Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/IxmcthCTre6hYk4kfauBpeCCNlc.roa
File:                     IxmcthCTre6hYk4kfauBpeCCNlc.roa (raw, json)
Hash identifier:          AqRYWXxWfECeFwUUwseArXnVb7GHqMO26d5LJXmtA8s=
Subject key identifier:   23:19:9C:B6:10:93:AD:EE:A1:62:4E:24:7D:AB:81:A5:E0:82:36:57
Certificate issuer:       /CN=292c5d372319fa6175e56ca79883d12b0c6e38ec
Certificate serial:       018571153DE38C60D08DA7281446E19815AC
Authority key identifier: 29:2C:5D:37:23:19:FA:61:75:E5:6C:A7:98:83:D1:2B:0C:6E:38:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KSxdNyMZ-mF15WynmIPRKwxuOOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/IxmcthCTre6hYk4kfauBpeCCNlc.roa
Signing time:             Mon 02 Jan 2023 06:04:55 +0000
ROA not before:           Mon 02 Jan 2023 06:04:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211975
IP address blocks:        185.81.69.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 30 Jun 2023 10:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:15:3d:e3:8c:60:d0:8d:a7:28:14:46:e1:98:15:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292c5d372319fa6175e56ca79883d12b0c6e38ec
        Validity
            Not Before: Jan  2 06:04:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=23199cb61093adeea1624e247dab81a5e0823657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6e:31:c5:9c:62:8b:22:99:be:f8:b0:c8:e9:
                    34:43:5e:b9:d2:fd:db:d0:08:89:65:ec:77:2a:02:
                    02:91:45:6a:26:81:ca:25:48:9e:73:67:44:8e:72:
                    0c:df:70:1c:9e:9b:1b:4e:00:cc:b1:f8:0d:5a:ef:
                    23:89:d8:1c:37:1d:08:41:65:59:47:ba:91:98:08:
                    7e:4b:4c:39:98:16:76:d2:5c:90:68:62:f9:e6:ee:
                    3b:37:a6:42:83:7d:48:e8:7e:a0:aa:fe:7e:2f:19:
                    68:19:b6:72:59:d0:f1:75:75:84:a3:1e:8b:b7:96:
                    e5:41:7d:5b:61:4b:ff:9a:57:0c:86:bf:1d:3e:6b:
                    b9:80:ec:b3:01:bf:c2:f2:ef:d8:e7:6c:b0:65:24:
                    9e:ba:45:81:ef:04:87:32:6f:c3:95:99:97:bc:77:
                    fe:57:58:7c:ba:39:92:d8:ef:6b:32:88:e3:35:31:
                    70:d4:2d:b1:32:74:a2:29:a2:e4:19:55:ef:52:a1:
                    ef:74:8e:eb:44:df:8e:7a:e8:0a:ba:1b:66:ec:04:
                    04:c9:ed:67:d9:ee:06:1e:8b:f0:bd:11:27:09:00:
                    84:00:db:ec:00:31:38:06:f0:77:48:8e:06:89:63:
                    94:ad:12:24:c8:25:37:7b:4d:f9:08:c0:62:ea:9b:
                    14:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:19:9C:B6:10:93:AD:EE:A1:62:4E:24:7D:AB:81:A5:E0:82:36:57
            X509v3 Authority Key Identifier:
                keyid:29:2C:5D:37:23:19:FA:61:75:E5:6C:A7:98:83:D1:2B:0C:6E:38:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSxdNyMZ-mF15WynmIPRKwxuOOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/IxmcthCTre6hYk4kfauBpeCCNlc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/KSxdNyMZ-mF15WynmIPRKwxuOOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:dd:d4:ff:8d:82:97:3d:38:36:05:d2:a8:67:d0:0d:9e:f8:
         8a:4f:7c:22:c4:1f:30:42:20:bf:10:77:41:ae:79:a5:bc:1e:
         48:af:f7:37:c5:ae:3d:7b:9a:b1:04:8b:70:19:3d:cd:5e:37:
         39:00:52:1e:80:ed:b9:4a:c1:ed:ab:61:c0:0d:3e:e8:a2:a3:
         6c:89:41:71:ca:0f:b2:bf:7b:82:f3:10:59:55:45:63:39:0a:
         17:c9:f7:96:78:15:6d:f8:86:9a:aa:90:85:3e:21:af:10:b3:
         eb:56:af:fc:71:48:de:89:6c:71:a1:02:28:4e:0c:e7:3c:70:
         51:39:fb:4c:59:99:63:5b:f5:c7:45:df:7d:59:16:04:21:f2:
         fe:be:fc:b6:92:98:8a:55:b9:65:0d:22:ee:25:75:41:39:e0:
         c3:0d:9e:ba:d5:a4:06:99:4a:dd:ff:ac:8e:f7:52:e6:6b:ae:
         a1:f9:e8:12:cc:b5:e0:fb:a8:bc:d2:3c:d5:ee:14:b5:1d:a6:
         92:fd:77:fe:52:3a:e3:23:0d:dc:3f:32:a3:6a:bc:4d:79:1e:
         44:60:3f:cf:a8:0e:dd:f2:0e:3b:78:56:28:10:74:78:25:57:
         eb:1d:a9:18:00:52:3b:a2:f6:f4:3f:b2:13:27:ee:f6:c5:2a:
         90:b1:3c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org