Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/Pzd4ZNhjcFR3z2ILa41R_by1Ezg.roa
File:                     Pzd4ZNhjcFR3z2ILa41R_by1Ezg.roa (raw, json)
Hash identifier:          FRPXPz/RBF8rmCMSpD7Zq1JF/mrUb8EawM3AMJH5uiE=
Subject key identifier:   3F:37:78:64:D8:63:70:54:77:CF:62:0B:6B:8D:51:FD:BC:B5:13:38
Certificate issuer:       /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial:       0188DD56F8B3E9DF543F3EC9647091C8A81F
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/Pzd4ZNhjcFR3z2ILa41R_by1Ezg.roa
Signing time:             Wed 21 Jun 2023 09:44:04 +0000
ROA not before:           Wed 21 Jun 2023 09:44:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        185.63.35.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 03 Dec 2023 16:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:dd:56:f8:b3:e9:df:54:3f:3e:c9:64:70:91:c8:a8:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
        Validity
            Not Before: Jun 21 09:44:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3f377864d863705477cf620b6b8d51fdbcb51338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:27:51:f2:3f:24:39:94:89:e6:f8:81:c6:30:
                    31:9c:78:fd:96:b7:c8:9b:41:1c:94:f6:88:bf:53:
                    c6:24:81:bf:84:43:68:16:cd:43:1d:ba:65:1f:c3:
                    fc:79:9e:24:0a:ad:1c:e8:c9:39:93:74:63:65:46:
                    6e:49:f9:aa:f3:25:62:da:be:0e:0d:6e:6a:0b:ec:
                    7e:c6:b3:43:46:ec:9f:41:06:5b:d8:d2:ba:13:96:
                    30:d5:2e:6a:ad:40:69:c5:94:07:9c:69:ab:22:2b:
                    df:f3:76:e4:95:ef:d3:02:cc:ad:32:f5:3c:d7:6b:
                    54:c1:ef:c5:d5:24:de:63:73:62:90:44:5f:a8:62:
                    5b:74:4a:67:25:5a:5f:f7:99:37:5c:76:ed:f5:a4:
                    7e:89:9b:86:dc:7d:33:c4:fd:f4:56:01:70:c8:79:
                    5f:9a:85:e1:ca:35:27:7c:50:34:86:76:19:a6:0b:
                    49:9f:8b:87:52:fc:9d:56:a1:d1:ab:b0:ec:89:31:
                    2b:a9:6b:02:86:1d:b1:b8:94:fd:3e:1b:e3:82:b7:
                    58:03:38:39:9a:02:d3:40:0c:c4:c5:5a:54:60:9b:
                    58:1c:b4:4a:6b:54:1a:71:05:1a:d5:81:a8:53:2e:
                    0c:3c:1d:fb:21:93:70:e1:ae:37:8b:59:57:7b:23:
                    00:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:37:78:64:D8:63:70:54:77:CF:62:0B:6B:8D:51:FD:BC:B5:13:38
            X509v3 Authority Key Identifier:
                keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/Pzd4ZNhjcFR3z2ILa41R_by1Ezg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.63.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:21:21:26:b5:32:af:d6:ad:39:ef:bd:86:13:a8:85:64:21:
         19:c3:b6:fd:de:e3:12:35:6a:64:e3:b8:df:7e:00:15:c9:44:
         b0:1c:56:6b:92:d7:f6:61:90:ef:4f:3e:14:3e:d2:16:1e:f1:
         03:01:a9:e2:12:ae:64:11:48:41:b1:21:87:42:3a:d0:ce:bf:
         2d:e7:a7:d3:2d:a6:31:72:d5:1f:bd:6d:c9:6a:1b:24:1a:9c:
         32:05:39:34:f2:0e:22:1d:03:bb:1d:8c:ad:37:54:a7:1b:67:
         4d:d1:db:b8:f0:2b:ae:c0:4d:1f:55:dd:35:8d:00:c4:d6:6f:
         54:fc:7e:78:73:9b:04:76:97:f5:18:8a:b9:60:fe:e1:05:57:
         b6:9e:53:e7:02:51:cb:fd:83:54:a9:ef:17:a5:46:f6:0e:2a:
         ea:0d:68:62:43:9c:00:4a:5c:33:98:46:7a:10:ad:09:72:01:
         7b:79:d3:cb:71:bd:fe:9c:ac:b6:80:39:0b:d9:03:b5:de:44:
         71:b5:1c:9c:a3:39:1c:cd:aa:78:f9:44:19:f9:50:f5:f1:1d:
         94:4b:aa:ec:c6:f2:13:69:16:61:6b:27:8c:17:15:02:8b:a1:
         82:a4:62:9d:1b:58:d8:99:ab:8f:25:19:a3:2b:63:93:c8:ba:
         29:0b:df:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:23 2024 by rpki-client on console-ams.rpki-client.org