Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/6yOOmEk2kLR3Wkg_ELI30SjBqC4.roa
File:                     6yOOmEk2kLR3Wkg_ELI30SjBqC4.roa (raw, json)
Hash identifier:          BPQY8fZpuf7HbANEY4fv0hQi8w20XdKULJQlyzpYN1A=
Subject key identifier:   EB:23:8E:98:49:36:90:B4:77:5A:48:3F:10:B2:37:D1:28:C1:A8:2E
Certificate issuer:       /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial:       0189B6B67790BDA3105C4466A1DFFE93C5BD
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/6yOOmEk2kLR3Wkg_ELI30SjBqC4.roa
Signing time:             Wed 02 Aug 2023 14:45:58 +0000
ROA not before:           Wed 02 Aug 2023 14:45:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51030
IP address blocks:        185.188.142.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Aug 2023 14:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:b6:b6:77:90:bd:a3:10:5c:44:66:a1:df:fe:93:c5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
        Validity
            Not Before: Aug  2 14:45:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb238e98493690b4775a483f10b237d128c1a82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dd:a7:3a:8a:d3:a3:35:42:82:2b:8f:75:99:
                    ba:cd:ee:c8:00:c2:10:89:c8:46:cd:19:f3:5f:df:
                    e4:89:10:bf:0f:c0:5a:6e:d9:9e:41:4a:59:40:a1:
                    b2:c0:cd:30:6d:c3:61:23:b5:00:00:f3:4e:05:64:
                    1d:e4:12:ea:ef:6f:f7:6a:39:a3:41:5c:65:9f:b4:
                    15:b3:1f:ba:c7:a3:49:1e:e5:f8:70:ad:83:81:c4:
                    17:59:60:ee:8c:23:ba:18:89:64:92:03:ed:f6:38:
                    e9:9c:ec:8b:91:86:fa:b5:31:5c:3d:76:52:4a:de:
                    d5:d7:c0:40:4d:36:df:f0:db:f3:67:ca:94:c4:d6:
                    c9:18:3d:ce:9c:f3:44:a9:bc:f3:7a:e2:d5:06:c2:
                    f6:0b:03:e8:ea:1c:bb:15:e0:50:e3:07:ad:3a:34:
                    41:18:bd:7d:12:02:60:e1:d4:da:f8:e2:7d:44:f8:
                    4b:f4:4e:59:79:5f:c3:f5:8c:0c:a0:5d:56:24:a8:
                    59:64:bd:01:94:1a:7a:a2:cd:1e:4b:f7:29:9e:3f:
                    79:b8:6c:e3:05:69:fb:5b:55:cf:25:ee:a8:0a:53:
                    4c:aa:d9:13:35:32:c4:7d:59:2a:d7:4d:ef:57:41:
                    80:cf:fb:dc:cd:25:a5:c8:3e:87:60:d3:ed:2f:cf:
                    cf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:23:8E:98:49:36:90:B4:77:5A:48:3F:10:B2:37:D1:28:C1:A8:2E
            X509v3 Authority Key Identifier:
                keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/6yOOmEk2kLR3Wkg_ELI30SjBqC4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.188.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:58:ac:5b:5a:cc:51:c1:65:67:5c:c9:54:ae:bb:6a:93:6b:
         1a:7f:c8:64:d8:69:87:7d:12:43:a1:1a:60:49:46:6e:b4:c1:
         44:8a:0a:50:bd:53:e0:ad:6a:32:5e:2b:82:72:b3:5f:70:e8:
         60:33:cd:c3:6e:87:37:c4:86:ff:ba:3c:d8:4f:64:70:cc:18:
         1f:f8:4a:a6:fc:4a:b4:46:a9:4a:30:d1:6e:e2:a9:89:83:1b:
         f2:8c:b5:84:27:00:95:6a:0a:2e:db:c5:d6:58:ee:c8:0b:44:
         e4:03:f4:6c:6d:7f:4f:39:a0:d9:6e:b2:40:b5:d3:8e:6c:b9:
         5a:c1:44:79:10:c0:48:bc:84:13:5a:2b:5e:38:16:e5:a9:7f:
         9d:48:f2:72:b0:9f:00:4f:be:5b:af:11:6a:e7:51:6a:07:2a:
         77:89:62:7f:e4:12:cc:a3:56:96:1f:48:9c:c5:5d:33:43:fd:
         79:83:dd:18:d0:5e:d6:98:a3:20:86:0a:09:c2:c9:07:93:97:
         87:4e:2b:97:56:ad:49:85:af:43:9f:c7:6b:80:f7:62:73:3a:
         c5:00:2a:82:b7:4a:6a:5a:19:0b:35:30:e6:e1:44:90:95:5a:
         6c:32:81:fc:d2:7b:74:ed:ef:9d:1e:bb:2d:bf:3c:d9:2f:f8:
         6d:8e:f6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:54 2024 by rpki-client on console-fra.rpki-client.org