Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/AUar6QAL4i0DErbQqkeZHQZcIBU.roa
File:                     AUar6QAL4i0DErbQqkeZHQZcIBU.roa (raw, json)
Hash identifier:          CZu4ZmN89a7HueQpTqaD8v4dsrbj6JRgTi3xTa0TWEU=
Subject key identifier:   01:46:AB:E9:00:0B:E2:2D:03:12:B6:D0:AA:47:99:1D:06:5C:20:15
Certificate issuer:       /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial:       01856CAF03B7C226BA230B8ADAB8ECD5343B
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/AUar6QAL4i0DErbQqkeZHQZcIBU.roa
Signing time:             Sun 01 Jan 2023 09:34:47 +0000
ROA not before:           Sun 01 Jan 2023 09:34:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1299
IP address blocks:        185.104.12.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 12 Jul 2023 15:28:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:af:03:b7:c2:26:ba:23:0b:8a:da:b8:ec:d5:34:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
        Validity
            Not Before: Jan  1 09:34:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0146abe9000be22d0312b6d0aa47991d065c2015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5f:63:0c:97:1e:f3:7f:68:f5:d3:37:97:68:
                    61:c3:66:f7:98:75:5a:14:ca:d6:ae:73:8e:85:26:
                    7e:5d:ca:4d:63:f5:ef:07:77:75:2e:e4:0f:0a:6c:
                    77:8d:31:87:0c:14:d2:1e:97:16:6f:29:0a:96:3c:
                    83:1a:12:c7:a1:ce:12:7f:c7:de:54:44:0b:33:fa:
                    ba:30:d5:f2:df:07:60:46:6f:4b:21:5e:01:12:bc:
                    fa:a9:26:59:ed:cd:47:03:5e:69:fa:ce:3b:5e:74:
                    35:0f:3b:07:88:68:e6:8b:4e:b3:ad:f6:fe:c3:ce:
                    ce:63:61:1c:c3:d8:e2:ef:4c:84:2f:a6:87:99:2f:
                    3e:ac:e7:c0:04:db:9a:cf:32:76:51:c5:cb:68:d5:
                    d5:8a:6d:1a:fd:a5:25:9c:8e:7f:90:9f:e5:c0:1e:
                    5c:89:7c:99:3f:fc:4e:79:4f:2d:5f:94:e6:49:31:
                    f7:ae:14:75:fc:72:5b:91:e8:2b:fe:6c:60:c1:8a:
                    a2:6e:bc:c7:e8:1e:9b:e1:3e:84:c7:5a:3e:0b:13:
                    54:46:1c:9f:54:61:7b:6a:12:fb:f8:1b:d8:66:03:
                    ee:dd:e5:2f:2b:7d:8d:9c:76:bf:84:08:ad:3c:93:
                    d1:0b:f3:55:a3:b6:a2:2c:68:aa:51:9f:57:e2:d2:
                    77:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:46:AB:E9:00:0B:E2:2D:03:12:B6:D0:AA:47:99:1D:06:5C:20:15
            X509v3 Authority Key Identifier:
                keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/AUar6QAL4i0DErbQqkeZHQZcIBU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.104.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:d0:5a:e0:ed:0c:ec:aa:b8:47:e4:8e:12:ac:5a:d7:83:15:
         25:b3:d2:03:48:5e:ec:6c:7b:ab:a2:ed:c8:6e:19:64:92:5a:
         8e:23:84:ff:d4:e0:ce:e5:0d:bb:81:00:00:c0:9b:a9:0f:c0:
         d1:64:b9:05:6e:2c:89:77:06:a1:b4:f8:24:d0:31:b1:24:ab:
         45:37:bd:74:88:f6:3a:a2:a5:0a:76:e2:7c:58:e0:7b:c4:61:
         80:d5:2d:2b:ea:5d:f7:58:67:e4:7e:e6:04:7d:2a:91:c5:d7:
         a3:35:76:6a:ba:a0:a7:63:27:50:87:42:78:61:b9:2f:66:23:
         bf:a7:67:c6:f4:07:ff:e9:b2:22:40:4f:c7:89:39:98:eb:b9:
         fd:6a:5c:ed:db:54:b7:01:29:73:6f:c2:6d:dd:f9:38:85:b7:
         e9:7e:f7:12:c5:a1:a1:10:fe:7f:93:a9:45:f5:78:2b:3f:87:
         e2:c2:77:f6:4e:90:99:53:b5:59:18:b2:38:a0:f0:dc:1c:47:
         18:60:51:a5:94:e7:ac:0f:9b:5a:cb:f0:4a:43:3f:eb:93:2f:
         63:0f:5e:e0:54:91:ed:f7:34:60:6d:5a:96:4b:5e:64:02:57:
         94:65:1b:9c:54:07:e8:4b:54:0f:0a:f3:af:26:67:c6:e6:10:
         72:42:b6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:23 2024 by rpki-client on console-ams.rpki-client.org