Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m6bO2qzd88Wzu4sfTFcTTTV_MVo.roa
File:                     m6bO2qzd88Wzu4sfTFcTTTV_MVo.roa (raw, json)
Hash identifier:          Eg4/9XGx7+5ouxFR7GctUg6Q5QfjwYkmztkvWwdfdhc=
Subject key identifier:   9B:A6:CE:DA:AC:DD:F3:C5:B3:BB:8B:1F:4C:57:13:4D:35:7F:31:5A
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       018D0D3211EC2A21CDE6EB52A1AA16FF3C4E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m6bO2qzd88Wzu4sfTFcTTTV_MVo.roa
Signing time:             Mon 15 Jan 2024 12:56:41 +0000
ROA not before:           Mon 15 Jan 2024 12:56:41 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     399471
IP address blocks:        194.55.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Mar 2024 08:28:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:0d:32:11:ec:2a:21:cd:e6:eb:52:a1:aa:16:ff:3c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan 15 12:56:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9ba6cedaacddf3c5b3bb8b1f4c57134d357f315a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b6:56:71:17:fa:9f:74:5b:f7:b9:1e:dd:fd:
                    cc:51:e5:c8:79:87:68:ab:8b:d0:32:87:4e:18:4b:
                    a5:4f:6f:ff:ed:e5:33:23:1e:a8:36:92:14:63:8c:
                    b8:3c:fb:20:4f:1c:fd:be:e9:c5:df:f7:75:d0:0a:
                    0d:01:83:f6:f4:c9:ea:cd:5c:28:aa:6a:1d:49:57:
                    f7:23:53:91:29:14:02:73:04:19:df:55:41:37:dd:
                    73:4c:c9:fe:53:59:7d:f4:b7:aa:14:dd:db:06:4a:
                    2b:1a:fb:ae:c6:3c:24:88:2d:db:56:01:16:fb:62:
                    03:a4:96:54:1d:c3:87:13:28:c1:23:22:f3:97:2e:
                    b1:26:a7:9d:a4:d8:5d:e9:96:ac:5b:99:05:a1:91:
                    2e:b6:d0:e0:8c:ef:07:33:72:31:65:33:44:be:c5:
                    01:c8:c7:de:3e:e5:f7:71:c3:53:8b:86:e6:1f:49:
                    33:c2:7a:7a:0a:cc:a2:05:6d:3a:10:ab:1f:13:9a:
                    7a:5c:09:49:09:36:ee:a4:5a:5b:2d:0c:5f:c1:8a:
                    74:a9:46:54:a1:2b:ab:1e:a7:38:63:6f:b5:b7:aa:
                    d9:e3:a0:71:a4:7b:e5:87:b6:64:85:51:7c:e4:2e:
                    6e:27:e3:67:0a:bc:63:70:07:07:90:18:36:2e:58:
                    5a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A6:CE:DA:AC:DD:F3:C5:B3:BB:8B:1F:4C:57:13:4D:35:7F:31:5A
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m6bO2qzd88Wzu4sfTFcTTTV_MVo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.55.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:e6:45:5b:d9:d1:65:f5:05:b3:c0:82:8a:05:16:24:4a:5d:
         9f:02:96:5c:5d:0f:d2:33:43:1b:37:d4:f9:02:8c:42:73:9d:
         8d:49:a8:f1:73:f3:38:3d:b8:c7:a1:ae:42:f1:62:6e:ab:8e:
         4f:5f:3a:66:49:7a:8a:20:05:92:29:54:85:65:51:e3:4b:cb:
         66:38:1e:d4:72:6e:5c:00:a6:8f:8b:de:6e:3e:2e:47:3c:f5:
         6d:16:04:56:2b:52:ff:55:a8:fb:32:54:3f:d4:e7:ba:20:c2:
         39:76:40:5c:b4:eb:b3:d0:d8:c2:bb:96:e0:63:6b:63:99:3e:
         ef:df:5c:8d:19:92:51:1b:7a:63:fa:06:9a:db:e8:66:9c:8d:
         b2:3f:66:d8:44:ac:2a:46:99:b0:00:9f:9b:ba:8d:e4:31:57:
         90:41:1e:22:99:f8:73:80:8b:50:d6:dc:a0:9e:27:df:dc:eb:
         7e:a8:b3:21:82:09:b4:fb:d7:2d:f4:02:ae:68:97:95:ea:df:
         27:81:e7:42:c6:c7:19:4f:91:d7:90:8e:94:33:19:78:15:a6:
         72:c2:91:3b:02:43:ac:8d:0b:1d:df:55:c2:c9:4d:46:bf:08:
         7e:52:36:90:e2:a2:cf:bc:f9:76:5e:09:e5:d3:7f:87:fe:34:
         ad:e9:b6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 13:41:23 2024 by rpki-client on console-ams.rpki-client.org