Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/JnUpNLtbEuKh_c_uev6_VxLeNgU.roa
File:                     JnUpNLtbEuKh_c_uev6_VxLeNgU.roa (raw, json)
Hash identifier:          0DgpPW1nOqsvL2aOudRv7r3EdMnjmmTDjRwupYHUJP0=
Subject key identifier:   26:75:29:34:BB:5B:12:E2:A1:FD:CF:EE:7A:FE:BF:57:12:DE:36:05
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       0189543C685D79111A0AF2D636A8B935A059
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/JnUpNLtbEuKh_c_uev6_VxLeNgU.roa
Signing time:             Fri 14 Jul 2023 11:49:52 +0000
ROA not before:           Fri 14 Jul 2023 11:49:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49999
IP address blocks:        185.221.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 07 Aug 2023 18:41:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:54:3c:68:5d:79:11:1a:0a:f2:d6:36:a8:b9:35:a0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Jul 14 11:49:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26752934bb5b12e2a1fdcfee7afebf5712de3605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e3:65:b2:fe:69:bc:4f:5e:1f:bf:a2:9d:cf:
                    6d:f9:29:53:fe:01:a2:32:77:3e:40:5c:c9:27:11:
                    bb:7a:e9:04:66:d7:20:54:bb:25:f8:c4:52:e6:47:
                    40:6f:2f:61:9e:a6:1b:7b:d9:39:81:6b:03:2d:92:
                    28:96:86:84:02:0f:9f:67:42:6e:c8:ab:06:5a:cd:
                    1a:8d:48:70:45:da:1d:d5:79:bc:37:fb:4a:42:57:
                    fe:64:b5:5a:ea:cb:72:f6:5f:05:45:b5:73:e4:a0:
                    82:31:fe:35:e4:60:36:a6:b8:b5:87:29:d1:13:ee:
                    cc:8b:9b:91:45:3b:65:8b:87:48:0a:63:32:c9:93:
                    ab:e4:13:c5:19:0d:af:de:77:8a:8f:5d:8a:90:f0:
                    13:1f:16:88:42:c2:51:d5:13:6d:2f:91:3b:14:c6:
                    7c:6a:15:86:c6:00:a3:69:da:8a:dc:fc:73:7f:33:
                    1f:03:29:8e:40:28:80:e1:ed:72:d8:0d:17:c2:1c:
                    20:a1:8d:7d:b3:b5:e9:af:5f:2b:45:7b:0a:a0:c9:
                    38:6b:8a:c5:f5:c7:9c:8b:79:84:36:01:88:6b:a4:
                    2b:ab:29:a3:f0:7c:24:2e:a1:2a:9d:45:59:ac:08:
                    d5:45:a3:10:8a:3f:bc:26:5a:70:d9:89:cf:12:6d:
                    b9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:75:29:34:BB:5B:12:E2:A1:FD:CF:EE:7A:FE:BF:57:12:DE:36:05
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/JnUpNLtbEuKh_c_uev6_VxLeNgU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.221.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:57:d0:04:36:0f:1f:a7:15:65:0c:09:5c:67:b3:f7:95:fa:
         2b:94:00:b4:37:6c:6e:02:f3:ce:f0:6d:cf:75:69:2d:62:2d:
         c6:92:10:aa:9e:c1:30:69:57:78:19:9d:dd:e8:0a:7c:2e:08:
         ba:80:ff:1a:9c:e9:32:89:ad:00:12:3e:cf:ca:b8:ba:eb:d0:
         d9:5a:8f:69:a0:62:82:ee:b9:a8:51:36:c9:93:11:4e:e4:e8:
         5b:db:58:27:bf:59:a9:97:61:cb:1c:5e:9f:ae:ca:1b:91:90:
         1b:8f:26:b8:48:88:8d:a5:5c:6f:fb:81:5e:3a:74:62:25:71:
         65:a5:44:5c:e1:25:40:94:67:13:0e:bf:08:33:37:f9:bd:c1:
         0d:40:67:2c:b3:29:3b:b8:01:55:f8:98:67:cc:84:5e:60:39:
         1b:b5:9c:de:f9:21:1a:72:8a:ce:c9:65:33:25:aa:f0:7a:2c:
         b8:ff:c2:2f:eb:0f:76:62:27:1e:5d:72:26:b6:17:4c:62:81:
         5c:e0:3d:aa:d8:59:9c:ce:43:92:34:1a:f1:d9:34:f6:01:49:
         91:dd:3b:19:8b:10:42:d5:3f:3d:a5:23:9f:9d:b9:0b:a0:58:
         96:e7:2b:a1:2d:1c:07:8e:a8:5f:6b:26:44:eb:70:2c:58:f2:
         ec:7d:4a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org