Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/3n_c7TfWWsNkOQ_RZB3HjeN-n-8.roa
File:                     3n_c7TfWWsNkOQ_RZB3HjeN-n-8.roa (raw, json)
Hash identifier:          0sVVfsnJP41rZB/Xw3re/WszXp3rpOcUvYaCg71V7YY=
Subject key identifier:   DE:7F:DC:ED:37:D6:5A:C3:64:39:0F:D1:64:1D:C7:8D:E3:7E:9F:EF
Certificate issuer:       /CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Certificate serial:       018B14516ECF8BC73C51D85D24090C6C597A
Authority key identifier: 10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/3n_c7TfWWsNkOQ_RZB3HjeN-n-8.roa
Signing time:             Mon 09 Oct 2023 12:02:42 +0000
ROA not before:           Mon 09 Oct 2023 12:02:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61424
IP address blocks:        185.115.141.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:14:51:6e:cf:8b:c7:3c:51:d8:5d:24:09:0c:6c:59:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d7038b83eb247fc65bdad0195b86246f8f3006
        Validity
            Not Before: Oct  9 12:02:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=de7fdced37d65ac364390fd1641dc78de37e9fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:49:72:7d:5b:e2:cb:45:df:19:ed:45:78:61:
                    7e:96:6f:10:b1:ef:6c:f0:a3:c8:30:bd:ea:82:e1:
                    31:6f:aa:c5:5d:f7:c4:26:b4:95:86:2c:e1:61:04:
                    97:76:23:69:fe:dd:c2:a7:5f:b1:7d:40:1e:62:a0:
                    28:8a:a9:02:b4:81:64:5e:22:64:4f:16:12:3b:1d:
                    a7:79:24:52:7e:af:6f:e8:2f:7b:a5:e6:11:50:87:
                    31:ef:3a:34:cf:00:ba:1d:79:81:f4:6f:c6:57:c2:
                    ce:0f:1d:4d:d9:af:65:eb:1d:eb:50:e9:8f:ed:ed:
                    32:57:59:b5:32:8d:d0:65:3d:a3:64:a7:b9:9e:12:
                    31:23:fe:13:bc:7d:00:ab:c5:f9:2d:93:7d:55:ca:
                    88:4e:f9:51:e1:9a:1f:8a:ff:63:b0:f2:1b:41:4f:
                    e8:f0:ae:6e:d0:ad:b3:43:66:97:64:6b:f1:45:0f:
                    83:ea:cb:72:62:f4:fd:f4:bb:39:a5:6b:36:64:f8:
                    04:34:8e:c6:4e:cb:fb:67:2b:df:5c:7f:b9:eb:6e:
                    71:5f:29:3d:a6:6d:df:c9:af:cb:84:b5:36:11:ca:
                    9c:38:ab:db:50:5a:af:8f:33:38:97:89:13:bb:db:
                    ac:fa:c1:bb:a8:a0:cb:9a:67:84:4a:3f:87:fb:0e:
                    f3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7F:DC:ED:37:D6:5A:C3:64:39:0F:D1:64:1D:C7:8D:E3:7E:9F:EF
            X509v3 Authority Key Identifier:
                keyid:10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/3n_c7TfWWsNkOQ_RZB3HjeN-n-8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:b8:a9:c6:43:83:64:38:34:9d:ea:aa:cc:37:c3:2a:f8:3c:
         2a:26:78:3a:f6:74:f6:d3:5d:6b:f6:e7:11:2a:05:88:10:bc:
         5b:6e:43:f0:55:50:d6:af:73:3e:ed:53:61:f0:ba:6f:da:f2:
         92:f6:54:1f:e8:81:f3:15:a2:d7:56:14:a5:bf:16:4b:c3:46:
         49:ef:e6:4e:fa:1e:55:d3:c1:96:51:1e:08:0a:bc:04:4d:60:
         04:e8:6f:ac:ad:bc:50:b5:e0:c9:41:a2:61:11:5f:83:08:bb:
         10:b3:3f:d2:59:ef:02:c5:12:d1:bd:9d:2b:e9:1a:ab:ca:f7:
         23:85:e8:46:4e:14:eb:12:3d:16:76:ed:ed:ee:21:be:1d:d5:
         b4:40:f5:3e:02:5f:52:4a:27:4a:aa:fc:18:48:28:04:ff:47:
         2b:c7:65:7d:a5:da:9c:8c:d1:1b:c5:0b:54:ca:05:9e:ab:48:
         06:19:a3:f9:b4:eb:b8:e2:92:7b:d5:3a:10:54:36:8c:a3:2b:
         2e:9e:cc:44:43:23:de:a9:64:48:fc:f9:54:89:b5:db:c3:5f:
         6f:e7:34:5e:83:88:d3:1a:3b:fa:7f:97:9a:d6:02:93:31:73:
         3c:bd:a2:08:70:9e:dc:4c:9b:a2:c5:b6:5e:81:86:7a:41:18:
         78:30:c4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:30 2024 by rpki-client on console-fra.rpki-client.org