Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/exlyKpMoOytm_uk01St7x967YK8.roa
File:                     exlyKpMoOytm_uk01St7x967YK8.roa (raw, json)
Hash identifier:          uZPCocZSNB2+zG1weJuBCp9rX2KOQcEAWEHhA646FiA=
Subject key identifier:   7B:19:72:2A:93:28:3B:2B:66:FE:E9:34:D5:2B:7B:C7:DE:BB:60:AF
Certificate issuer:       /CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
Certificate serial:       01856E6FB9125039769D59827486056FE4F2
Authority key identifier: EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/exlyKpMoOytm_uk01St7x967YK8.roa
Signing time:             Sun 01 Jan 2023 17:44:53 +0000
ROA not before:           Sun 01 Jan 2023 17:44:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3257
IP address blocks:        185.3.30.0/23 maxlen: 23
                          185.3.28.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 14:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:6f:b9:12:50:39:76:9d:59:82:74:86:05:6f:e4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
        Validity
            Not Before: Jan  1 17:44:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7b19722a93283b2b66fee934d52b7bc7debb60af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:b2:df:7d:69:8e:b1:93:72:c3:de:00:b7:
                    76:64:ee:e8:ac:8b:03:70:a7:b8:e4:de:4f:6f:af:
                    37:b9:5e:4c:ed:4f:84:46:65:96:e6:2d:94:e4:c9:
                    66:76:fd:70:c5:84:d9:2c:7d:a3:04:50:78:fe:e4:
                    fc:5b:fb:25:73:e5:18:98:f2:00:5a:ed:2c:d2:59:
                    25:9a:b3:a4:2c:a3:70:2f:b3:3d:c4:6a:df:6b:0b:
                    ac:d8:dc:2c:9f:5c:62:8f:e7:42:bb:88:ef:f0:9d:
                    ea:83:76:95:9a:75:af:5e:0d:92:6b:fa:37:23:37:
                    99:4e:90:40:27:f2:3b:82:49:74:44:69:98:49:01:
                    a9:b9:44:9c:bd:4e:55:1b:e2:53:cc:0e:0f:25:ae:
                    03:f6:32:d7:60:9c:32:fb:49:e0:85:24:4f:51:4b:
                    e6:ad:5c:ce:2f:73:87:59:ba:3f:c3:99:dc:63:c1:
                    29:1a:19:f0:68:83:2b:52:01:62:7b:74:b5:e8:8d:
                    94:f6:8d:53:84:78:d0:ce:25:a5:4d:0f:11:86:16:
                    68:62:88:96:c4:70:58:af:82:ec:bd:ca:29:77:45:
                    44:bb:d4:ce:84:8e:6c:13:8e:33:83:9d:32:cc:0a:
                    95:db:66:b5:8d:89:d4:12:fd:6f:a2:52:78:07:c0:
                    5b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:19:72:2A:93:28:3B:2B:66:FE:E9:34:D5:2B:7B:C7:DE:BB:60:AF
            X509v3 Authority Key Identifier:
                keyid:EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/exlyKpMoOytm_uk01St7x967YK8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.3.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:92:68:e9:75:63:ca:07:44:03:33:67:84:51:07:6f:5f:b1:
         b3:dc:ff:73:f2:61:d8:65:1a:67:0d:40:9f:d8:b1:5f:3d:b7:
         6f:53:93:c9:fa:8f:e7:a0:47:3c:26:73:f3:82:ee:02:97:7c:
         57:43:87:08:ca:c2:a1:b3:42:f4:b8:b9:c5:a5:74:d9:60:8f:
         a4:e3:dc:0f:74:59:7d:d3:73:45:c0:d2:35:5b:c7:70:e1:51:
         d0:6c:fd:7f:38:0d:06:1e:6a:d6:5b:2a:42:ca:c9:5a:c2:eb:
         77:fa:29:ae:d4:3c:73:1a:54:00:ef:43:90:ef:21:cb:b5:d5:
         4c:46:4e:a5:ee:76:b5:8b:58:21:d7:dd:4b:3b:60:27:0f:34:
         9b:a1:4c:60:0c:36:25:1c:07:45:13:e2:1f:f3:f9:51:7d:2a:
         5d:6a:cd:5d:58:b8:d8:04:26:87:9e:57:c2:c3:3a:af:2f:76:
         ec:f8:ce:c4:08:6e:c1:ce:cf:86:6b:0f:4c:e5:b1:a2:64:b3:
         aa:0a:8e:da:9b:49:55:69:c6:a3:5e:1a:3d:88:23:f7:01:a8:
         59:f4:74:e6:8b:44:f6:f1:08:23:d0:04:c1:f4:06:b0:23:04:
         39:8d:d2:1a:aa:3a:7c:3a:60:6b:1f:93:fe:4c:ef:a1:52:02:
         66:e1:f6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:32 2024 by rpki-client on console-fra.rpki-client.org