Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/MBX3YOmYRmgjhDZGqpi0myYTBzg.roa
File:                     MBX3YOmYRmgjhDZGqpi0myYTBzg.roa (raw, json)
Hash identifier:          ixt87GQRw4P95UmZW4ROEz6tvj7S5moAG9lhFfyozA0=
Subject key identifier:   30:15:F7:60:E9:98:46:68:23:84:36:46:AA:98:B4:9B:26:13:07:38
Certificate issuer:       /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial:       018A6A367357C1119E767A048192BD7D98EF
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/MBX3YOmYRmgjhDZGqpi0myYTBzg.roa
Signing time:             Wed 06 Sep 2023 11:17:47 +0000
ROA not before:           Wed 06 Sep 2023 11:17:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206747
IP address blocks:        213.248.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 14:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:6a:36:73:57:c1:11:9e:76:7a:04:81:92:bd:7d:98:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
        Validity
            Not Before: Sep  6 11:17:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3015f760e998466823843646aa98b49b26130738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ff:f4:28:3c:8a:c9:54:eb:78:f7:8b:b1:30:
                    9f:43:9b:82:5f:b5:81:36:f9:ba:13:db:68:fe:d5:
                    dd:51:21:f0:3d:68:82:e6:e6:07:2e:fc:62:05:ec:
                    7f:79:95:89:e0:d1:5d:db:2f:5d:49:53:cf:c5:f9:
                    3b:00:c7:a9:fb:23:c8:2f:55:27:ad:da:69:d4:87:
                    ec:c4:b1:05:17:59:b6:e3:b0:75:2f:88:a6:59:98:
                    4a:f8:c9:33:55:6e:79:aa:47:11:5b:4d:d3:82:97:
                    98:33:9b:1b:07:ee:89:c8:c5:6e:bb:96:43:ca:8b:
                    5d:05:b5:df:85:00:57:3f:59:ae:07:45:63:28:45:
                    1e:42:e6:3f:13:22:91:5d:e9:d9:7b:4e:e0:61:85:
                    b1:84:f7:0b:24:70:6d:9b:a0:09:28:c9:9a:aa:18:
                    d3:fa:39:1d:5b:91:45:80:60:dc:4f:d3:ab:52:50:
                    23:4b:e4:ca:ea:36:ec:fe:ac:30:f5:6c:40:7e:8d:
                    84:ab:0c:16:26:34:27:6f:f5:40:05:fa:e6:f2:97:
                    76:36:9b:2b:41:84:2c:8f:cb:ca:97:a0:63:34:65:
                    d8:98:a6:24:5e:ea:d6:ce:15:53:66:62:ae:5d:9d:
                    cb:60:76:5e:46:8f:cd:dd:a5:59:96:12:67:43:52:
                    60:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:15:F7:60:E9:98:46:68:23:84:36:46:AA:98:B4:9B:26:13:07:38
            X509v3 Authority Key Identifier:
                keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/MBX3YOmYRmgjhDZGqpi0myYTBzg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.248.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:18:e2:1b:43:26:90:00:ee:57:0e:12:dd:05:c6:04:87:9a:
         7e:5e:f1:d6:3d:aa:6a:0d:e8:fe:cf:d2:0c:0f:9e:41:70:2f:
         bd:68:5b:a8:85:8b:3f:98:7a:99:b8:ef:e7:28:55:64:09:64:
         7e:51:a4:c3:96:5f:2a:e0:b0:8a:d3:c0:3f:95:88:fe:11:3a:
         2c:c9:32:e9:25:44:1d:8c:f6:01:17:80:23:89:2c:44:5b:ee:
         f8:6d:09:2a:63:4c:55:87:05:e8:b3:84:67:aa:02:bd:94:6b:
         6c:7b:02:e5:ef:de:94:e3:12:8b:74:fb:b5:cd:38:7e:97:f9:
         f9:a0:2b:51:77:7a:c6:5b:e7:28:05:f3:88:fa:bf:90:1e:f5:
         f7:c1:7f:3c:7e:a7:79:83:29:ac:7d:2c:b7:c6:3e:2e:c2:56:
         1f:1c:cc:e9:69:0d:09:54:66:41:d2:6f:5d:ea:38:53:fa:64:
         5a:c6:e3:9f:0e:f8:76:19:d7:85:8b:60:fa:0f:22:c6:6a:68:
         00:90:69:8d:2a:7d:41:cb:b0:0c:7d:6c:a1:a8:00:b6:b4:87:
         92:56:5b:66:74:8e:f2:6b:12:4a:c2:d5:db:2f:e2:8d:11:82:
         3b:68:ea:d8:d0:10:d9:43:cb:49:02:fb:4c:48:c7:ae:9a:e8:
         39:b6:a1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:02 2024 by rpki-client on console-ams.rpki-client.org