Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/_J695WvLgG6oGyn_JrtPvNx5BG8.roa
File:                     _J695WvLgG6oGyn_JrtPvNx5BG8.roa (raw, json)
Hash identifier:          E/8JCn+xx1uJ/+xv7EOl9kTg351vETBsTV1htK+hPoo=
Subject key identifier:   FC:9E:BD:E5:6B:CB:80:6E:A8:1B:29:FF:26:BB:4F:BC:DC:79:04:6F
Certificate issuer:       /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Certificate serial:       018EA07BF33C586E2681C93519FC0BCC54AF
Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/_J695WvLgG6oGyn_JrtPvNx5BG8.roa
Signing time:             Tue 02 Apr 2024 20:24:21 +0000
ROA not before:           Tue 02 Apr 2024 20:24:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199760
IP address blocks:        185.115.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 05 May 2024 08:10:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:a0:7b:f3:3c:58:6e:26:81:c9:35:19:fc:0b:cc:54:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
        Validity
            Not Before: Apr  2 20:24:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fc9ebde56bcb806ea81b29ff26bb4fbcdc79046f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:31:5c:9d:f1:0c:18:dd:d0:b7:d2:73:89:6a:
                    ce:2c:e2:b0:a7:f6:bc:49:de:23:fa:bf:ac:6f:5f:
                    91:95:0a:4f:64:69:6f:d0:ad:52:d1:9c:a5:75:32:
                    b9:15:ee:66:af:f0:ea:ec:a3:84:3b:e5:42:41:97:
                    bc:57:7a:09:a1:86:80:e5:a3:2c:0c:21:cb:03:bb:
                    cf:12:c3:aa:7e:63:38:be:4c:c7:08:89:34:c9:a7:
                    e4:82:45:e8:74:2f:01:d3:60:31:97:1c:c7:0c:2a:
                    fa:20:e8:19:94:fe:90:4a:37:36:c8:40:65:f6:44:
                    6c:c4:6c:c5:3f:de:d0:aa:c3:ea:a6:75:b8:82:e5:
                    ce:d7:d8:f1:d4:76:c6:f2:07:0e:58:a6:f4:39:1c:
                    f5:d1:2a:c3:92:d9:01:ac:d3:38:2c:22:7d:2f:18:
                    aa:c2:a9:22:d9:d6:6c:ab:a1:42:ea:60:bc:00:ad:
                    59:61:7a:2f:55:64:db:d8:c6:c1:3e:2b:f3:ff:f5:
                    45:06:37:d6:02:85:b0:cb:c0:ae:db:c4:d6:e5:ec:
                    57:a7:e2:14:e0:7a:7c:43:0e:ee:bb:4d:03:22:0b:
                    bf:fc:5a:0f:f3:33:53:4d:ba:a1:5e:c8:bc:af:a6:
                    e5:36:0d:7f:10:27:4d:d9:0e:7f:13:66:dd:03:37:
                    ad:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9E:BD:E5:6B:CB:80:6E:A8:1B:29:FF:26:BB:4F:BC:DC:79:04:6F
            X509v3 Authority Key Identifier:
                keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/_J695WvLgG6oGyn_JrtPvNx5BG8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:84:28:46:ca:8d:b9:78:d6:02:44:07:0b:db:05:3c:fa:8f:
         71:ab:10:41:12:55:79:08:a6:db:84:70:04:83:23:d9:3c:76:
         c2:c3:51:51:84:c5:cc:9c:f7:61:e7:50:d8:d0:2d:bc:e7:e2:
         76:24:a2:df:17:83:7d:b0:86:71:db:58:64:22:c3:78:31:2c:
         a3:ce:27:2d:08:71:0b:26:eb:d0:a0:89:8a:e1:e5:66:a2:26:
         f7:ed:49:66:61:fc:1d:59:29:0a:53:51:33:11:a7:8e:28:dc:
         fe:30:96:c3:71:27:53:4d:f7:8b:96:61:bd:a0:4d:7c:61:77:
         9d:e5:a4:6e:57:cd:bc:b3:42:48:aa:ff:a1:f6:d9:19:cf:ed:
         20:3b:0e:a1:70:93:d9:47:4d:0e:9c:5a:39:c5:1b:1d:16:f0:
         2a:03:29:27:9a:8d:6a:2e:11:9e:e2:80:c0:f1:ce:8b:21:d4:
         2f:1f:9f:81:1f:c4:fe:a2:3f:d4:82:87:09:37:af:ae:01:6d:
         47:08:b2:a5:a7:7c:60:92:f6:93:21:e7:f3:6f:18:8e:fc:7b:
         aa:b8:96:28:f4:69:2d:24:72:b3:f1:a6:34:37:5f:e1:5e:05:
         1c:b4:a0:4b:e9:40:33:ce:6c:44:8f:a5:d2:3f:e2:71:ec:8d:
         0e:7d:f0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 10:57:49 2024 by rpki-client on console-ams.rpki-client.org