Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/TYp2E-emVuus18C48k5Tk90fgwU.roa
File:                     TYp2E-emVuus18C48k5Tk90fgwU.roa (raw, json)
Hash identifier:          A5dsbAiPQhWaus7ZjixM//nooz1JHMZDGGt6WTRUGgs=
Subject key identifier:   4D:8A:76:13:E7:A6:56:EB:AC:D7:C0:B8:F2:4E:53:93:DD:1F:83:05
Certificate issuer:       /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial:       018CFC9A02AD0BD17DD219846074B8B91FD4
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/TYp2E-emVuus18C48k5Tk90fgwU.roa
Signing time:             Fri 12 Jan 2024 07:36:40 +0000
ROA not before:           Fri 12 Jan 2024 07:36:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     397630
IP address blocks:        185.255.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 23 Jan 2024 12:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:fc:9a:02:ad:0b:d1:7d:d2:19:84:60:74:b8:b9:1f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
        Validity
            Not Before: Jan 12 07:36:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4d8a7613e7a656ebacd7c0b8f24e5393dd1f8305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e7:f1:9f:9e:34:22:6c:bb:55:81:e2:ad:1d:
                    b5:bd:96:c9:b8:82:d4:37:c2:5c:79:2f:40:9f:75:
                    b0:a3:dd:48:87:75:97:4f:38:8d:e1:ba:b2:b8:fc:
                    f5:6e:ad:67:ce:04:7c:72:dd:16:3f:2b:77:3f:c7:
                    64:ee:00:86:19:41:59:3d:21:80:ab:67:c0:c9:4f:
                    9b:ed:15:e9:ec:25:68:d4:22:b0:5e:7b:37:f8:8d:
                    b5:c5:b9:40:e9:36:3c:81:34:67:0b:0c:61:36:ae:
                    b6:0f:ad:4e:44:c9:6a:0f:89:13:51:1d:89:e7:e3:
                    2c:b9:8b:09:97:09:c5:00:b0:10:e2:7a:1f:55:5f:
                    4c:98:ed:cc:06:19:4a:d1:8b:66:32:0a:3c:e2:18:
                    76:31:8a:7d:fd:58:c5:bd:f3:99:30:59:0d:18:27:
                    97:4d:7b:b4:d4:ce:1f:f8:17:d4:09:17:06:d8:79:
                    7a:aa:76:75:4e:90:be:f6:8d:5a:80:18:a9:60:ea:
                    11:f0:4d:4d:20:7a:af:70:fd:52:e9:21:b0:bd:b9:
                    61:f3:ae:a4:ee:ea:27:9a:cb:0a:f3:d4:9f:a1:95:
                    e2:7d:89:9b:58:f4:94:3e:44:ba:3c:53:2a:26:1b:
                    e6:0f:05:f8:54:8f:78:95:c4:b5:3d:15:4e:5d:c2:
                    7b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8A:76:13:E7:A6:56:EB:AC:D7:C0:B8:F2:4E:53:93:DD:1F:83:05
            X509v3 Authority Key Identifier:
                keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/TYp2E-emVuus18C48k5Tk90fgwU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.255.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:1f:5b:72:45:57:21:60:55:d2:b9:cc:4c:f9:f3:d7:a7:35:
         78:39:3d:7c:9d:9c:6c:3a:68:70:0a:46:92:6e:26:c8:cb:9d:
         18:e1:d9:64:a4:4f:37:0d:4e:66:2e:be:4f:85:41:39:a2:11:
         48:c9:3f:3b:91:77:9b:f7:6f:67:59:21:1a:54:9c:0a:e5:6a:
         a1:65:23:cf:a5:a6:2d:3d:a6:1d:9c:d0:5b:1b:82:f1:1c:d6:
         55:44:80:f4:9e:a0:b9:14:09:41:a0:64:be:a4:82:67:4c:dc:
         36:21:b7:7d:da:e4:75:21:a1:cb:5e:7c:e7:a1:f1:bd:d4:68:
         ee:17:fa:a5:df:c9:a0:0a:3c:da:84:3b:3b:48:b7:79:fe:91:
         1b:62:37:0f:a8:e3:0c:a0:b1:76:1f:d8:1d:81:81:1e:0d:24:
         7c:da:6a:56:a0:f0:2a:bb:c8:06:db:52:7c:04:c8:31:65:3d:
         9b:52:70:06:6f:e0:78:93:cd:4c:6a:a5:23:32:58:df:bc:5e:
         10:62:fb:5e:7e:d5:ac:64:e3:c3:7a:81:e0:1c:44:95:f4:12:
         32:a5:21:76:a1:a5:67:3d:6c:1c:b2:0f:bd:8a:a7:75:18:1b:
         14:10:8a:84:59:4f:77:bf:0f:51:c4:c2:79:15:25:ab:46:b5:
         6f:d2:8a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org