Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/8xYHnEukAEky3Mbtp5riTeS7xiA.roa
File:                     8xYHnEukAEky3Mbtp5riTeS7xiA.roa (raw, json)
Hash identifier:          OD80W/iLcUkmdz4ziKPRV2lW7JvrTR6CltywG7jfYpQ=
Subject key identifier:   F3:16:07:9C:4B:A4:00:49:32:DC:C6:ED:A7:9A:E2:4D:E4:BB:C6:20
Certificate issuer:       /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial:       0185727140DE004D7AB132F55A249D68F6F8
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/8xYHnEukAEky3Mbtp5riTeS7xiA.roa
Signing time:             Mon 02 Jan 2023 12:25:02 +0000
ROA not before:           Mon 02 Jan 2023 12:25:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2856
IP address blocks:        185.105.11.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:71:40:de:00:4d:7a:b1:32:f5:5a:24:9d:68:f6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
        Validity
            Not Before: Jan  2 12:25:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f316079c4ba4004932dcc6eda79ae24de4bbc620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6c:d6:8e:37:1c:98:cf:08:7c:95:31:36:a1:
                    e7:fb:1f:30:5d:41:5a:b9:58:5c:f2:cc:2f:32:b8:
                    e3:da:de:9a:ac:eb:c8:41:75:2a:77:7b:ef:e5:60:
                    fa:e8:0f:8a:64:d1:31:f3:5e:63:fc:f7:7d:73:42:
                    ae:7e:95:e2:fc:d5:70:2d:2b:bb:8d:d4:57:8e:04:
                    89:9c:7e:84:f0:4a:e3:3a:ae:98:26:22:41:08:35:
                    87:03:57:52:ab:8f:77:4c:a6:84:af:40:0c:1d:24:
                    e7:77:87:12:c5:e7:93:88:f7:61:8e:36:37:2c:3c:
                    8c:8b:d0:b5:7f:76:af:16:0d:25:91:7b:d5:d6:d6:
                    ae:93:d3:1d:15:72:5a:b9:4e:cc:92:39:9f:47:b6:
                    58:9f:95:dd:50:fe:d6:48:dc:af:5b:b9:44:4f:e7:
                    c2:5e:f0:61:51:ed:aa:87:ee:c8:8f:14:df:ed:2d:
                    f4:2f:b0:74:7d:87:b5:ea:fc:88:df:50:cb:31:df:
                    c3:9d:8b:71:60:d0:61:0a:70:32:93:9b:f1:f8:75:
                    03:d6:ec:3e:a3:dc:23:e4:06:8c:a1:9c:aa:64:99:
                    6c:82:a9:6a:ec:18:94:7e:7c:6b:b9:c7:d3:7c:46:
                    5d:88:6e:51:9c:2b:be:f3:73:41:c1:11:1e:24:2b:
                    6c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:16:07:9C:4B:A4:00:49:32:DC:C6:ED:A7:9A:E2:4D:E4:BB:C6:20
            X509v3 Authority Key Identifier:
                keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/8xYHnEukAEky3Mbtp5riTeS7xiA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.105.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:2f:de:24:66:8c:45:79:42:b3:3f:14:23:c1:c4:a5:80:7a:
         91:dd:e3:10:90:46:81:2c:09:47:d7:66:23:65:18:78:23:37:
         2b:8d:17:7c:7c:d1:71:6f:c6:c7:65:9c:ba:43:b9:93:2d:bf:
         86:31:5f:3a:c2:a8:de:d2:8d:05:c4:bc:85:ac:0c:44:ba:30:
         05:c5:5a:03:51:6f:2a:6f:25:c2:0f:ad:69:d9:10:eb:bc:16:
         97:aa:d6:fc:03:c0:98:a1:4e:29:49:55:4c:00:df:15:81:e9:
         43:c8:ea:19:68:dd:e6:76:b7:9c:06:47:51:4a:e8:4c:54:13:
         d1:ae:36:a8:27:f1:7f:68:67:b2:72:8a:4d:fc:0c:76:22:65:
         11:4a:29:5f:89:ff:9e:0c:6c:3c:7b:26:58:cb:57:2c:c6:19:
         82:98:eb:8e:ba:ec:80:90:7c:2e:93:0e:49:74:6d:0f:0a:c4:
         6e:7a:73:dd:43:f9:2a:48:b1:b5:eb:2b:61:42:0c:fe:42:d2:
         0f:2d:74:d1:e2:7d:f2:7d:e3:4b:4e:98:e1:37:9b:f6:45:9c:
         6c:1a:fb:1c:88:98:7a:b7:c3:6a:23:c6:2b:77:a3:44:2d:62:
         86:0d:6f:c4:09:c8:44:6d:1d:d5:3a:02:43:b3:0c:fd:2a:eb:
         5d:a3:06:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVycUDeAE16sTL1WiSdaPb4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxODc0YTg4N2FhMjg4ZGFiNzJjNjU4ZTkzNjk0ZWQ1ZGFm
ZDIwMjYwHhcNMjMwMTAyMTIyNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzE2MDc5YzRiYTQwMDQ5MzJkY2M2ZWRhNzlhZTI0ZGU0YmJjNjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmzWjjccmM8IfJUxNqHn+x8wXUFa
uVhc8swvMrjj2t6arOvIQXUqd3vv5WD66A+KZNEx815j/Pd9c0KufpXi/NVwLSu7
jdRXjgSJnH6E8ErjOq6YJiJBCDWHA1dSq493TKaEr0AMHSTnd4cSxeeTiPdhjjY3
LDyMi9C1f3avFg0lkXvV1tauk9MdFXJauU7MkjmfR7ZYn5XdUP7WSNyvW7lET+fC
XvBhUe2qh+7IjxTf7S30L7B0fYe16vyI31DLMd/DnYtxYNBhCnAyk5vx+HUD1uw+
o9wj5AaMoZyqZJlsgqlq7BiUfnxrucfTfEZdiG5RnCu+83NBwREeJCtsJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPMWB5xLpABJMtzG7aea4k3ku8YgMB8GA1UdIwQY
MBaAFOGHSoh6oojatyxljpNpTtXa/SAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wZmM3ZTUtYjFmNi00NzRlLTk5YTct
ZWRhMjNmMmYxN2U5LzEvOHhZSG5FdWtBRWt5M01idHA1cmlUZVM3eGlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wZmM3ZTUtYjFmNi00NzRlLTk5YTctZWRhMjNmMmYxN2U5
LzEvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWkLMA0G
CSqGSIb3DQEBCwUAA4IBAQAHL94kZoxFeUKzPxQjwcSlgHqR3eMQkEaBLAlH12Yj
ZRh4IzcrjRd8fNFxb8bHZZy6Q7mTLb+GMV86wqje0o0FxLyFrAxEujAFxVoDUW8q
byXCD61p2RDrvBaXqtb8A8CYoU4pSVVMAN8VgelDyOoZaN3mdrecBkdRSuhMVBPR
rjaoJ/F/aGeycopN/Ax2ImURSilfif+eDGw8eyZYy1csxhmCmOuOuuyAkHwukw5J
dG0PCsRuenPdQ/kqSLG16ythQgz+QtIPLXTR4n3yfeNLTpjhN5v2RZxsGvsciJh6
t8NqI8Yrd6NELWKGDW/ECchEbR3VOgJDswz9KutdowYq
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:20 2024 by rpki-client on console-ams.rpki-client.org