Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/n2iCrHpYslxd-OZv86fOyHWlljk.roa
File:                     n2iCrHpYslxd-OZv86fOyHWlljk.roa (raw, json)
Hash identifier:          0VQXMOa54EA43kkp+FXCTs3ClixvF61mCaO+lqzpS7U=
Subject key identifier:   9F:68:82:AC:7A:58:B2:5C:5D:F8:E6:6F:F3:A7:CE:C8:75:A5:96:39
Certificate issuer:       /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial:       018572B41FE899C0714969940DE5428374E7
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/n2iCrHpYslxd-OZv86fOyHWlljk.roa
Signing time:             Mon 02 Jan 2023 13:38:05 +0000
ROA not before:           Mon 02 Jan 2023 13:38:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        185.215.115.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:31:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:b4:1f:e8:99:c0:71:49:69:94:0d:e5:42:83:74:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
        Validity
            Not Before: Jan  2 13:38:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9f6882ac7a58b25c5df8e66ff3a7cec875a59639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ab:e9:40:07:7e:ed:53:c4:04:69:6d:92:0b:
                    31:e0:12:70:b0:7e:51:c2:1e:5b:9d:b0:a2:6c:da:
                    e5:0f:f5:51:ff:13:0d:f4:db:9b:b3:c4:b8:26:b7:
                    48:84:39:2a:22:15:38:22:66:43:3c:f7:6f:6a:8a:
                    8e:89:0a:ac:b8:8e:2d:3d:33:07:c6:0e:d3:52:04:
                    45:d8:c4:d0:c3:48:f5:20:dc:75:07:7c:39:8e:f4:
                    25:12:ce:9f:e8:5c:b8:97:d1:68:46:ed:b2:1a:ed:
                    06:53:2a:8b:b8:3f:67:9f:0b:4d:e5:f2:7a:b6:57:
                    e1:54:c9:f0:a5:44:e8:bf:69:96:0b:0e:16:2c:5f:
                    de:92:a7:8f:db:aa:e9:52:a8:89:ae:c8:52:24:ff:
                    3f:73:34:e1:80:ac:08:0d:c4:eb:6e:73:57:63:15:
                    dc:f8:52:02:45:dd:c2:ea:01:65:40:ff:f8:99:90:
                    e6:e5:b3:04:52:0a:b2:2b:b5:2a:72:dd:23:67:d3:
                    ff:45:1c:75:f2:8c:cf:9b:c9:ea:13:65:b1:43:ad:
                    89:e4:8c:a9:b4:c3:24:cf:e9:e3:c0:73:e1:72:a0:
                    b6:a1:1d:4b:1d:0c:37:c0:9d:03:34:2a:f3:2e:ce:
                    b7:ed:53:3e:b9:21:84:57:c1:70:d8:5a:7b:ef:e2:
                    22:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:68:82:AC:7A:58:B2:5C:5D:F8:E6:6F:F3:A7:CE:C8:75:A5:96:39
            X509v3 Authority Key Identifier:
                keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/n2iCrHpYslxd-OZv86fOyHWlljk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:e0:cd:91:7b:25:b3:eb:c2:fd:c5:2d:93:9a:28:ae:a2:30:
         97:54:e4:3c:94:b5:b2:8a:be:ee:83:14:50:c7:de:64:3c:aa:
         c2:ac:af:3a:0c:fd:c2:67:7a:2a:0a:e1:37:80:8d:cb:f3:45:
         b6:1b:6d:7f:aa:12:d1:a1:28:6c:1f:31:f9:cb:89:72:0f:9f:
         f4:93:d6:ef:87:81:ee:e6:5c:a9:9e:6f:bd:cb:d3:54:c6:c5:
         83:88:53:97:20:57:8e:0d:a6:06:71:2f:98:7e:19:dd:8c:ce:
         95:95:d7:72:0c:46:73:35:71:ed:0b:94:c2:60:79:39:6d:10:
         6c:87:6b:57:6e:9f:7b:66:7a:6c:f0:21:d3:d2:11:7a:ac:42:
         63:11:a2:1e:14:00:ee:07:5b:1b:93:9f:68:ea:81:75:3b:19:
         a4:5f:dd:90:f5:ef:de:ab:0e:39:ee:72:65:5d:af:dd:5b:91:
         88:32:04:0c:68:43:43:82:0c:09:0b:2a:3c:74:bc:1d:c2:49:
         f8:30:c6:c3:06:5d:21:a7:ec:fc:df:8e:8e:8e:71:c8:76:bd:
         25:dc:83:39:63:b3:b3:d5:4e:be:ea:9f:8c:4f:4a:5d:b1:4e:
         70:23:58:6d:b3:3e:2d:f6:71:a2:f8:19:73:d5:bf:d4:96:63:
         11:3b:ac:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:10 2024 by rpki-client on console-fra.rpki-client.org