Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/mr3uAcAK-fwY6yd1OsdKpUtfEeo.roa
File:                     mr3uAcAK-fwY6yd1OsdKpUtfEeo.roa (raw, json)
Hash identifier:          LuMO5opBIOy+0F5jK75EOCK4QWDfzv5c/q9djAUjmbQ=
Subject key identifier:   9A:BD:EE:01:C0:0A:F9:FC:18:EB:27:75:3A:C7:4A:A5:4B:5F:11:EA
Certificate issuer:       /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial:       018ABCC8E66D132C10F437CB2B00A9997108
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/mr3uAcAK-fwY6yd1OsdKpUtfEeo.roa
Signing time:             Fri 22 Sep 2023 12:06:37 +0000
ROA not before:           Fri 22 Sep 2023 12:06:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202817
IP address blocks:        185.154.8.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:bc:c8:e6:6d:13:2c:10:f4:37:cb:2b:00:a9:99:71:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
        Validity
            Not Before: Sep 22 12:06:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9abdee01c00af9fc18eb27753ac74aa54b5f11ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d0:28:87:d6:0c:9d:d9:24:2b:69:b4:c9:4b:
                    54:2e:16:0a:d2:14:cb:72:b2:1d:f3:a9:68:c8:a0:
                    88:b5:d3:59:a1:38:fa:3a:7b:b8:55:d6:7e:35:c5:
                    7a:9d:48:bc:80:31:65:4c:f6:14:b0:c8:23:2d:a9:
                    72:c2:42:c9:2b:cc:b6:a5:b7:0d:7f:72:0f:a5:8d:
                    50:88:bb:6b:96:e2:ba:b2:26:5e:3a:5d:78:6e:40:
                    8b:62:22:a4:c7:8b:b2:da:ab:a9:79:a8:0f:1e:29:
                    ed:41:49:94:cb:2b:2c:0e:e8:1e:e8:ea:0b:6d:4c:
                    cd:df:7d:55:e5:51:b1:66:ab:92:0d:be:e4:20:00:
                    0b:54:e4:50:47:e1:d3:39:8b:41:29:3f:26:1b:3d:
                    c8:ae:76:b3:8c:a9:1b:b6:9d:a7:40:61:24:d1:18:
                    2c:f7:a2:f4:9f:5d:ab:ac:ae:99:1c:5f:a7:4b:4a:
                    19:c6:3d:c4:b6:4d:81:12:5b:58:82:0f:77:43:b4:
                    2a:64:16:f4:7c:36:66:9d:9d:c4:7d:74:ec:af:22:
                    76:ac:4c:23:9e:b7:a9:8a:3d:ed:03:6b:60:42:11:
                    3c:ad:51:a2:31:ef:ce:b7:db:f9:a7:c8:25:e3:2d:
                    44:b0:ad:bb:a4:c9:c5:11:4a:b4:b9:a3:9d:fe:6f:
                    61:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BD:EE:01:C0:0A:F9:FC:18:EB:27:75:3A:C7:4A:A5:4B:5F:11:EA
            X509v3 Authority Key Identifier:
                keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/mr3uAcAK-fwY6yd1OsdKpUtfEeo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.154.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d7:ef:28:40:25:1d:20:b5:62:4b:a2:f7:e9:5d:01:e4:65:9b:
         9f:fb:06:76:0e:50:b4:10:28:9a:5e:ff:60:25:a9:ac:54:a1:
         38:b5:9e:db:6d:df:bf:7f:1e:59:c6:1a:f0:65:7d:52:74:5b:
         24:38:f7:62:c3:13:9f:73:ee:56:b9:8d:19:1c:29:99:e3:52:
         5c:f1:b5:3f:05:31:f2:26:73:52:de:7c:17:4d:db:fe:9e:a2:
         c6:0f:1d:18:ea:1b:ca:04:57:bc:55:21:17:03:56:37:a4:ea:
         a5:cd:14:03:ec:e9:b6:02:25:93:a8:7b:c8:2e:6e:05:4e:c9:
         39:7f:42:b4:7d:c1:2a:70:d7:ef:65:98:da:29:4d:17:ed:8a:
         0e:4d:d9:d4:42:c6:27:63:3a:c6:95:91:99:a7:a5:b4:96:09:
         f9:65:30:57:29:b8:78:7a:c1:d3:54:db:f5:ff:88:f9:1f:1f:
         a0:7e:78:e0:62:b0:88:24:84:5d:c4:c6:35:fe:a0:cc:14:3e:
         7d:a1:d2:2a:cf:3e:b0:25:c7:c6:29:7e:b7:c1:e5:bc:bc:d2:
         34:34:38:31:0f:83:fe:19:6f:3a:d8:66:12:42:ff:af:8e:6c:
         86:76:08:98:1e:cb:4b:45:9a:2f:ef:cf:c1:4c:df:08:c0:7a:
         82:0c:71:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:19 2024 by rpki-client on console-fra.rpki-client.org