Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/WV6JN9SkGJB5sG1igfJHbwqgd9c.roa
File:                     WV6JN9SkGJB5sG1igfJHbwqgd9c.roa (raw, json)
Hash identifier:          Ydg4rngytgRIwpBiqTbSKvSK4yyC1PgotzTrweOs7jo=
Subject key identifier:   59:5E:89:37:D4:A4:18:90:79:B0:6D:62:81:F2:47:6F:0A:A0:77:D7
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       018D335EDDBE1842C71D5482BDB2608B8EED
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/WV6JN9SkGJB5sG1igfJHbwqgd9c.roa
Signing time:             Mon 22 Jan 2024 22:51:11 +0000
ROA not before:           Mon 22 Jan 2024 22:51:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44620
IP address blocks:        185.250.27.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Apr 2024 23:09:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:33:5e:dd:be:18:42:c7:1d:54:82:bd:b2:60:8b:8e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Jan 22 22:51:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=595e8937d4a4189079b06d6281f2476f0aa077d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:aa:2b:5d:80:b8:0d:b0:04:3c:ef:d0:da:
                    86:2b:cf:9e:8c:71:0f:ff:b4:3d:50:75:cc:04:2b:
                    40:af:e2:33:d4:02:79:c2:1a:a8:08:03:98:3f:dc:
                    52:f1:83:b4:72:58:0f:a6:ee:55:7d:57:6b:03:1b:
                    27:89:49:ca:0e:fb:8a:28:dd:94:1d:77:1d:75:ec:
                    e6:7a:c5:90:70:35:0f:21:e7:ca:30:fd:f7:6c:4f:
                    71:c4:a1:00:6b:37:c6:fc:9c:8d:c4:0f:cd:34:35:
                    d4:cf:e9:42:e2:7a:e8:96:25:77:98:81:9f:13:9c:
                    d1:f2:ca:e6:48:c4:d5:01:36:91:38:47:38:be:1a:
                    65:0f:5a:77:90:24:35:5c:35:63:d3:0d:99:f2:85:
                    a4:05:d6:19:f3:51:21:be:5e:f9:4a:67:47:aa:38:
                    88:ae:e8:60:c6:f1:d6:9b:9e:2d:b6:e2:0b:77:75:
                    67:02:15:51:d8:22:53:92:54:03:2e:77:17:65:03:
                    ef:db:61:b3:47:4b:a8:40:47:1c:70:f3:18:cf:f0:
                    3a:31:fc:a3:a7:77:c8:93:24:0d:4c:82:55:3f:4b:
                    ce:3d:99:b6:f7:27:9e:2e:7f:a5:38:25:c4:01:b1:
                    de:be:62:f4:82:12:bd:e7:14:50:7f:07:fe:0b:6f:
                    a9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5E:89:37:D4:A4:18:90:79:B0:6D:62:81:F2:47:6F:0A:A0:77:D7
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/WV6JN9SkGJB5sG1igfJHbwqgd9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.250.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:3c:98:e2:99:83:6b:8c:1f:3d:de:f0:df:e4:f9:a7:67:33:
         7a:0e:69:2b:79:a9:3d:8a:d2:b3:43:8c:f9:ef:2d:f3:0c:7f:
         24:3f:35:cd:3d:78:1c:99:16:aa:09:be:fa:6a:1b:61:78:b8:
         c6:58:c0:e7:34:8c:21:36:9a:44:21:33:6a:ef:cc:19:b6:c3:
         f2:ef:0e:42:5f:f1:6c:16:69:e8:0b:c5:e2:68:ea:57:23:32:
         17:8b:59:99:52:4f:8b:ef:21:2e:c3:b6:3e:f3:fb:cd:fd:cf:
         cd:b6:77:1d:c8:43:1f:4e:a4:06:5e:95:93:7d:6f:6e:fd:2e:
         bd:ee:7f:6a:cd:ca:84:8a:a6:20:71:74:c5:71:87:f5:cb:33:
         97:13:f2:22:de:a8:85:de:ba:ba:5a:4e:ca:82:10:f1:b3:e3:
         08:12:49:fa:34:63:b7:83:a5:db:86:0d:dd:23:c6:2a:29:11:
         d5:55:86:88:04:0d:72:38:bb:2f:6a:c7:70:e4:44:7b:22:e3:
         03:09:6e:ca:cc:3b:b0:20:dc:df:3b:e0:c5:c7:c6:66:47:21:
         e5:e9:02:55:72:d0:03:32:67:ca:59:6a:6a:2e:c9:a2:87:9d:
         48:c5:83:88:00:4a:31:6f:05:81:db:37:fa:08:fa:e7:46:72:
         26:09:80:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org