Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/HiSiDMPRY6jqjCzu6Axphh9Vu_s.roa
File:                     HiSiDMPRY6jqjCzu6Axphh9Vu_s.roa (raw, json)
Hash identifier:          APgdHF7RSRB+RRnoL4wdGeX6MlrYoT5AbO/ffW/uGdE=
Subject key identifier:   1E:24:A2:0C:C3:D1:63:A8:EA:8C:2C:EE:E8:0C:69:86:1F:55:BB:FB
Certificate issuer:       /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Certificate serial:       018C20A435F766735FDF10ABF0470706BEEE
Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/HiSiDMPRY6jqjCzu6Axphh9Vu_s.roa
Signing time:             Thu 30 Nov 2023 14:31:21 +0000
ROA not before:           Thu 30 Nov 2023 14:31:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     396982
IP address blocks:        185.51.228.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:20:a4:35:f7:66:73:5f:df:10:ab:f0:47:07:06:be:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
        Validity
            Not Before: Nov 30 14:31:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1e24a20cc3d163a8ea8c2ceee80c69861f55bbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:68:bb:e9:18:73:d8:28:de:e4:91:7e:46:c9:
                    47:70:23:cd:91:7a:be:f0:2b:b8:76:56:98:b2:6a:
                    7e:63:cc:69:b8:f3:7a:e1:fe:92:35:35:38:36:7b:
                    18:d2:06:4b:7d:c4:55:dd:c5:bc:08:c3:38:71:25:
                    8c:5c:ab:b2:d6:34:bb:35:b9:38:c9:a2:47:fc:a0:
                    11:92:4e:8c:03:b9:0d:89:ef:3e:58:c7:e0:bf:ca:
                    31:0c:d9:b8:6f:7c:4b:dd:85:0a:fe:68:3d:e0:54:
                    e7:68:3c:84:f5:10:d1:12:44:1e:cf:4e:8d:13:57:
                    cf:85:cc:3c:67:ce:5b:26:57:b8:4c:92:ca:15:01:
                    01:70:40:c9:0a:95:08:1e:b0:dc:bd:3f:5f:4c:e8:
                    84:81:c5:6a:3e:d1:1d:df:5e:d2:97:72:ce:66:a0:
                    3d:3f:50:3f:78:6f:17:e0:11:b3:47:e8:e8:29:c5:
                    ae:44:f8:90:e9:f8:3c:7b:87:f3:16:66:2b:2c:a3:
                    f6:48:cb:ba:c7:6d:0b:f4:9e:c1:53:2c:f1:97:3d:
                    24:01:6f:12:07:be:23:80:c3:f7:20:34:37:09:08:
                    f6:32:c4:6b:fb:a6:77:dd:cc:fa:aa:7c:56:67:07:
                    28:bb:b9:bb:b3:fb:53:72:be:62:0c:18:8b:b9:56:
                    a6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:24:A2:0C:C3:D1:63:A8:EA:8C:2C:EE:E8:0C:69:86:1F:55:BB:FB
            X509v3 Authority Key Identifier:
                keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/HiSiDMPRY6jqjCzu6Axphh9Vu_s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.51.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:5c:b1:8e:6a:c6:bb:ac:40:8f:69:c9:47:21:c0:98:41:44:
         8c:8c:c5:06:47:45:9f:f5:d6:56:71:f0:9b:ab:a9:ff:24:bd:
         d0:d2:33:ce:5c:ba:d5:e5:e1:95:65:65:b3:4c:17:36:78:f4:
         83:b4:ab:ad:b9:dd:f3:e1:75:55:26:f3:87:24:b4:4b:1e:20:
         fb:9a:69:63:24:b5:e9:9b:c3:97:e2:6c:c7:5c:c9:b8:f8:5e:
         d8:b3:58:e5:a2:19:93:03:ba:40:a0:b5:8d:36:cd:c0:01:81:
         c3:48:2c:13:d6:a1:dc:98:c2:df:cf:7f:69:8e:90:75:10:1f:
         14:23:e7:04:d8:d3:94:ad:0e:c7:96:17:3d:49:e6:1b:c8:7b:
         b8:fb:18:a1:12:8b:31:f2:03:01:c2:97:a3:4d:e9:84:0c:bf:
         11:eb:a5:50:e6:60:10:81:4a:f2:3d:07:23:31:82:85:3f:9b:
         cf:ea:61:d8:31:0f:be:47:96:87:e8:11:8a:11:dd:ae:68:55:
         b9:b7:1b:f1:4e:30:e5:bd:2f:58:1d:d8:a8:1f:c5:2f:61:19:
         fa:ae:6d:73:18:43:ab:c0:8c:12:8a:05:6c:3e:fd:e8:b6:6b:
         de:d7:92:d4:ba:c2:b8:89:32:54:29:ca:b7:f1:7e:8b:97:1c:
         9a:6f:5b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:46 2024 by rpki-client on console-fra.rpki-client.org