Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/e_DEvu5634rk8n9oO1lPK9Qp7qI.roa
File:                     e_DEvu5634rk8n9oO1lPK9Qp7qI.roa (raw, json)
Hash identifier:          eu0lH7u0pHiElE4BUd8n4OT/DygWpOojHm7WnZBiyGg=
Subject key identifier:   7B:F0:C4:BE:EE:7A:DF:8A:E4:F2:7F:68:3B:59:4F:2B:D4:29:EE:A2
Certificate issuer:       /CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Certificate serial:       0188DF69DC5A9BC112F8A443E0795A9A7175
Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/e_DEvu5634rk8n9oO1lPK9Qp7qI.roa
Signing time:             Wed 21 Jun 2023 19:23:56 +0000
ROA not before:           Wed 21 Jun 2023 19:23:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        185.40.110.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:df:69:dc:5a:9b:c1:12:f8:a4:43:e0:79:5a:9a:71:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05
        Validity
            Not Before: Jun 21 19:23:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7bf0c4beee7adf8ae4f27f683b594f2bd429eea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:64:5e:87:76:9d:e4:3d:aa:ff:b8:73:cf:be:
                    b0:18:d3:6f:2a:f7:74:c9:a0:7f:05:e8:d1:c4:5b:
                    fe:9c:ea:38:15:be:28:b3:eb:80:17:18:36:f6:4c:
                    7d:68:dd:dd:5f:cf:2d:cd:8f:ce:4f:5d:0f:8c:cd:
                    82:80:61:f4:77:ee:7a:ee:4b:94:93:e2:24:ff:5e:
                    35:61:4c:59:66:9a:4f:3e:05:40:f4:5b:b1:57:43:
                    d2:e0:1a:b8:6a:68:4d:b2:64:1f:42:4a:88:30:d5:
                    a2:59:23:b9:6a:3d:66:31:18:44:78:72:81:7a:cf:
                    73:7f:d5:65:65:1c:4b:40:48:c6:50:0a:98:43:bd:
                    69:0d:80:eb:3d:a6:47:9c:be:3b:8c:ef:10:88:d8:
                    41:ff:5a:6d:25:46:2a:ed:e5:f3:28:a0:7d:d9:16:
                    be:63:fc:fc:44:ae:27:76:1c:fe:fc:a1:8a:ab:d6:
                    7c:a0:a4:db:73:73:54:10:4a:84:48:7f:55:a6:3b:
                    c2:49:31:3f:71:c1:6f:db:cd:d5:f8:e5:4b:f7:b4:
                    9a:c1:99:f0:7a:19:0d:c6:01:1a:d6:8e:d1:5c:1a:
                    d9:d2:eb:57:23:7f:44:1d:c9:4e:06:c5:bc:ac:1f:
                    c2:bc:95:6a:bf:8d:a3:0a:9c:b5:7b:bf:80:63:6e:
                    66:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F0:C4:BE:EE:7A:DF:8A:E4:F2:7F:68:3B:59:4F:2B:D4:29:EE:A2
            X509v3 Authority Key Identifier:
                keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/e_DEvu5634rk8n9oO1lPK9Qp7qI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.40.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:b6:6a:fc:ef:bd:90:11:ae:94:f2:06:ff:b7:31:9b:29:e0:
         96:c3:10:d7:1a:c9:9c:5f:43:af:dd:83:9b:c7:77:e0:b7:e9:
         d2:9a:f0:6f:a0:5d:56:2c:97:6f:32:f7:67:60:59:e7:e1:7e:
         b8:8e:cb:1c:2a:f0:b4:1e:db:ce:3f:1b:2c:20:32:d7:83:ad:
         59:be:aa:50:10:8e:02:9b:f3:08:c8:9f:0b:58:85:b0:70:76:
         1e:65:9f:64:3c:3e:ec:f5:67:da:3c:cc:e4:e7:8f:ed:e8:87:
         f0:4e:17:6b:91:bd:65:24:9e:7c:e8:6b:c3:72:c0:2b:6f:f7:
         1c:b0:15:e1:63:26:c6:a5:57:94:b1:5b:e4:e5:a1:87:bd:b1:
         69:08:7d:11:fd:d1:af:e7:3f:3c:04:ac:97:ea:3a:58:e1:76:
         97:0c:db:66:4c:ee:66:a8:2d:48:0e:9f:17:4c:0d:c3:d4:76:
         64:e4:63:75:cd:90:16:d7:de:4d:20:86:d0:32:75:5d:7d:d6:
         92:49:74:0a:b9:15:51:1d:9e:21:47:ab:29:fa:3d:9d:ea:80:
         13:13:9d:59:bb:e8:e7:20:1c:3f:5f:20:8e:c6:b5:d6:0a:14:
         95:99:18:b7:74:d2:5e:d7:4b:31:89:bb:e8:8e:1d:41:e9:71:
         54:50:94:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:51 2024 by rpki-client on console-ams.rpki-client.org