Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/1Cc2t7SBZWGTI7pYKVWbwVy86Uk.roa
File:                     1Cc2t7SBZWGTI7pYKVWbwVy86Uk.roa (raw, json)
Hash identifier:          paDJZdbzKMvPZz72YaDloeAnbZYJdWhS+dMh6+nLjMs=
Subject key identifier:   D4:27:36:B7:B4:81:65:61:93:23:BA:58:29:55:9B:C1:5C:BC:E9:49
Certificate issuer:       /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial:       0185868109FBF6946F825CF990B6EE8FA1CB
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/1Cc2t7SBZWGTI7pYKVWbwVy86Uk.roa
Signing time:             Fri 06 Jan 2023 09:54:41 +0000
ROA not before:           Fri 06 Jan 2023 09:54:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209360
IP address blocks:        37.61.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:86:81:09:fb:f6:94:6f:82:5c:f9:90:b6:ee:8f:a1:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
        Validity
            Not Before: Jan  6 09:54:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d42736b7b48165619323ba5829559bc15cbce949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ae:38:4d:65:b4:27:99:6c:6e:ef:bf:18:29:
                    69:9a:34:d8:09:c9:f6:4f:e6:15:28:dd:0a:8e:4c:
                    a7:ad:e9:0b:e5:6e:06:e0:65:fb:fe:a0:e5:cb:ec:
                    bd:ef:b5:a0:0c:01:23:1d:82:5d:1f:29:f9:bc:3e:
                    73:25:db:d0:3b:d8:bb:e0:77:59:07:31:c5:60:9a:
                    8d:e9:33:f3:22:11:52:59:e7:89:e8:f0:c6:5f:ca:
                    7c:d4:85:65:eb:ee:41:32:ce:cc:f5:a9:35:7a:66:
                    48:e5:d9:a5:7e:2b:83:d6:36:38:d6:b1:a5:42:40:
                    66:02:c3:11:da:eb:5c:28:12:da:e7:8d:68:89:5a:
                    33:14:f6:1e:8b:02:c9:0f:b4:b6:b1:47:c0:7d:44:
                    df:af:01:c7:2f:20:83:68:d5:26:7e:07:b0:e3:44:
                    77:21:d3:bb:cd:8c:b0:00:28:ae:c7:53:df:d3:4d:
                    e0:91:26:11:b1:95:07:7d:02:36:82:bb:91:1f:07:
                    08:c5:65:d6:be:12:ba:7f:43:a7:41:9e:07:de:b9:
                    5d:3c:3c:39:90:cd:12:49:79:e8:12:74:a1:b0:eb:
                    d2:41:8a:25:c0:22:3e:09:1f:e6:9b:31:55:4d:b0:
                    9d:a9:b2:23:0a:e0:f2:c6:5c:e1:31:23:78:c4:12:
                    aa:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:27:36:B7:B4:81:65:61:93:23:BA:58:29:55:9B:C1:5C:BC:E9:49
            X509v3 Authority Key Identifier:
                keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/1Cc2t7SBZWGTI7pYKVWbwVy86Uk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.61.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:d4:09:ad:9c:4b:43:ea:8e:62:db:e6:33:9d:f9:5b:a6:09:
         4c:99:f7:d6:b0:35:8d:5e:73:be:b4:38:d5:0d:b5:14:dc:d0:
         fb:8b:29:b7:2c:c0:13:45:c7:6e:35:0f:09:3c:b6:42:12:77:
         e1:b0:45:d2:46:35:dc:19:ae:da:06:96:15:19:e4:10:62:a4:
         a4:bb:f9:27:1e:b9:8f:23:63:8a:e0:13:a0:b1:8b:1b:be:ce:
         9e:a5:9a:b0:af:cb:d5:a7:79:34:d9:57:76:b7:24:2c:56:93:
         a1:33:e9:08:65:09:ae:dd:57:48:77:cd:36:e3:25:27:3c:06:
         3f:e6:7e:d2:ac:ab:dd:e1:5d:db:c6:ff:dd:45:29:71:6a:7b:
         7d:fa:4c:6e:d0:8e:50:81:2c:04:a1:4c:00:f1:ba:05:88:f5:
         8b:17:a5:b8:22:9c:57:39:4c:3e:b1:74:f2:29:3d:b6:0f:81:
         36:09:ae:ec:61:50:ce:9e:ed:85:00:9d:c0:b9:06:b3:c6:4d:
         6d:bd:9d:10:3e:86:96:af:60:42:e5:ea:09:82:65:e0:89:7e:
         4c:8b:eb:62:e1:54:e3:7f:c0:0c:7e:17:2c:7d:f1:d2:78:36:
         78:23:c0:88:a9:1a:35:f5:15:3e:c3:41:cd:3c:45:50:c4:2e:
         2f:7f:6d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:11 2024 by rpki-client on console-ams.rpki-client.org