Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/hYJk66oCkkEPswDTKnx2X6sblKc.roa
File:                     hYJk66oCkkEPswDTKnx2X6sblKc.roa (raw, json)
Hash identifier:          g5vNAWsTFiluywKzSDmgjQuV/+ncLJleBpBPp5N7Pf0=
Subject key identifier:   85:82:64:EB:AA:02:92:41:0F:B3:00:D3:2A:7C:76:5F:AB:1B:94:A7
Certificate issuer:       /CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Certificate serial:       0186E45873691BCB19C03E6927E5D60D3008
Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/hYJk66oCkkEPswDTKnx2X6sblKc.roa
Signing time:             Wed 15 Mar 2023 08:17:27 +0000
ROA not before:           Wed 15 Mar 2023 08:17:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15830
IP address blocks:        185.63.73.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e4:58:73:69:1b:cb:19:c0:3e:69:27:e5:d6:0d:30:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644
        Validity
            Not Before: Mar 15 08:17:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=858264ebaa0292410fb300d32a7c765fab1b94a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:28:26:79:2b:97:77:2e:93:47:e2:3d:46:3a:
                    0d:4a:78:04:42:39:cd:7c:f5:bb:85:79:2f:3c:ab:
                    7a:17:19:5f:e5:2f:f9:2d:39:9f:07:8d:c1:4b:fb:
                    2b:af:68:bd:81:bc:5a:b9:a8:0c:ed:7a:45:27:ad:
                    f4:71:da:e3:88:65:58:f2:a5:ea:a2:1b:6b:62:87:
                    3b:bc:5d:1b:6b:90:54:8a:d4:41:e5:46:ab:4b:2a:
                    2f:b7:0e:e0:74:92:0a:a1:9a:a3:ac:f8:be:8d:08:
                    79:d2:9a:fa:6c:ba:59:d1:de:e5:71:7f:0a:54:26:
                    3d:c3:cf:e2:ef:08:cf:99:d1:8a:90:11:b8:09:0f:
                    c6:79:39:d8:b6:b7:2c:8f:a7:7f:fe:3d:23:28:ae:
                    8f:21:a2:83:aa:e4:4e:6e:e7:9e:79:a1:93:11:c5:
                    77:4d:f8:4f:8a:92:3f:9f:9b:a3:30:a2:30:d1:69:
                    25:7d:07:62:30:20:59:a1:d6:e6:bc:61:03:9f:e6:
                    db:d1:6d:99:b9:60:80:c8:e3:c3:cf:1d:f6:2a:41:
                    27:dd:99:4b:4d:42:99:93:4d:ec:34:29:95:d5:e8:
                    bb:e7:14:eb:df:c0:49:39:87:39:3b:bd:65:9c:39:
                    cb:aa:f8:2a:95:40:be:83:67:fd:d4:e8:4a:96:fc:
                    45:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:82:64:EB:AA:02:92:41:0F:B3:00:D3:2A:7C:76:5F:AB:1B:94:A7
            X509v3 Authority Key Identifier:
                keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/hYJk66oCkkEPswDTKnx2X6sblKc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.63.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:f6:53:ba:47:70:f0:d3:75:56:ac:ba:ca:7b:ae:63:ee:10:
         7e:b3:53:f0:ad:a9:85:e7:37:2a:42:f9:d6:75:3d:66:56:45:
         7c:98:87:43:bb:14:b1:cb:4c:d0:2b:5f:ff:55:2a:42:01:bd:
         0e:a2:10:2a:3e:7d:35:9a:36:16:b4:65:8c:30:0a:f1:5f:bc:
         4e:5e:89:ca:4c:23:b2:c7:a3:99:0d:a0:2b:24:cd:74:90:52:
         c1:12:bd:ad:5f:49:2d:e2:af:a7:63:f2:f0:98:a2:90:33:cb:
         00:05:e4:e3:6f:46:77:18:46:b7:bf:15:e8:a8:18:08:c6:f2:
         f3:b2:74:ee:56:6a:e5:fd:c7:72:fd:20:05:8b:a7:c2:73:24:
         42:51:b7:a4:41:ff:a4:7f:42:96:f9:b0:d5:f2:b6:91:a6:bc:
         bd:b7:d7:60:ea:0b:6b:f8:ef:10:bf:91:00:77:f1:8d:67:7c:
         e5:71:a4:66:5d:3e:f6:62:61:f4:c9:fe:e3:fb:6f:de:5e:25:
         77:4f:75:54:6e:87:84:d3:60:9a:3c:ff:52:26:10:6c:22:8a:
         f7:4e:17:f2:75:69:dc:15:78:d6:98:de:bb:ad:74:73:05:d1:
         b1:1a:fd:73:24:06:a5:3c:29:83:38:f0:39:47:2a:7e:31:2a:
         15:f5:d2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:24 2024 by rpki-client on console-fra.rpki-client.org