Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/sExRc2dR7few0ajzWya-igG_5sQ.roa
File:                     sExRc2dR7few0ajzWya-igG_5sQ.roa (raw, json)
Hash identifier:          x0g4oCDUL1MHceqYgFC5m6FvOkoJoCVYAEii+qd8YCM=
Subject key identifier:   B0:4C:51:73:67:51:ED:F7:B0:D1:A8:F3:5B:26:BE:8A:01:BF:E6:C4
Certificate issuer:       /CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
Certificate serial:       018C2FEF022119387FB7F3411F5D29D6F84D
Authority key identifier: 2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/sExRc2dR7few0ajzWya-igG_5sQ.roa
Signing time:             Sun 03 Dec 2023 13:47:21 +0000
ROA not before:           Sun 03 Dec 2023 13:47:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205219
IP address blocks:        185.242.182.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:2f:ef:02:21:19:38:7f:b7:f3:41:1f:5d:29:d6:f8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
        Validity
            Not Before: Dec  3 13:47:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b04c51736751edf7b0d1a8f35b26be8a01bfe6c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e5:2c:d0:67:c0:bc:96:ad:d2:65:d1:e4:67:
                    92:54:ab:26:a2:57:2e:b4:99:cd:76:cc:4a:be:c4:
                    5e:ad:60:ed:16:63:e1:dc:24:74:ee:cd:ec:23:b4:
                    a3:d7:ce:2b:ef:c0:0c:b1:88:65:3d:8b:a2:47:55:
                    f7:5c:5b:ae:7f:3d:97:9f:42:3c:8b:7f:60:0e:d0:
                    9c:47:97:0f:3d:da:45:bc:95:f9:b8:2d:77:2b:26:
                    9f:99:ea:a9:a3:92:d2:41:76:95:2a:17:a3:a7:d3:
                    6b:7a:d5:99:9e:cc:dd:63:88:5c:b9:93:80:d1:35:
                    02:09:e3:1f:22:48:d7:03:a4:bb:6a:1e:d7:e2:71:
                    18:5e:34:08:2b:f7:ba:ba:15:19:cb:b3:46:0e:c1:
                    dd:ee:69:48:62:da:24:67:b4:df:90:07:28:25:4d:
                    76:38:b7:d4:4e:1b:cd:f8:55:1d:7a:a2:a2:e9:82:
                    84:bf:89:ca:8c:02:ee:ab:bb:d1:22:e1:ab:f8:52:
                    75:03:38:7a:ce:3f:b9:d7:a3:38:d2:5c:6d:d2:dc:
                    4a:3e:42:87:87:e0:7d:24:d1:c0:72:93:98:b7:6c:
                    3e:cf:23:e0:3c:e8:99:2d:3a:c7:96:69:86:cc:93:
                    8d:e6:45:e2:3b:ef:01:a1:6b:3c:6f:59:62:08:42:
                    95:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4C:51:73:67:51:ED:F7:B0:D1:A8:F3:5B:26:BE:8A:01:BF:E6:C4
            X509v3 Authority Key Identifier:
                keyid:2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/sExRc2dR7few0ajzWya-igG_5sQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/L8sw_X1uRJST7Hyw2feGAEWL4hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.242.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:ea:64:d9:be:4c:36:12:3d:8e:1e:08:be:9f:ef:42:e5:45:
         5f:12:4c:c1:79:9f:75:c8:c6:ad:35:6c:b0:5c:cc:7f:8f:1a:
         c5:a0:b9:5b:6c:50:04:0c:df:df:2f:75:59:6b:d0:ca:46:f7:
         35:7c:3d:72:b3:1f:6d:62:30:06:a7:a7:64:d8:64:e9:27:ef:
         9f:e1:32:ee:cc:f4:32:e7:35:e5:d0:d2:5b:32:08:0e:b1:d0:
         d4:aa:dc:9f:8b:4b:00:35:d2:30:bf:31:84:28:3d:a4:09:96:
         2b:74:9d:39:84:6a:fe:45:7f:a2:5c:3d:fd:17:3e:b9:47:65:
         c9:76:28:06:79:dd:69:6a:d3:fb:2d:00:35:04:bc:38:1e:b5:
         ff:9b:8e:21:41:72:19:74:aa:2d:aa:b4:bc:43:0b:aa:b8:1f:
         40:1c:ec:29:bc:f9:ed:36:9c:62:53:c2:af:3c:69:36:d1:6b:
         ab:ca:9d:62:f6:f3:7b:62:f7:cd:88:e4:e6:9d:62:de:4a:80:
         65:bd:ac:9f:e7:c4:d7:b5:9a:6c:fb:7a:0e:ea:3a:11:39:bf:
         20:49:7f:c4:d5:3a:57:a2:05:af:c9:2b:8d:93:8c:88:1d:5b:
         12:11:44:4e:e5:15:74:44:e0:e4:13:ec:b2:65:a2:56:b4:ac:
         e3:c2:89:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:07 2024 by rpki-client on console-ams.rpki-client.org