Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/RvwBypvfalb758w9xdlk7yXh_Ig.roa
File:                     RvwBypvfalb758w9xdlk7yXh_Ig.roa (raw, json)
Hash identifier:          U+TErhjBHFbkfOVGL/zAJtwVp7MVDrO042wPNzXqFBc=
Subject key identifier:   46:FC:01:CA:9B:DF:6A:56:FB:E7:CC:3D:C5:D9:64:EF:25:E1:FC:88
Certificate issuer:       /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial:       01856DB8739F474255734050606FCE644649
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/RvwBypvfalb758w9xdlk7yXh_Ig.roa
Signing time:             Sun 01 Jan 2023 14:24:42 +0000
ROA not before:           Sun 01 Jan 2023 14:24:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47692
IP address blocks:        185.26.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:b8:73:9f:47:42:55:73:40:50:60:6f:ce:64:46:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
        Validity
            Not Before: Jan  1 14:24:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=46fc01ca9bdf6a56fbe7cc3dc5d964ef25e1fc88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:54:20:ce:dc:8e:b5:e5:01:c5:ca:36:7d:fb:
                    9f:18:aa:b3:d5:f7:e5:7a:b6:24:32:7c:63:fd:8f:
                    ca:60:f0:e6:e0:ee:cf:4e:1f:c8:c2:2e:c4:a8:d8:
                    fa:05:39:da:23:4f:8d:3b:0a:d0:d4:59:f0:75:50:
                    36:e0:6f:bc:45:a7:c3:1c:92:14:61:5a:90:0e:50:
                    b5:b2:39:fd:69:61:47:b8:78:7d:97:6e:00:6a:6d:
                    e3:54:fc:39:50:34:d9:00:57:0a:40:fb:a1:d5:bd:
                    53:b7:08:3a:ab:7a:89:b9:d5:85:d5:cc:02:c9:22:
                    3b:48:ea:0b:17:e2:67:05:01:f1:ab:62:21:f3:cc:
                    4a:c6:67:a6:6e:4c:34:2e:a8:3d:c0:2e:a1:d1:3f:
                    c6:46:fc:2d:ca:04:52:35:54:21:91:8a:df:a3:04:
                    95:0c:51:5b:ca:ec:20:a6:bd:f6:80:56:0f:21:ef:
                    08:23:33:09:bc:f3:ad:a3:4f:7f:fe:83:9e:2c:3d:
                    d4:a8:1c:a9:a0:88:2b:ff:bf:68:d9:4c:7d:db:64:
                    33:af:d8:3d:80:74:94:08:01:76:47:f7:be:6b:db:
                    48:43:36:42:2d:87:7a:43:90:d5:ff:9b:b3:6c:0d:
                    92:65:27:c4:5a:a9:63:d1:ff:d3:e0:b3:85:43:b7:
                    fd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FC:01:CA:9B:DF:6A:56:FB:E7:CC:3D:C5:D9:64:EF:25:E1:FC:88
            X509v3 Authority Key Identifier:
                keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/RvwBypvfalb758w9xdlk7yXh_Ig.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.26.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:62:bc:9b:d8:65:60:fb:99:af:5a:10:d9:dc:fa:39:d4:9a:
         01:85:a1:1e:b8:13:c6:3c:21:6d:41:7c:b0:7a:b5:b3:38:fe:
         b6:7b:70:7a:5a:70:b5:7c:cb:9a:ed:ab:fc:ba:6d:b2:20:24:
         62:91:9b:8f:d7:ba:b0:35:e2:b7:e5:e4:f3:9a:91:ca:e4:e5:
         cf:c6:4e:14:d2:f4:ca:95:28:7d:67:3f:f1:17:45:64:9c:01:
         0b:34:8a:a3:be:9f:85:2e:ae:2a:78:cf:7e:91:5b:fd:a0:9c:
         99:00:ad:e9:f6:76:63:5a:f9:77:d5:3b:0d:47:3b:ec:a6:d2:
         e9:66:68:5e:9f:91:bf:4c:1f:d3:58:3a:99:1e:cd:34:a7:52:
         e1:02:e3:74:6a:d4:18:9f:f9:43:76:bd:ac:4d:f8:a8:8f:ba:
         89:1e:5c:d9:46:90:b0:32:b6:df:80:f0:e9:b8:48:60:61:e0:
         ed:f4:b8:04:ff:39:92:17:d1:6c:28:38:4c:59:b5:fa:54:b1:
         56:e1:9d:e6:63:6b:ff:ba:7c:8d:8d:a2:0b:a7:64:04:0e:59:
         8c:82:35:63:d5:a0:a9:e3:30:b2:8b:d4:bd:c7:03:a6:c7:82:
         98:02:12:a5:5a:03:b5:3f:d7:4a:d9:76:2e:60:f2:d5:fa:d1:
         6a:f8:01:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:16 2024 by rpki-client on console-ams.rpki-client.org