:c2:4b:99:
         fc:15:ad:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:33 2024 by rpki-client on console-ams.rpki-client.org