Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/Mlybz5orR36wbAto7gM2mTM0x5Q.roa
File:                     Mlybz5orR36wbAto7gM2mTM0x5Q.roa (raw, json)
Hash identifier:          1uJ8jV1a8mdr4Dy1eFQBsqFHQuFsTu+6LR+zjJ+y6yI=
Subject key identifier:   32:5C:9B:CF:9A:2B:47:7E:B0:6C:0B:68:EE:03:36:99:33:34:C7:94
Certificate issuer:       /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial:       018634D6A76B317EE4CE4C8FC4B085CB5494
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/Mlybz5orR36wbAto7gM2mTM0x5Q.roa
Signing time:             Thu 09 Feb 2023 06:22:08 +0000
ROA not before:           Thu 09 Feb 2023 06:22:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60976
IP address blocks:        185.42.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 05 Mar 2023 16:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:34:d6:a7:6b:31:7e:e4:ce:4c:8f:c4:b0:85:cb:54:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
        Validity
            Not Before: Feb  9 06:22:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=325c9bcf9a2b477eb06c0b68ee0336993334c794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:53:4f:07:c7:76:5d:fe:36:ae:33:e6:13:
                    21:42:39:5a:f9:63:ee:e9:89:2b:70:82:93:04:3a:
                    1b:88:85:17:e1:28:5e:9f:30:7a:68:99:b0:c9:92:
                    be:63:32:c6:35:08:92:ef:ce:f5:e2:9a:0e:c6:82:
                    05:51:d6:3e:08:9c:80:9a:9a:8c:5e:29:1f:c9:ff:
                    53:aa:a5:3b:77:dd:a4:2a:fb:a4:e7:b9:4b:95:80:
                    40:fc:0c:44:26:b9:83:29:7a:05:af:e8:fe:2e:ac:
                    36:e0:29:30:f0:2e:5a:9e:8a:73:52:d3:7c:28:44:
                    c1:08:c3:61:99:bd:c2:e3:d4:ed:5f:8b:10:46:8d:
                    49:ac:1e:29:c1:67:99:4d:00:1d:19:29:a3:a7:a5:
                    59:93:c8:15:8b:88:14:82:89:8b:5e:7c:c7:e2:39:
                    df:ca:66:e5:18:d3:d3:bb:fa:13:cf:2e:a7:d1:23:
                    a3:a8:37:52:3c:2b:73:cf:69:7b:0e:69:d2:73:a0:
                    2c:64:de:93:0f:1f:a3:a0:d8:4b:5b:a9:6e:0a:f9:
                    56:97:81:06:38:91:6d:ab:d3:cd:04:27:2e:00:10:
                    eb:33:32:a0:c8:2d:42:9d:40:8f:4f:a0:c1:24:22:
                    b6:80:a8:d7:bc:59:b1:02:ca:72:cd:d1:a9:b6:70:
                    93:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5C:9B:CF:9A:2B:47:7E:B0:6C:0B:68:EE:03:36:99:33:34:C7:94
            X509v3 Authority Key Identifier:
                keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/Mlybz5orR36wbAto7gM2mTM0x5Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.42.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:ce:7c:19:af:7f:44:8b:ad:a9:6d:93:0b:9d:fc:c3:73:ea:
         55:aa:1d:3a:f9:ae:82:cf:89:4d:bf:d4:51:f5:bc:5d:54:24:
         e0:37:23:41:3a:09:bc:7b:a0:42:83:5e:46:43:ba:87:fe:15:
         23:4e:cc:93:d1:9f:c6:c3:29:47:af:6d:16:33:58:20:3d:59:
         c6:a6:ed:52:98:f3:39:a6:d9:f7:da:ad:78:c5:26:53:1e:83:
         33:57:d6:c9:fc:be:93:54:37:cd:c8:99:72:f9:54:1a:56:6d:
         4b:33:2b:38:3c:ef:81:f7:27:61:dd:d4:c0:d3:3c:04:15:5d:
         2c:38:ca:56:f9:79:ce:c2:72:2f:1c:aa:ef:76:8e:48:e4:0b:
         6f:c2:28:ba:b6:08:21:9d:3d:17:a2:ca:35:04:e0:b5:07:54:
         46:0f:d6:f2:e7:57:4b:0f:25:83:21:29:75:57:b5:68:46:76:
         48:ee:49:e6:e6:87:dd:cd:2e:5e:4c:17:55:90:fa:17:6a:0a:
         de:bf:25:21:91:42:92:a4:17:71:d2:91:99:65:1a:6e:08:9e:
         29:2f:64:ba:6b:6a:bf:3c:1a:37:d6:d8:df:03:a2:95:4e:73:
         03:9b:b9:96:fa:b1:ab:82:8c:be:59:ea:f2:46:4a:9b:26:6c:
         63:8c:28:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYY01qdrMX7kzkyPxLCFy1SUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMDFjNDQzODMxY2Y5MzBiNzQ3ODcwOGQ3NmEzY2Y0NGQ4
OWExNjIwHhcNMjMwMjA5MDYyMjA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjVjOWJjZjlhMmI0NzdlYjA2YzBiNjhlZTAzMzY5OTMzMzRjNzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp9TTwfHdl3+Nq4z5hMhQjla+WPu
6YkrcIKTBDobiIUX4ShenzB6aJmwyZK+YzLGNQiS78714poOxoIFUdY+CJyAmpqM
Xikfyf9TqqU7d92kKvuk57lLlYBA/AxEJrmDKXoFr+j+Lqw24Ckw8C5anopzUtN8
KETBCMNhmb3C49TtX4sQRo1JrB4pwWeZTQAdGSmjp6VZk8gVi4gUgomLXnzH4jnf
ymblGNPTu/oTzy6n0SOjqDdSPCtzz2l7DmnSc6AsZN6TDx+joNhLW6luCvlWl4EG
OJFtq9PNBCcuABDrMzKgyC1CnUCPT6DBJCK2gKjXvFmxAspyzdGptnCTTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDJcm8+aK0d+sGwLaO4DNpkzNMeUMB8GA1UdIwQY
MBaAFN4BxEODHPkwt0eHCNdqPPRNiaFiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2dIRVE0TWMtVEMzUjRjSTEybzg5RTJKb1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xY2I4Y2EtNTk5My00ZDE3LWE2MWUt
ZWU3MzI4YWRjYzdjLzEvTWx5Yno1b3JSMzZ3YkF0bzdnTTJtVE0weDVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8xY2I4Y2EtNTk5My00ZDE3LWE2MWUtZWU3MzI4YWRjYzdj
LzEvM2dIRVE0TWMtVEMzUjRjSTEybzg5RTJKb1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSoaMA0G
CSqGSIb3DQEBCwUAA4IBAQBPznwZr39Ei62pbZMLnfzDc+pVqh06+a6Cz4lNv9RR
9bxdVCTgNyNBOgm8e6BCg15GQ7qH/hUjTsyT0Z/GwylHr20WM1ggPVnGpu1SmPM5
ptn32q14xSZTHoMzV9bJ/L6TVDfNyJly+VQaVm1LMys4PO+B9ydh3dTA0zwEFV0s
OMpW+XnOwnIvHKrvdo5I5Atvwii6tgghnT0Xoso1BOC1B1RGD9by51dLDyWDISl1
V7VoRnZI7knm5ofdzS5eTBdVkPoXagrevyUhkUKSpBdx0pGZZRpuCJ4pL2S6a2q/
PBo31tjfA6KVTnMDm7mW+rGrgoy+WeryRkqbJmxjjCjC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:12 2024 by rpki-client on console-fra.rpki-client.org