Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/aWvnCP5OOFtEK8UUXdE2Mh0S2C0.roa
File:                     aWvnCP5OOFtEK8UUXdE2Mh0S2C0.roa (raw, json)
Hash identifier:          aXw0opIXkqwpbkrqULg0/fqQY3da9JGEmCSf45CpAL4=
Subject key identifier:   69:6B:E7:08:FE:4E:38:5B:44:2B:C5:14:5D:D1:36:32:1D:12:D8:2D
Certificate issuer:       /CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Certificate serial:       018B14516E8C56C6F1A534D13B71288DB4AB
Authority key identifier: 10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/aWvnCP5OOFtEK8UUXdE2Mh0S2C0.roa
Signing time:             Mon 09 Oct 2023 12:02:42 +0000
ROA not before:           Mon 09 Oct 2023 12:02:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42244
IP address blocks:        185.115.142.0/24 maxlen: 24
                          185.115.140.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:14:51:6e:8c:56:c6:f1:a5:34:d1:3b:71:28:8d:b4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d7038b83eb247fc65bdad0195b86246f8f3006
        Validity
            Not Before: Oct  9 12:02:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=696be708fe4e385b442bc5145dd136321d12d82d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:39:ae:f3:42:49:16:60:d7:d7:25:97:b9:fe:
                    3d:2b:8d:a4:83:d0:8d:e3:86:55:9d:28:4d:d9:df:
                    52:a5:d3:b6:7c:4b:cf:a9:25:f5:af:5a:b1:aa:4a:
                    0f:37:6b:a4:57:61:c2:ae:a9:65:11:fb:8a:05:22:
                    34:0b:4b:91:b9:c3:87:fb:17:72:ac:2b:d6:57:ea:
                    e6:1b:9b:f8:17:16:14:a6:09:7f:82:d5:c6:c8:4a:
                    32:06:9f:5a:ac:48:61:b8:0d:88:75:f5:5f:c5:cc:
                    74:84:68:da:dd:f2:37:0d:3e:27:0a:54:58:06:25:
                    43:75:e8:43:b3:42:5f:4c:e8:ab:05:da:c2:c9:18:
                    59:04:16:d3:11:58:93:f7:24:db:c5:6a:bd:a5:c2:
                    41:e4:89:a2:88:94:4e:52:a1:11:6f:d8:a5:a1:ab:
                    d2:2e:ae:e2:05:12:17:f1:21:ea:aa:be:06:b7:3b:
                    90:ae:c6:bc:33:60:07:4e:59:f5:c5:60:cf:65:59:
                    d0:c2:8a:3c:26:0e:0a:f1:15:9d:cf:d9:34:36:ca:
                    5c:1a:90:c5:e2:5d:91:77:f5:77:09:67:43:36:f1:
                    c7:3b:b4:e7:80:22:b0:6c:4b:fd:45:06:aa:c7:2f:
                    10:4e:22:c5:99:a1:99:88:df:fc:41:74:2f:a8:c1:
                    bc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6B:E7:08:FE:4E:38:5B:44:2B:C5:14:5D:D1:36:32:1D:12:D8:2D
            X509v3 Authority Key Identifier:
                keyid:10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/aWvnCP5OOFtEK8UUXdE2Mh0S2C0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.140.0/24
                  185.115.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:a6:f8:07:fa:92:75:7a:43:07:c4:8d:30:1f:40:db:03:a5:
         13:74:85:0e:59:b8:1d:bd:7a:41:a9:7f:ef:20:6f:59:2a:1d:
         39:e3:60:07:66:ca:fe:74:a7:67:76:7b:d2:77:40:44:38:76:
         90:d8:f2:68:3f:60:f6:26:75:b8:58:ab:42:93:66:c9:34:8a:
         f7:54:e6:d5:c6:32:ce:63:ac:67:3c:df:90:41:5a:c8:3f:ca:
         e6:3c:bf:89:93:b7:67:b6:2c:ff:86:be:2f:1a:9d:5e:9f:b2:
         b1:96:86:7e:df:2e:2a:a3:94:51:f4:25:72:63:2b:64:37:d3:
         2e:61:71:4d:71:c2:31:c0:13:bf:b5:88:cb:a2:95:73:77:5b:
         54:b2:6e:04:9c:85:1b:67:b1:3b:27:5f:ae:9d:48:11:4f:06:
         6d:a8:b0:b9:67:7b:88:d7:58:a1:2e:97:a9:07:b4:be:32:12:
         1a:0d:d9:cd:3e:a9:9d:09:0c:62:bc:96:aa:52:23:b2:7c:7f:
         5c:02:94:e7:53:c6:55:1d:e5:ea:df:26:2b:11:63:36:b7:07:
         77:cd:dc:97:bc:0f:c4:4f:a1:93:a5:11:9f:d9:bf:19:a2:b4:
         ef:72:43:59:04:3e:d5:f6:44:27:33:e6:2f:fa:ea:a1:46:9b:
         45:3d:6f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:40 2024 by rpki-client on console-ams.rpki-client.org