Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/76YYDx6aCGkf8LhSTJix53Pj2Fo.roa
File:                     76YYDx6aCGkf8LhSTJix53Pj2Fo.roa (raw, json)
Hash identifier:          DoGaSGOpE/Q5hM7azaZ3r4Az/wCl+Y+TC1UjSkss3g0=
Subject key identifier:   EF:A6:18:0F:1E:9A:08:69:1F:F0:B8:52:4C:98:B1:E7:73:E3:D8:5A
Certificate issuer:       /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial:       018CC86F691CF891121AA2E2DD4B546341A5
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/76YYDx6aCGkf8LhSTJix53Pj2Fo.roa
Signing time:             Tue 02 Jan 2024 04:29:53 +0000
ROA not before:           Tue 02 Jan 2024 04:29:53 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212238
IP address blocks:        185.18.123.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 06 Aug 2024 12:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:69:1c:f8:91:12:1a:a2:e2:dd:4b:54:63:41:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
        Validity
            Not Before: Jan  2 04:29:53 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=efa6180f1e9a08691ff0b8524c98b1e773e3d85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:5d:c5:63:fa:9b:6f:e1:94:17:00:26:e9:
                    7a:13:44:a0:3f:28:57:70:08:8d:e7:04:65:52:d4:
                    91:59:e9:ce:5a:e5:86:ca:b8:fc:c5:88:28:06:04:
                    29:8b:14:d4:c7:4c:91:81:b4:1a:de:41:46:13:09:
                    d3:29:71:27:d0:b6:dc:e9:b8:a1:b6:f8:cb:19:bc:
                    3e:75:df:7c:fa:84:35:62:ed:91:57:68:21:0d:cc:
                    81:47:60:44:eb:d9:a7:b3:44:17:0c:37:09:3a:41:
                    66:a6:ed:bc:19:82:2f:3f:35:9f:a6:27:29:8e:1e:
                    35:dc:24:ea:22:12:8e:a6:22:37:52:b2:f0:41:11:
                    b0:2b:ff:7a:f1:24:9a:d6:6a:27:22:d7:fe:0c:e8:
                    f8:44:3c:58:e3:12:b7:9f:1a:2c:34:85:99:83:1b:
                    ef:1b:03:77:90:aa:5b:8b:f2:e4:6a:8c:8c:b3:31:
                    ab:aa:51:4e:22:c8:71:8a:38:ed:65:f5:9a:06:8a:
                    8c:f8:50:b0:51:8a:5e:d6:3a:a2:1f:0c:f6:86:6e:
                    ce:ae:bc:fe:0b:98:12:3e:cf:91:62:c2:b3:0d:40:
                    52:2e:d8:6b:8b:58:51:0a:d1:d2:74:aa:19:fd:2b:
                    16:06:48:b5:1b:68:fc:dd:2c:57:76:b0:b4:f0:03:
                    16:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A6:18:0F:1E:9A:08:69:1F:F0:B8:52:4C:98:B1:E7:73:E3:D8:5A
            X509v3 Authority Key Identifier:
                keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/76YYDx6aCGkf8LhSTJix53Pj2Fo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.18.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:b6:a8:09:ff:87:74:b8:7d:e4:6d:fe:1d:da:69:ef:a6:31:
         68:2b:ab:48:cb:34:80:3e:db:a2:e3:67:fe:fc:a4:af:fa:5a:
         f9:d2:ce:7a:92:94:c9:f8:9f:0d:e0:66:2c:76:0a:be:67:a8:
         8b:29:16:b3:00:16:f8:b7:04:d2:78:d5:c5:f2:90:2f:6b:c7:
         9d:18:73:10:ff:b5:32:90:4d:9b:ab:f9:6f:88:71:01:eb:b9:
         d3:8c:6f:c2:dd:0a:40:59:58:10:36:4a:48:5e:93:0a:50:aa:
         5e:35:a7:3a:a1:18:32:af:45:e4:4b:09:08:70:40:2c:19:e5:
         13:30:99:77:a9:69:12:18:78:63:7a:96:17:f9:72:da:bb:0b:
         00:30:76:8d:a0:a2:df:ad:0a:a7:cf:32:ee:d8:a3:19:57:8d:
         dd:72:c5:89:c6:72:f3:94:78:c2:e5:af:7c:ba:99:6f:01:bc:
         92:8d:da:80:34:b2:07:56:e9:84:9e:1c:53:d0:d1:3e:3d:19:
         8b:28:5c:35:a1:8a:05:9d:21:2a:a2:7d:b0:d7:76:dc:74:88:
         84:01:39:2a:99:a4:d4:02:e0:9a:2c:8d:cd:2b:0c:83:eb:04:
         b8:1b:12:d6:99:86:58:17:97:54:83:59:1f:e2:b0:fc:1f:fd:
         9e:07:95:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb2kc+JESGqLi3UtUY0GlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2MzOWQxODk5ZTY5OWJmNTE3NzQxOGVlMzgxNDg5ZWRm
ZjQzODAwHhcNMjQwMTAyMDQyOTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmE2MTgwZjFlOWEwODY5MWZmMGI4NTI0Yzk4YjFlNzczZTNkODVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+RdxWP6m2/hlBcAJul6E0SgPyhX
cAiN5wRlUtSRWenOWuWGyrj8xYgoBgQpixTUx0yRgbQa3kFGEwnTKXEn0Lbc6bih
tvjLGbw+dd98+oQ1Yu2RV2ghDcyBR2BE69mns0QXDDcJOkFmpu28GYIvPzWfpicp
jh413CTqIhKOpiI3UrLwQRGwK/968SSa1monItf+DOj4RDxY4xK3nxosNIWZgxvv
GwN3kKpbi/LkaoyMszGrqlFOIshxijjtZfWaBoqM+FCwUYpe1jqiHwz2hm7Orrz+
C5gSPs+RYsKzDUBSLthri1hRCtHSdKoZ/SsWBki1G2j83SxXdrC08AMWVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO+mGA8emghpH/C4UkyYsedz49haMB8GA1UdIwQY
MBaAFHw8OdGJnmmb9Rd0GO44FInt/0OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAt
MDYzZmNkZDNhMDU3LzEvNzZZWUR4NmFDR2tmOExoU1RKaXg1M1BqMkZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAtMDYzZmNkZDNhMDU3
LzEvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRJ7MA0G
CSqGSIb3DQEBCwUAA4IBAQBetqgJ/4d0uH3kbf4d2mnvpjFoK6tIyzSAPtui42f+
/KSv+lr50s56kpTJ+J8N4GYsdgq+Z6iLKRazABb4twTSeNXF8pAva8edGHMQ/7Uy
kE2bq/lviHEB67nTjG/C3QpAWVgQNkpIXpMKUKpeNac6oRgyr0XkSwkIcEAsGeUT
MJl3qWkSGHhjepYX+XLauwsAMHaNoKLfrQqnzzLu2KMZV43dcsWJxnLzlHjC5a98
uplvAbySjdqANLIHVumEnhxT0NE+PRmLKFw1oYoFnSEqon2w13bcdIiEATkqmaTU
AuCaLI3NKwyD6wS4GxLWmYZYF5dUg1kf4rD8H/2eB5Vy
-----END CERTIFICATE-----
Generated at Tue Aug 6 16:28:42 2024 by rpki-client on console-fra.rpki-client.org