Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/RiY1bAEoKy4fN2j83DYHOex6Ju4.roa
File:                     RiY1bAEoKy4fN2j83DYHOex6Ju4.roa (raw, json)
Hash identifier:          pajpNzByQpYH314aIPJWSGuCDQj0zy4tZc2V/I9o0ks=
Subject key identifier:   46:26:35:6C:01:28:2B:2E:1F:37:68:FC:DC:36:07:39:EC:7A:26:EE
Certificate issuer:       /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial:       018A98B198095CF8465B5A44ED3944DD81E2
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/RiY1bAEoKy4fN2j83DYHOex6Ju4.roa
Signing time:             Fri 15 Sep 2023 11:54:50 +0000
ROA not before:           Fri 15 Sep 2023 11:54:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198100
IP address blocks:        185.151.146.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 14:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:98:b1:98:09:5c:f8:46:5b:5a:44:ed:39:44:dd:81:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
        Validity
            Not Before: Sep 15 11:54:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4626356c01282b2e1f3768fcdc360739ec7a26ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:97:58:47:6b:dd:63:29:9c:db:e7:92:93:34:
                    02:d5:9c:25:c2:58:19:c1:be:24:5e:6d:93:7d:16:
                    27:8a:5d:b9:c0:10:b1:5d:89:cd:45:ec:7e:c6:bd:
                    90:2a:a9:8d:52:5d:59:39:e3:0e:97:35:c2:5c:bc:
                    79:93:fe:7c:a6:ff:80:28:02:cb:c0:59:53:31:bb:
                    3f:12:77:f3:68:0c:c9:6d:0b:a4:6a:48:7f:15:b4:
                    2b:b8:74:de:6d:90:a9:59:51:58:ce:da:4f:f9:23:
                    7a:71:b3:9c:cd:dc:56:52:1f:85:85:1e:a1:23:d8:
                    e3:55:71:d2:0c:98:ae:41:26:08:6b:f8:b9:c7:29:
                    03:3f:0d:e3:81:ab:09:ef:30:9c:5c:47:64:76:0b:
                    2d:0a:49:3b:78:01:a8:31:d3:16:e4:21:0b:45:e1:
                    0a:c5:ad:d6:3a:e2:d6:c4:2e:4e:9a:51:6d:f9:11:
                    d8:9a:d9:52:bf:2f:7d:0a:f9:67:e6:70:b1:44:31:
                    51:2b:5a:0c:a0:70:b6:47:f2:e8:b1:5e:d4:90:53:
                    09:70:d2:05:0d:80:cc:d1:58:6d:6c:59:df:d7:9e:
                    73:e7:ff:ee:10:56:6f:7a:80:77:66:93:87:48:d2:
                    78:91:f6:5e:11:5e:ee:da:5f:94:21:b2:69:c4:21:
                    a2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:26:35:6C:01:28:2B:2E:1F:37:68:FC:DC:36:07:39:EC:7A:26:EE
            X509v3 Authority Key Identifier:
                keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/RiY1bAEoKy4fN2j83DYHOex6Ju4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.151.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:18:cb:6f:be:5f:b9:af:71:1d:c4:d7:44:56:e4:4d:96:26:
         4e:69:0b:fb:b9:99:12:7c:00:5d:a1:5c:03:d9:8a:80:a1:04:
         9c:90:ea:c0:89:22:42:e5:fa:cf:01:20:a2:11:b9:f7:16:00:
         45:8a:cb:2b:1c:84:c4:3d:08:78:49:e2:32:d6:c5:d6:ae:4d:
         19:f4:78:37:cf:fc:84:c2:b8:ab:4f:6e:0e:20:7f:3b:27:34:
         6e:1d:5a:33:ee:81:02:4e:b4:a1:1b:71:b5:82:ee:05:74:a3:
         cc:24:18:cf:ae:b0:79:70:32:30:28:56:7b:cd:d4:40:fc:84:
         10:0e:9e:a0:7e:57:3e:9a:a1:ff:f4:a9:12:c7:fc:19:24:2a:
         30:c2:61:1b:e8:b0:62:38:7f:f7:92:65:94:8e:3f:89:fd:6d:
         9a:00:ee:99:2d:7b:ab:59:e5:f0:3c:d3:b6:e0:94:c9:e4:25:
         92:3d:c2:9d:c1:fc:4b:9e:a4:a3:98:a4:01:ef:d1:c9:a3:bf:
         f7:60:42:c8:b5:f1:96:53:95:05:76:09:4b:80:c6:d7:35:1d:
         2d:1f:80:25:18:cd:e1:ea:8f:9c:c0:67:04:59:17:9b:88:ca:
         08:34:68:64:d6:cf:60:81:7b:65:b7:38:e9:29:8c:c2:6b:b5:
         ef:3b:d7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:45 2024 by rpki-client on console-fra.rpki-client.org