Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/xuQ6gz-C7Qjv_YVEHANIKST9Q58.roa
File:                     xuQ6gz-C7Qjv_YVEHANIKST9Q58.roa (raw, json)
Hash identifier:          VtC7IXpgaIbor5DqObWWZGR7cRKdGQbCoJbovh7viAM=
Subject key identifier:   C6:E4:3A:83:3F:82:ED:08:EF:FD:85:44:1C:03:48:29:24:FD:43:9F
Certificate issuer:       /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial:       0190D98CC1DDC8972A018AB251C1EE951E33
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/xuQ6gz-C7Qjv_YVEHANIKST9Q58.roa
Signing time:             Mon 22 Jul 2024 08:26:38 +0000
ROA not before:           Mon 22 Jul 2024 08:26:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        188.66.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 25 Jul 2024 12:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:d9:8c:c1:dd:c8:97:2a:01:8a:b2:51:c1:ee:95:1e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
        Validity
            Not Before: Jul 22 08:26:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c6e43a833f82ed08effd85441c03482924fd439f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:35:84:42:17:2b:58:17:7b:2b:64:a5:16:23:
                    0f:44:c4:f4:c6:00:65:e4:ec:e3:73:06:1a:81:91:
                    2b:b5:bf:7a:8c:63:70:82:a1:ce:18:ed:86:55:b8:
                    01:18:d0:9b:ee:84:c9:24:31:10:4b:36:66:7c:4a:
                    cd:05:b7:b5:f4:33:e4:e0:6a:6b:73:ae:64:30:c7:
                    18:4a:38:ee:27:b9:38:8c:46:41:3e:f7:57:82:33:
                    d0:28:e1:b7:99:92:54:9e:4a:37:96:72:7f:f3:2a:
                    3e:a7:87:e2:59:75:ae:32:f3:67:fb:ab:6c:d4:05:
                    59:05:5b:26:25:42:a0:0c:c3:17:f4:86:ef:a9:2c:
                    19:83:b4:0c:ce:e7:0f:70:58:89:37:cc:bd:9e:2b:
                    5a:ca:13:48:ac:88:b9:4b:cb:e7:d1:55:6f:a0:62:
                    71:cd:b1:68:b6:0d:5f:7f:70:f8:dc:2f:3c:d4:f5:
                    81:f2:2d:63:27:54:81:ac:9b:0a:bd:56:b8:3f:bb:
                    8b:b8:2f:5d:78:9a:b2:5e:15:09:8f:7e:4a:eb:d8:
                    d0:5b:a5:65:1d:1c:2e:1f:d2:82:b9:f9:d4:5c:53:
                    01:c4:bf:e7:1b:63:f8:ca:68:2b:ae:fd:af:f6:36:
                    96:2c:7f:2e:22:d4:02:92:35:1c:ee:f2:f9:70:4d:
                    c6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E4:3A:83:3F:82:ED:08:EF:FD:85:44:1C:03:48:29:24:FD:43:9F
            X509v3 Authority Key Identifier:
                keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/xuQ6gz-C7Qjv_YVEHANIKST9Q58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.66.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:e0:c2:08:80:d3:1f:b0:b0:0f:7d:fe:bb:a6:f9:dc:d3:dd:
         12:04:c5:cc:fb:43:67:f7:dc:4c:0f:24:ac:c0:84:f1:bd:38:
         f8:3d:e4:72:43:77:2b:e0:ff:8e:97:80:e2:06:8c:d1:5b:08:
         69:b8:bb:89:e7:76:c5:42:7b:89:2e:d9:5e:b6:18:32:bb:f4:
         51:41:5c:0e:d0:5e:c3:f3:21:ac:cf:bf:05:d6:26:c6:6e:5e:
         17:91:07:59:ab:b2:23:8f:09:a8:d9:e5:b3:78:5e:7c:b5:c7:
         32:b7:bd:8b:7b:b8:3e:e1:f9:bb:ea:a0:50:9f:10:22:14:fd:
         07:69:48:e5:e3:1d:1c:f6:b9:c6:c6:69:11:49:61:69:e5:d2:
         b2:2e:e3:6c:be:aa:aa:1a:92:61:97:05:b6:58:f5:0e:9b:8f:
         15:58:b7:b7:be:57:d8:91:70:84:76:dc:fe:bd:24:b0:ba:59:
         29:2d:19:75:8a:92:1a:05:b5:ed:5b:0a:9e:e1:e8:1a:8b:66:
         01:ac:a0:9d:d4:c0:03:2d:bd:f5:39:ae:7b:9e:16:aa:cd:4d:
         61:e8:4c:c4:e3:b0:41:9d:bb:ad:b0:91:88:11:d7:23:8d:36:
         8d:bb:17:b7:f2:86:9d:c6:5b:0a:71:0a:81:5d:25:ce:f4:38:
         ab:90:67:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 16:40:23 2024 by rpki-client on console-ams.rpki-client.org