Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/_aExoXTNLUY2F101t5UIuUlpVW4.roa
File:                     _aExoXTNLUY2F101t5UIuUlpVW4.roa (raw, json)
Hash identifier:          M/VWXk4GymRaPQQvIUcVE8yMKbgNqoQDSYk9odNejGI=
Subject key identifier:   FD:A1:31:A1:74:CD:2D:46:36:17:5D:35:B7:95:08:B9:49:69:55:6E
Certificate issuer:       /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial:       018DF3D572465885B788E979387E4DEB52F8
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/_aExoXTNLUY2F101t5UIuUlpVW4.roa
Signing time:             Thu 29 Feb 2024 07:47:48 +0000
ROA not before:           Thu 29 Feb 2024 07:47:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        185.104.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Mar 2024 13:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:f3:d5:72:46:58:85:b7:88:e9:79:38:7e:4d:eb:52:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
        Validity
            Not Before: Feb 29 07:47:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fda131a174cd2d4636175d35b79508b94969556e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9e:43:06:8a:60:0c:b0:f5:5e:75:0d:fe:d7:
                    cd:6e:da:61:60:30:80:08:4d:ce:d6:3e:f3:ab:38:
                    81:74:f9:25:6b:40:70:e3:0b:fd:fc:89:83:4f:41:
                    1e:87:e8:63:5b:27:f1:29:ae:e4:7f:b9:30:76:ca:
                    b4:44:dd:21:b1:2c:0a:9c:49:29:24:88:3c:33:23:
                    f7:c5:5e:e8:5c:f2:59:b0:bf:5a:08:aa:ad:f5:a0:
                    e0:f2:3d:e8:87:9b:f2:b4:88:95:69:7e:65:9c:06:
                    ae:5d:51:4b:29:35:48:a8:99:95:04:94:a9:69:98:
                    41:61:4b:19:05:b1:50:28:06:a2:52:c2:bd:dc:6b:
                    c1:3a:10:57:79:87:e8:00:4b:88:7b:28:49:c5:18:
                    f5:e6:fe:59:df:01:49:61:76:52:66:73:d9:24:5a:
                    f7:d2:1f:65:89:86:f1:77:3c:c3:fe:92:a1:d5:6e:
                    1f:78:5f:2e:d9:6e:bc:e9:09:6f:83:44:99:63:ca:
                    62:15:99:ca:63:2e:ec:79:5f:a9:be:c8:56:cd:28:
                    2c:a9:d5:62:ab:69:67:81:0a:b9:d2:92:f5:c4:f8:
                    ee:b3:c5:d3:6b:cc:9f:42:04:6c:0f:f4:12:c8:16:
                    f6:1c:f3:5d:93:4d:e1:b5:3d:11:a9:5f:0b:dc:95:
                    fd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A1:31:A1:74:CD:2D:46:36:17:5D:35:B7:95:08:B9:49:69:55:6E
            X509v3 Authority Key Identifier:
                keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/_aExoXTNLUY2F101t5UIuUlpVW4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.104.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:68:9c:09:0d:e4:4b:12:55:98:b0:eb:01:fe:a8:b2:62:ce:
         00:5c:e0:16:4d:b9:9e:cd:ee:06:9e:09:a8:61:38:14:c7:e7:
         14:93:d9:f1:cb:2b:12:2e:80:3d:36:98:db:69:01:28:1e:5a:
         a2:36:d4:4d:90:65:88:e4:06:a1:a6:af:1a:67:43:56:30:34:
         8e:39:8d:cd:a7:9c:fb:68:99:99:bd:cd:33:c9:1a:e4:cd:49:
         85:dc:7f:5f:63:0f:4d:2f:9c:d5:de:db:b9:a5:3f:e4:cf:79:
         d4:a4:6b:e8:99:ce:f4:67:8e:e7:24:47:83:bf:47:15:29:f9:
         bf:96:6f:b4:4a:69:80:8a:77:e5:6b:3a:87:b3:6b:8f:9d:ac:
         96:35:5c:fa:e3:8a:ef:3b:1b:a1:02:d5:7e:ce:34:58:86:ef:
         f2:69:12:22:70:0b:13:3d:6b:26:24:7c:0b:72:30:1f:39:e2:
         f9:d6:61:17:ad:ef:64:1e:ec:7c:dc:8a:76:84:04:f1:32:76:
         56:f2:26:89:cf:97:1b:16:66:ab:81:f1:52:35:04:2f:bb:3a:
         3c:24:59:c0:47:78:df:dc:3d:60:0b:3b:d3:bb:c4:f8:93:cd:
         20:49:bb:51:e4:9c:94:76:af:66:ea:4a:47:7e:2e:43:35:14:
         02:e0:88:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 16:01:12 2024 by rpki-client on console-fra.rpki-client.org