Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/54as-eHw1Jwr8Yt7sQV5WrGCcaY.roa
File:                     54as-eHw1Jwr8Yt7sQV5WrGCcaY.roa (raw, json)
Hash identifier:          EQOuE2vieT6Wm32dIXzhjEujauna7U8i3xlv6zEOti0=
Subject key identifier:   E7:86:AC:F9:E1:F0:D4:9C:2B:F1:8B:7B:B1:05:79:5A:B1:82:71:A6
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       018C68299A9AA2C1B66FDE32A435ADDD2565
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/54as-eHw1Jwr8Yt7sQV5WrGCcaY.roa
Signing time:             Thu 14 Dec 2023 11:50:06 +0000
ROA not before:           Thu 14 Dec 2023 11:50:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49981
IP address blocks:        185.226.182.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:68:29:9a:9a:a2:c1:b6:6f:de:32:a4:35:ad:dd:25:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Dec 14 11:50:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e786acf9e1f0d49c2bf18b7bb105795ab18271a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:91:95:bc:3a:4c:23:3e:9e:d3:0c:cf:ec:f6:
                    55:88:86:a1:54:10:a8:4d:e0:8e:3e:65:f9:64:4a:
                    bf:dc:12:96:33:17:dc:ee:3c:b0:86:f6:a9:75:ce:
                    60:28:fc:61:19:56:d9:48:6c:c8:dd:9b:ac:75:b5:
                    98:3a:18:d7:4f:99:3e:84:66:a2:b3:7c:75:1b:c3:
                    68:43:03:4c:aa:8c:62:a1:df:9d:b8:f8:11:83:64:
                    64:a3:50:07:9e:ae:10:76:f2:a4:87:4d:f5:d7:4d:
                    0b:f1:57:42:21:44:ea:36:db:15:df:33:5d:72:65:
                    6b:dd:ce:a7:2d:b4:c4:3e:2e:c8:c3:4a:8d:5c:24:
                    af:26:9a:93:26:b7:43:6b:23:a6:b9:7b:62:81:50:
                    3d:d4:77:c7:2c:48:e9:72:82:d6:b5:6d:15:5a:ad:
                    80:8a:b9:fa:9a:6e:6e:4b:ac:53:18:45:1e:80:1f:
                    81:4f:7c:72:63:bc:15:54:30:13:2c:ba:8f:27:5e:
                    a0:1c:6e:4e:cf:35:66:7b:ab:b1:6c:47:11:0a:b3:
                    26:95:ca:70:d0:91:60:b4:f6:61:f7:fc:39:ac:0c:
                    81:f3:12:83:87:f0:4c:b9:91:45:3f:a5:fe:60:a5:
                    ec:47:70:10:0a:1e:3e:ad:2a:dd:5a:8d:5b:1f:87:
                    a9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:86:AC:F9:E1:F0:D4:9C:2B:F1:8B:7B:B1:05:79:5A:B1:82:71:A6
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/54as-eHw1Jwr8Yt7sQV5WrGCcaY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:a7:a4:a2:bd:98:f9:65:4d:18:3e:ea:c1:a8:53:ab:3b:4b:
         73:fa:5b:ba:25:16:b1:5a:33:72:15:cf:c0:bf:45:9a:b5:ac:
         ec:fb:6f:5a:18:7b:ca:7f:39:8e:1b:b0:89:d4:f4:b2:eb:00:
         0c:93:ef:2c:fc:6d:41:1a:f4:e4:64:84:95:92:a3:d7:6f:d1:
         61:80:b2:2e:49:90:27:9a:8d:a8:2d:6f:a2:f1:de:71:d7:61:
         83:e8:73:ac:4d:24:4d:c1:27:72:68:7c:8a:39:21:cf:c8:b0:
         98:69:15:ed:52:98:d9:45:f4:74:2c:dc:50:ea:24:49:c8:fb:
         76:ae:c5:2b:a0:0f:4e:79:25:8c:50:30:c7:27:13:5a:ca:69:
         fd:f3:30:96:71:45:08:a3:f4:de:bc:ac:31:80:ab:6a:93:9a:
         5b:a1:bd:0f:f2:61:dd:d0:d0:f7:e8:83:d7:35:0f:67:76:49:
         25:5d:1c:d9:b3:51:81:99:17:af:d1:67:f6:1d:fc:8c:d8:0c:
         6b:07:e4:a0:1d:33:5a:04:e2:b7:ad:54:b9:42:00:29:6b:74:
         85:5e:73:ce:b3:f4:95:48:e5:26:78:09:b1:3e:21:81:6f:4e:
         59:c8:47:14:f3:67:43:72:83:c7:31:0d:b0:48:20:5f:7c:f5:
         93:8a:12:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxoKZqaosG2b94ypDWt3SVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjMxMjE0MTE1MDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzg2YWNmOWUxZjBkNDljMmJmMThiN2JiMTA1Nzk1YWIxODI3MWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5GVvDpMIz6e0wzP7PZViIahVBCo
TeCOPmX5ZEq/3BKWMxfc7jywhvapdc5gKPxhGVbZSGzI3ZusdbWYOhjXT5k+hGai
s3x1G8NoQwNMqoxiod+duPgRg2Rko1AHnq4QdvKkh031100L8VdCIUTqNtsV3zNd
cmVr3c6nLbTEPi7Iw0qNXCSvJpqTJrdDayOmuXtigVA91HfHLEjpcoLWtW0VWq2A
irn6mm5uS6xTGEUegB+BT3xyY7wVVDATLLqPJ16gHG5OzzVme6uxbEcRCrMmlcpw
0JFgtPZh9/w5rAyB8xKDh/BMuZFFP6X+YKXsR3AQCh4+rSrdWo1bH4ep5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOeGrPnh8NScK/GLe7EFeVqxgnGmMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvNTRhcy1lSHcxSndyOFl0N3NRVjVXckdDY2FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueK2MA0G
CSqGSIb3DQEBCwUAA4IBAQCYp6SivZj5ZU0YPurBqFOrO0tz+lu6JRaxWjNyFc/A
v0Watazs+29aGHvKfzmOG7CJ1PSy6wAMk+8s/G1BGvTkZISVkqPXb9FhgLIuSZAn
mo2oLW+i8d5x12GD6HOsTSRNwSdyaHyKOSHPyLCYaRXtUpjZRfR0LNxQ6iRJyPt2
rsUroA9OeSWMUDDHJxNaymn98zCWcUUIo/TevKwxgKtqk5pbob0P8mHd0ND36IPX
NQ9ndkklXRzZs1GBmRev0Wf2HfyM2AxrB+SgHTNaBOK3rVS5QgApa3SFXnPOs/SV
SOUmeAmxPiGBb05ZyEcU82dDcoPHMQ2wSCBffPWTihJJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org