Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/wF_Qr1qIR705Zb-yY7WZOtrArgI.roa
File:                     wF_Qr1qIR705Zb-yY7WZOtrArgI.roa (raw, json)
Hash identifier:          bYE2fgra6WjKzvjDV/L32sguA2s/uW0po6PvhccQvXc=
Subject key identifier:   C0:5F:D0:AF:5A:88:47:BD:39:65:BF:B2:63:B5:99:3A:DA:C0:AE:02
Certificate issuer:       /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial:       01856C5C9C9BBDD2F05005FCF82D96CF3132
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/wF_Qr1qIR705Zb-yY7WZOtrArgI.roa
Signing time:             Sun 01 Jan 2023 08:04:46 +0000
ROA not before:           Sun 01 Jan 2023 08:04:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3356
IP address blocks:        185.81.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 05 Oct 2023 14:14:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:5c:9c:9b:bd:d2:f0:50:05:fc:f8:2d:96:cf:31:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
        Validity
            Not Before: Jan  1 08:04:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c05fd0af5a8847bd3965bfb263b5993adac0ae02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:af:57:8a:03:c0:ba:52:17:a7:f9:e7:19:3a:
                    54:bc:5f:44:a4:f3:3b:7a:99:c8:13:83:ab:64:66:
                    fb:50:ab:53:ad:56:a2:81:4a:86:e8:30:fc:61:fd:
                    e1:47:2b:31:93:2c:0c:f1:4a:f0:e3:c6:b0:38:be:
                    06:06:bb:f0:35:f5:d1:29:bd:08:6e:fb:ca:52:e5:
                    70:78:f0:9b:66:07:4d:e6:a5:b6:59:59:92:1c:04:
                    47:26:ed:0d:d5:06:95:3e:7f:4e:2c:59:ff:93:74:
                    c3:75:8e:e6:06:f0:b3:3e:d7:0c:d5:9d:40:e7:62:
                    4a:fb:16:fd:94:50:04:44:06:2a:ec:3f:16:4a:cf:
                    23:f6:25:91:32:43:14:5b:95:8b:8d:1b:71:0d:73:
                    79:5f:41:8e:8a:3d:c9:db:fe:e0:61:e3:fb:35:04:
                    6b:02:6c:bc:74:ee:7f:5f:b7:f8:49:f3:39:1a:18:
                    ba:8e:ba:d6:35:1f:ba:f5:03:fb:f8:58:3f:63:56:
                    bb:aa:7d:21:1d:0d:18:a4:84:54:8c:08:3c:c1:3e:
                    08:99:6d:44:c9:ad:82:04:92:c2:02:0a:8d:bc:cf:
                    e4:1d:21:0c:1a:db:a7:3a:96:b5:da:91:a6:b2:a7:
                    0b:a7:b8:40:b2:17:6c:72:6d:ca:f3:79:4c:a1:6d:
                    ca:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5F:D0:AF:5A:88:47:BD:39:65:BF:B2:63:B5:99:3A:DA:C0:AE:02
            X509v3 Authority Key Identifier:
                keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/wF_Qr1qIR705Zb-yY7WZOtrArgI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:fa:0e:13:36:34:21:a5:4b:64:f1:e4:c5:8b:46:7f:7d:7f:
         8d:7d:a4:ed:72:e3:2f:bb:ee:42:ca:77:d3:52:92:03:a4:41:
         e3:a7:79:94:43:38:42:fe:b5:55:4f:58:f2:fb:38:de:48:90:
         95:52:cf:68:12:1f:3a:7d:5b:44:64:98:bf:9d:18:62:13:ce:
         38:c7:e6:fc:27:25:9f:d7:9e:f0:97:a8:67:79:97:41:20:a0:
         bf:22:0c:39:06:a6:77:79:43:86:a7:2c:1b:02:ec:87:31:2d:
         23:6b:37:9c:9c:5c:76:97:82:e1:21:14:83:2f:e4:17:d7:bb:
         0e:22:1f:53:95:22:be:ee:72:a8:d5:d1:c3:f3:5f:7a:0b:6c:
         fe:c9:67:29:c4:6e:06:6d:cd:7a:d2:00:cc:d0:2c:2e:b9:0b:
         65:8e:a5:5c:f8:a8:d1:ec:53:65:95:bb:8f:15:e4:9c:2e:a8:
         e8:e6:f2:ae:da:33:4e:aa:bc:96:eb:e9:1d:27:47:22:35:43:
         24:99:65:59:25:cd:19:9a:bd:65:42:44:39:ff:57:eb:85:a9:
         9d:27:76:ea:72:e5:05:69:01:36:6f:48:09:af:98:7b:43:0a:
         9a:63:4d:80:f9:31:5f:e8:0f:6c:2a:e7:ae:98:0e:a4:99:38:
         1a:60:98:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:12 2024 by rpki-client on console-fra.rpki-client.org