Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/EYVxwO4WSnY4XwnmxrXWFmh15Wc.roa
File:                     EYVxwO4WSnY4XwnmxrXWFmh15Wc.roa (raw, json)
Hash identifier:          a6b53IugTnybdIXnPNoPiMirY/aH66RiUdMlnXOcIJU=
Subject key identifier:   11:85:71:C0:EE:16:4A:76:38:5F:09:E6:C6:B5:D6:16:68:75:E5:67
Certificate issuer:       /CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Certificate serial:       018693BBC9694970556946C3AE52A923E8DC
Authority key identifier: 6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/EYVxwO4WSnY4XwnmxrXWFmh15Wc.roa
Signing time:             Mon 27 Feb 2023 16:36:42 +0000
ROA not before:           Mon 27 Feb 2023 16:36:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206083
IP address blocks:        185.85.122.0/24 maxlen: 24
                          2a05:adc2::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:93:bb:c9:69:49:70:55:69:46:c3:ae:52:a9:23:e8:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
        Validity
            Not Before: Feb 27 16:36:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=118571c0ee164a76385f09e6c6b5d6166875e567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:26:55:78:1b:f1:d2:2b:46:97:3c:dd:e6:63:
                    40:db:f4:21:db:7b:c7:65:2a:d5:e4:82:7f:bf:63:
                    d9:f4:bf:39:49:8a:6f:c9:47:f6:9e:68:10:89:1e:
                    59:4b:1c:14:f2:91:b5:b0:26:88:2b:ea:b2:6a:88:
                    63:d3:1e:92:94:68:7c:7d:f0:0f:49:7e:73:ba:f3:
                    4b:cc:61:d9:b0:eb:65:9f:be:82:49:09:85:d1:b6:
                    ca:46:b2:69:b0:79:09:d3:bf:b3:5f:83:ba:9e:be:
                    3b:e1:31:81:e0:ac:22:ef:28:f3:95:48:33:ff:55:
                    23:35:ef:36:73:0b:ef:5d:5d:a1:c1:59:00:25:d9:
                    43:61:d8:e5:22:64:92:8c:c4:00:6e:70:03:f1:12:
                    33:a8:93:7e:a2:13:7b:ea:08:b8:0c:1b:af:83:15:
                    1e:3f:47:0a:ea:2c:d9:a3:0a:81:dd:7e:7a:24:a2:
                    c3:76:9b:0d:61:9c:7f:2a:93:4c:89:74:c9:2d:01:
                    9c:fb:31:f8:52:f4:74:1f:e7:31:03:bb:ec:45:53:
                    39:02:70:b9:2e:0a:a5:79:df:78:b4:b7:35:da:a1:
                    2d:5b:7e:e7:48:29:36:cb:fa:2d:73:65:81:66:ea:
                    bb:53:28:03:ee:12:32:94:8b:d5:f3:d9:6c:f9:d3:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:85:71:C0:EE:16:4A:76:38:5F:09:E6:C6:B5:D6:16:68:75:E5:67
            X509v3 Authority Key Identifier:
                keyid:6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/EYVxwO4WSnY4XwnmxrXWFmh15Wc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.85.122.0/24
                IPv6:
                  2a05:adc2::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:af:48:86:27:e1:7e:8b:85:21:c3:a1:d9:81:46:e5:40:7b:
         f9:82:c1:f9:1f:50:f7:7a:8d:6a:7a:41:17:24:02:f3:69:90:
         fb:26:43:fc:70:2d:71:4e:23:6a:f6:c6:f6:5d:52:fa:21:7d:
         f7:af:bb:00:06:75:17:0e:cb:bc:56:3c:71:0e:79:f8:d3:e6:
         a9:7e:17:53:ac:27:8f:a0:7e:6f:d4:9c:5e:a4:a7:40:bc:77:
         64:c5:82:09:d4:f4:3d:66:05:35:cb:72:23:0d:35:22:b5:9d:
         52:19:0b:ba:ba:0d:d6:61:b6:51:75:61:2b:9a:14:ce:db:b6:
         16:59:d4:4a:51:f0:9a:51:49:53:0e:fa:63:a3:0b:a1:b8:44:
         a5:0d:0b:13:86:f5:67:24:df:13:12:b3:0f:a4:b2:85:ef:70:
         36:9a:7b:84:ee:95:c6:f7:24:13:6b:a6:e9:bf:be:fc:d2:55:
         58:fb:ad:f8:07:40:40:e5:06:63:7b:cf:bf:6f:58:75:8b:75:
         5d:5f:79:aa:fa:4d:c6:bc:45:1a:ec:96:50:57:26:8a:47:57:
         95:f8:02:ff:13:52:29:15:99:83:32:9c:44:cf:12:04:cf:6a:
         b8:fb:68:38:f8:6a:d9:2e:06:07:f3:3c:2e:66:4b:c3:06:62:
         a9:a0:f1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:43 2024 by rpki-client on console-ams.rpki-client.org