Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OELNGWn55XgHg5TnfVXJ-byrbmc.roa
File:                     OELNGWn55XgHg5TnfVXJ-byrbmc.roa (raw, json)
Hash identifier:          SPDGkRB2hUDIzzNImHbT2rr6hPNh6+tnx9Tcy9jOdjM=
Subject key identifier:   38:42:CD:19:69:F9:E5:78:07:83:94:E7:7D:55:C9:F9:BC:AB:6E:67
Certificate issuer:       /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial:       018571A7AC59411E9ECB054B7E757920C822
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OELNGWn55XgHg5TnfVXJ-byrbmc.roa
Signing time:             Mon 02 Jan 2023 08:44:52 +0000
ROA not before:           Mon 02 Jan 2023 08:44:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206143
IP address blocks:        185.195.63.0/24 maxlen: 24
                          185.195.62.0/24 maxlen: 24
                          185.195.61.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 11 May 2023 14:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:a7:ac:59:41:1e:9e:cb:05:4b:7e:75:79:20:c8:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
        Validity
            Not Before: Jan  2 08:44:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3842cd1969f9e578078394e77d55c9f9bcab6e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4d:df:25:02:33:ee:78:e7:d7:c7:f4:a6:d6:
                    f4:95:15:b6:b4:79:c3:0e:a3:4e:a7:f3:b7:d7:91:
                    ec:5a:76:62:66:2c:7c:01:87:28:50:ec:1a:e0:b9:
                    a4:8f:e7:9f:f9:51:7c:6c:a4:73:e4:41:7c:7c:62:
                    6e:ac:1c:cb:13:36:29:54:b1:13:14:bd:48:b7:f9:
                    1e:f6:52:6d:d9:90:01:51:94:ae:79:38:0a:6e:f4:
                    dc:16:8e:81:0c:29:e6:f3:a0:2f:fc:0d:bb:6d:ff:
                    2f:3b:17:de:92:b4:23:89:0b:6a:52:a3:e9:95:24:
                    54:64:43:18:e3:c5:f7:27:b9:80:76:a6:b7:dd:63:
                    3f:25:54:c9:2a:e8:13:e4:67:0d:32:4b:d5:be:c4:
                    a5:64:36:b6:5f:13:28:1f:33:b4:9b:6e:70:39:ed:
                    53:dd:8e:2e:61:c4:f3:a2:3c:17:5f:dc:66:79:6d:
                    6d:ae:b8:46:74:ec:e8:7d:0a:b1:f2:f4:c7:23:1a:
                    8a:c9:55:c0:c9:1f:c5:a4:14:e2:1c:f5:b5:dc:7e:
                    eb:c7:a0:4e:8a:54:6e:ec:06:89:64:39:58:16:1b:
                    6b:66:9c:55:bd:d8:4a:dd:ee:08:f9:18:1c:2c:e2:
                    6b:c8:f7:90:c0:3d:79:25:f6:37:15:9f:ee:8c:a7:
                    48:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:42:CD:19:69:F9:E5:78:07:83:94:E7:7D:55:C9:F9:BC:AB:6E:67
            X509v3 Authority Key Identifier:
                keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OELNGWn55XgHg5TnfVXJ-byrbmc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.195.61.0-185.195.63.255

    Signature Algorithm: sha256WithRSAEncryption
         2d:a9:d9:44:9d:54:7a:4e:31:79:3d:a4:77:28:14:57:38:e5:
         26:6a:45:6b:3c:fe:6b:28:d0:62:77:ab:91:2c:c2:4f:4a:32:
         0c:d6:e3:38:53:b3:48:81:2d:46:87:d2:9b:da:2f:12:9b:2b:
         b3:86:e4:cc:65:ee:90:2e:cc:bf:92:b2:77:23:d2:28:12:cc:
         16:94:ae:1a:c5:f8:dc:f3:aa:4f:f7:b9:09:12:ed:9c:26:e8:
         48:4d:2f:ee:1c:96:aa:de:5c:28:ba:fe:92:f9:1c:54:bd:b7:
         1a:f7:5f:de:5a:62:7d:be:ed:d3:72:7f:7e:33:72:7c:e2:99:
         9f:10:df:dc:99:c9:a0:d9:23:e9:d7:9a:b8:23:63:50:98:97:
         4c:d5:bd:65:18:35:a0:23:f3:7e:ef:73:a1:23:1c:be:15:ed:
         43:77:16:71:16:9c:b9:4a:01:b0:b3:68:1a:46:fa:4a:ee:a0:
         0d:ec:ff:e5:ea:2b:df:a0:25:87:fd:88:c3:db:08:e1:8b:88:
         93:fb:6f:67:d3:36:d2:bc:26:bc:13:dc:45:e3:11:b5:e3:b8:
         e3:07:1e:1e:93:72:62:9b:98:f7:6d:3f:fa:8b:00:6b:a6:d1:
         ab:f9:09:44:11:d5:bf:de:5a:a0:2b:66:50:7c:35:45:01:15:
         7d:68:fc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:43 2024 by rpki-client on console-fra.rpki-client.org