Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/olFBbaSxGP6o8Dc3chubTQ33yeU.roa
File:                     olFBbaSxGP6o8Dc3chubTQ33yeU.roa (raw, json)
Hash identifier:          QyXwpploFhbl0Wegx7+DPhd35fzZjUCpwacuyNBQ7wY=
Subject key identifier:   A2:51:41:6D:A4:B1:18:FE:A8:F0:37:37:72:1B:9B:4D:0D:F7:C9:E5
Certificate issuer:       /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial:       018DF412CC51BB0515D59ADC24246EFF8224
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/olFBbaSxGP6o8Dc3chubTQ33yeU.roa
Signing time:             Thu 29 Feb 2024 08:54:49 +0000
ROA not before:           Thu 29 Feb 2024 08:54:49 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57523
IP address blocks:        194.26.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 17 May 2024 13:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:f4:12:cc:51:bb:05:15:d5:9a:dc:24:24:6e:ff:82:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
        Validity
            Not Before: Feb 29 08:54:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a251416da4b118fea8f03737721b9b4d0df7c9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ca:59:76:bd:91:dd:55:0f:7e:51:71:30:ac:
                    ce:d0:09:9f:85:f8:de:08:36:08:be:e3:e0:c0:ec:
                    14:3b:1c:9a:7f:1a:ce:76:d6:2e:9d:13:f1:0f:8b:
                    e6:c9:be:2f:8c:1e:3b:0e:62:0a:9a:7b:7e:75:45:
                    68:64:02:f2:39:b9:6e:35:20:85:f9:b4:33:65:08:
                    17:a2:a0:d6:ff:90:11:89:4f:c3:a0:9e:36:4e:e2:
                    ca:69:4f:e1:0b:47:53:68:51:1e:16:ee:04:ad:e4:
                    c4:a2:07:05:0e:ef:fc:22:30:c2:25:5a:73:d4:4f:
                    7b:de:6f:02:d4:a8:39:0d:85:ce:ef:12:08:af:b3:
                    d0:37:73:5f:d4:98:a4:85:e7:aa:04:42:d7:e5:ac:
                    f3:83:66:00:9b:37:ce:48:a1:e3:5b:83:12:be:09:
                    a3:f1:e9:d7:90:1e:70:8f:4d:99:db:c0:06:0f:c7:
                    14:98:b1:be:63:5a:6c:03:dc:f0:fc:ab:c7:f7:78:
                    df:f4:02:01:3b:9d:1d:fc:01:d8:b8:4f:f1:2a:9c:
                    c1:3e:06:4b:b6:03:37:ce:2f:ef:94:ad:52:25:17:
                    b1:df:af:07:6f:b6:ac:6c:e5:08:73:6c:ba:a3:48:
                    fb:9f:a6:b9:de:55:58:65:e0:9e:41:c6:79:7a:37:
                    65:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:51:41:6D:A4:B1:18:FE:A8:F0:37:37:72:1B:9B:4D:0D:F7:C9:E5
            X509v3 Authority Key Identifier:
                keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/olFBbaSxGP6o8Dc3chubTQ33yeU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:c5:4f:2a:5b:db:c0:30:32:96:73:d4:12:ec:cb:e6:88:ac:
         c2:96:61:4e:be:20:ca:99:6c:f0:b6:69:07:26:c8:36:bf:b1:
         6d:32:8b:74:49:f9:54:6d:3b:ac:c3:77:b5:63:37:ce:6e:d0:
         41:c6:f2:ad:4c:a3:eb:05:4a:ad:97:a2:20:6c:f8:31:4a:c4:
         04:86:b6:1b:c1:1f:b0:7b:4e:a5:18:dd:63:1b:f9:9b:c1:7e:
         33:41:4a:63:90:83:be:ec:38:46:1d:93:30:23:4b:69:ba:91:
         b2:cc:74:2c:bf:17:47:7a:ce:ce:92:78:96:fd:c7:93:92:2c:
         af:78:43:c2:68:6b:2e:a1:a9:72:a4:8a:0b:95:5f:76:b7:c2:
         14:e4:02:56:fe:99:22:8d:e5:e4:af:6c:35:2f:ac:98:67:ba:
         99:97:b4:22:b9:d5:98:ac:82:9d:12:fd:30:93:42:9b:9e:00:
         c8:06:55:31:51:cf:b8:ad:28:e8:e3:bb:23:23:c8:e4:20:61:
         13:be:d3:e5:f9:28:17:f0:55:9b:d5:c2:01:76:ed:99:0e:20:
         e0:58:d8:dd:16:9b:af:32:23:95:6f:5a:18:57:04:01:07:55:
         fe:9d:97:b8:2d:e6:8d:cd:6d:15:e2:b7:0e:49:03:f9:39:cf:
         ee:6f:27:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:23 2024 by rpki-client on console-fra.rpki-client.org