Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/ZwbTeUFolrmr7Uw_-HmgXBMS9Uo.roa
File:                     ZwbTeUFolrmr7Uw_-HmgXBMS9Uo.roa (raw, json)
Hash identifier:          HvNxaDk8EHnswl0ahKbuzjovrhMkEyqJmKybdUyjz7g=
Subject key identifier:   67:06:D3:79:41:68:96:B9:AB:ED:4C:3F:F8:79:A0:5C:13:12:F5:4A
Certificate issuer:       /CN=9759529dd3170645d76cf6ac0659506cc649ca90
Certificate serial:       01856FA6E9605D4AADB3F9D447C88C56A58E
Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/ZwbTeUFolrmr7Uw_-HmgXBMS9Uo.roa
Signing time:             Sun 01 Jan 2023 23:24:47 +0000
ROA not before:           Sun 01 Jan 2023 23:24:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        185.169.27.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 17 Jul 2023 22:48:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:a6:e9:60:5d:4a:ad:b3:f9:d4:47:c8:8c:56:a5:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90
        Validity
            Not Before: Jan  1 23:24:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6706d379416896b9abed4c3ff879a05c1312f54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:90:b2:1d:6b:ec:db:ef:db:b1:9a:b3:cc:
                    ba:24:32:9b:37:b0:aa:e5:c4:25:86:cd:63:b0:f4:
                    94:2a:7c:65:1d:75:6a:d0:98:aa:a9:93:9f:04:09:
                    02:73:d2:02:d8:7c:cb:0b:7d:9d:93:f8:54:3a:fe:
                    92:1d:fb:1a:41:46:fe:b0:17:c9:d9:48:2a:b5:ee:
                    11:69:3d:a8:fd:dc:27:7a:39:44:13:8c:4c:9d:8e:
                    94:0a:6d:ef:c5:80:e2:41:d4:c7:d6:35:47:1e:88:
                    4e:e8:bf:1a:5d:4a:0e:06:a3:cd:ff:f7:43:41:5d:
                    ea:6c:5a:75:ab:ad:0d:b0:89:e0:a0:6f:b2:59:98:
                    21:1c:02:c8:b1:1a:68:20:db:9d:1d:e7:7f:7b:0b:
                    62:43:69:c9:6c:d0:4e:16:57:76:5a:50:ce:96:dd:
                    95:5a:f0:95:a7:d2:82:6c:8c:25:1f:99:4f:03:fa:
                    08:03:2b:31:dd:69:dd:1c:04:52:77:1c:aa:46:b7:
                    8a:3f:b5:93:24:a2:ff:43:2a:8b:d7:aa:bc:23:02:
                    cf:c2:58:8b:6c:2b:75:8d:73:e7:c1:87:2f:1c:aa:
                    8a:0c:69:e7:d9:90:5b:95:2e:79:44:f9:97:68:f1:
                    b6:e7:a9:c9:d5:4c:1e:15:6f:cd:d6:e3:8b:c8:b6:
                    87:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:06:D3:79:41:68:96:B9:AB:ED:4C:3F:F8:79:A0:5C:13:12:F5:4A
            X509v3 Authority Key Identifier:
                keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/ZwbTeUFolrmr7Uw_-HmgXBMS9Uo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:4a:42:58:5c:64:aa:fe:bd:1e:66:ce:e6:da:a3:8d:d7:97:
         25:32:ee:d2:3c:3b:56:ca:b2:94:7a:07:cf:7c:0f:d1:05:25:
         ab:71:8e:3e:ed:b0:2f:1e:8f:c5:de:e1:c1:9d:c3:21:17:93:
         ac:07:45:bb:e1:e9:03:29:eb:a0:43:00:fe:de:ed:c9:ed:52:
         01:ec:c7:13:a4:1a:98:05:ca:cb:ec:b2:b8:e5:db:88:73:91:
         31:a1:b1:ca:2e:8b:5d:47:91:88:f8:9a:4a:18:57:32:ac:88:
         b0:3d:5d:2d:a8:ec:50:23:45:6e:cd:69:2a:67:68:85:96:40:
         b3:65:15:1c:ee:d0:5a:67:43:5f:4e:74:9a:e9:33:4d:a2:8a:
         42:54:d8:52:5a:d0:71:27:ad:62:ca:89:14:c4:23:7e:7d:f4:
         65:5a:34:38:9a:c0:8d:49:b7:5e:d2:d6:ee:6b:27:66:7e:d3:
         a6:2a:64:7f:b1:f9:e5:63:bc:66:8a:5a:b7:0b:47:d0:82:7a:
         7e:99:a7:20:ba:0a:98:7e:9a:e6:25:78:80:80:fb:d6:ba:cb:
         e1:f6:28:44:8e:8f:34:a9:66:f2:50:5c:df:fc:1c:89:5a:a0:
         2a:11:65:f6:69:88:1c:e6:9c:54:e7:87:8b:fa:a1:fe:5b:04:
         8e:2b:54:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:19 2024 by rpki-client on console-ams.rpki-client.org