Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/F8eWJMoyfg2ScpZPUiwNi-O0Edw.roa
File:                     F8eWJMoyfg2ScpZPUiwNi-O0Edw.roa (raw, json)
Hash identifier:          wyPp4Je9tTQyiOV9HR4spEHWplYWjSMO6b/wKxPPJbs=
Subject key identifier:   17:C7:96:24:CA:32:7E:0D:92:72:96:4F:52:2C:0D:8B:E3:B4:11:DC
Certificate issuer:       /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial:       018AFC4C1364A1B18A38C1AE020D0C0E0B52
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/F8eWJMoyfg2ScpZPUiwNi-O0Edw.roa
Signing time:             Wed 04 Oct 2023 20:05:58 +0000
ROA not before:           Wed 04 Oct 2023 20:05:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200096
IP address blocks:        185.182.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:fc:4c:13:64:a1:b1:8a:38:c1:ae:02:0d:0c:0e:0b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
        Validity
            Not Before: Oct  4 20:05:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=17c79624ca327e0d9272964f522c0d8be3b411dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:57:9e:2d:7f:ab:be:60:73:3e:d9:1e:a6:19:
                    94:13:0c:26:8e:54:11:c1:7a:17:b0:0c:29:1b:5d:
                    2e:70:de:84:af:bd:46:59:b8:97:70:4f:41:a5:fb:
                    c3:12:32:96:f7:0f:ff:84:bd:05:f8:45:21:81:e7:
                    27:65:64:16:db:fc:3e:32:2e:70:8f:16:5c:99:a0:
                    a4:25:f1:93:46:1c:22:62:e4:ca:ea:2c:27:82:3c:
                    c3:4b:86:05:05:45:7d:e6:a8:41:01:45:3e:3f:40:
                    b9:0d:5a:9b:99:11:c3:1e:42:cd:b6:35:44:19:9c:
                    dc:58:b8:c8:13:2d:4a:16:b8:8b:42:de:54:56:de:
                    61:90:49:5e:b7:f0:e4:55:12:f7:34:60:1c:3f:41:
                    6c:15:7d:5a:66:07:5b:4b:2b:bf:b8:fa:af:59:fc:
                    39:60:4c:54:8b:96:12:4c:82:87:96:b3:26:cd:ab:
                    aa:76:e9:07:69:28:71:2b:75:35:e6:2e:9c:5f:94:
                    be:3e:39:52:fb:e4:64:8b:95:b5:e2:f8:24:07:a4:
                    30:cd:2f:4d:fb:0e:3f:68:2c:8e:71:e1:1b:46:39:
                    3d:1a:d6:2c:63:26:a0:a8:75:1c:c1:59:e6:f9:8d:
                    60:12:3c:6a:3c:4e:25:a5:d4:d8:aa:03:2e:1a:64:
                    84:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C7:96:24:CA:32:7E:0D:92:72:96:4F:52:2C:0D:8B:E3:B4:11:DC
            X509v3 Authority Key Identifier:
                keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/F8eWJMoyfg2ScpZPUiwNi-O0Edw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:cb:4c:77:50:6e:a7:d5:e2:15:11:8b:28:ff:5d:47:cb:39:
         b8:d6:6e:47:16:36:90:9c:54:4c:89:f2:6f:84:1a:71:ec:55:
         d6:55:17:72:79:de:61:ea:88:e6:45:f3:7d:dd:0f:72:c1:ae:
         f3:ff:60:02:6b:01:07:27:d8:bb:e5:b1:ad:61:4f:6f:bb:ae:
         1d:e7:db:d6:4c:6a:71:5a:d3:f1:a8:00:b7:13:91:ca:7a:34:
         99:7d:30:5c:33:54:7f:73:59:fa:7f:e9:b0:89:9c:e5:d7:8e:
         07:70:8e:cc:9a:4a:ce:4d:f6:96:cb:94:cc:74:aa:85:df:b3:
         53:54:f1:aa:9a:4c:05:d3:a5:7e:94:e8:11:95:91:b0:87:c8:
         06:11:4e:1c:f9:18:07:2f:23:e3:f8:27:f5:a4:8d:a7:f6:68:
         03:8e:e1:02:54:04:82:b0:23:7a:54:a0:3c:e2:d0:c4:e6:33:
         a2:24:71:e5:13:bf:8b:f2:a0:fc:6d:d5:7c:0b:94:42:03:fc:
         2d:ac:14:30:e4:42:6c:eb:16:71:d1:31:4b:ba:ad:f9:de:7c:
         31:b4:93:0a:e3:69:ca:2f:4b:a6:ca:94:df:ae:90:22:37:78:
         4b:db:59:1d:5c:a6:11:7f:77:cc:75:b4:bd:b2:40:78:6c:ca:
         76:63:db:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:16 2024 by rpki-client on console-fra.rpki-client.org