Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/3V_VIVc5nTSyEj00x17OW8KbWZ4.roa
File:                     3V_VIVc5nTSyEj00x17OW8KbWZ4.roa (raw, json)
Hash identifier:          kdrAIINLebbfdWezjcyFHcBb2o0U0gB8vkBDfLaJL6E=
Subject key identifier:   DD:5F:D5:21:57:39:9D:34:B2:12:3D:34:C7:5E:CE:5B:C2:9B:59:9E
Certificate issuer:       /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial:       01857139B5C63DCC93FA0F1C5D020A4B66E9
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/3V_VIVc5nTSyEj00x17OW8KbWZ4.roa
Signing time:             Mon 02 Jan 2023 06:44:45 +0000
ROA not before:           Mon 02 Jan 2023 06:44:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212962
IP address blocks:        185.78.235.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:39:b5:c6:3d:cc:93:fa:0f:1c:5d:02:0a:4b:66:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
        Validity
            Not Before: Jan  2 06:44:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dd5fd52157399d34b2123d34c75ece5bc29b599e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:06:dc:41:60:5f:f5:0f:70:af:d8:f1:33:c1:
                    bb:b6:f0:25:c7:61:d7:9a:df:58:48:88:5c:e4:b6:
                    cb:4c:47:8f:31:56:e4:2b:f9:c4:81:e7:9f:a2:29:
                    58:ac:29:af:17:b2:9a:04:81:de:12:a9:b9:b3:04:
                    94:4b:99:da:63:1c:20:66:b0:90:d8:6f:84:65:19:
                    77:bd:6b:a1:58:ae:e3:c3:07:7d:f0:38:70:57:a4:
                    d4:f5:17:de:a0:4d:c2:5a:62:96:8d:2e:65:2a:71:
                    e4:a3:c6:e6:38:6e:00:f3:31:e4:c2:2d:ef:3d:be:
                    49:5c:27:a8:b4:4f:0a:8b:3a:b5:51:83:16:65:c8:
                    83:bd:10:6c:47:53:8d:10:d7:d2:75:a5:43:88:2a:
                    81:7b:de:9f:8a:a2:46:b8:b4:76:f8:fa:36:2e:55:
                    e0:3c:29:3a:16:98:84:01:42:13:ad:9b:6a:cd:04:
                    38:28:6d:93:81:54:bd:49:8e:c4:de:7c:e1:76:5c:
                    e8:e5:45:0a:42:96:4a:57:4c:50:28:9f:90:7d:5f:
                    ce:14:29:24:75:83:7c:86:0e:15:4c:e7:a2:e3:36:
                    ae:eb:60:60:fe:94:8e:22:e6:da:f7:4f:55:99:af:
                    60:10:60:5a:df:75:28:c4:19:89:b1:ce:22:55:12:
                    6e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5F:D5:21:57:39:9D:34:B2:12:3D:34:C7:5E:CE:5B:C2:9B:59:9E
            X509v3 Authority Key Identifier:
                keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/3V_VIVc5nTSyEj00x17OW8KbWZ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.78.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:0d:3b:37:30:13:36:e4:3f:0b:a5:1e:2c:0e:32:27:66:57:
         a5:e6:4e:fa:09:7f:8d:34:56:c0:c8:97:e4:05:80:04:9f:6b:
         ee:1b:2a:fb:c4:15:72:d1:42:a2:5b:08:cf:a1:45:dd:1f:f8:
         93:81:47:bd:50:63:83:bb:94:24:9f:2f:30:a1:16:23:b2:ce:
         ef:76:5a:05:0b:99:f1:78:3b:14:5c:ae:98:82:54:a0:a8:6d:
         fd:37:5c:a6:29:b7:a7:70:a8:49:73:f1:b8:c5:d7:65:e2:18:
         a1:1c:16:6a:7d:8d:70:bb:89:86:cf:f6:23:66:9d:04:c7:88:
         1f:07:d5:2e:c2:31:ef:ab:33:74:2a:b5:80:74:0a:d5:40:21:
         ce:12:fb:5c:56:12:2c:98:55:a9:b1:d6:53:5c:a5:9d:6c:6e:
         3e:b4:98:ed:91:f1:56:c8:25:f4:0d:d2:24:69:52:72:74:2d:
         cb:51:3c:e8:d9:00:fd:67:b5:18:a3:51:ae:63:9c:c5:67:da:
         d9:32:de:38:32:b7:ac:9d:07:79:de:cd:c1:08:19:33:99:33:
         99:c0:97:cb:ed:99:fe:e7:d8:a9:cc:55:0c:89:91:59:02:99:
         2a:5f:cb:f5:75:ae:82:a9:66:ab:98:c0:00:5a:9f:f7:b1:2b:
         91:b0:4f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:25 2024 by rpki-client on console-ams.rpki-client.org