Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/CoGwl86myRwGZK0WbBMAzjjUg6Q.roa
File:                     CoGwl86myRwGZK0WbBMAzjjUg6Q.roa (raw, json)
Hash identifier:          l5ry057GH3A4rai5XvAXuMhR1yIHyc0hDC5/IxMWZis=
Subject key identifier:   0A:81:B0:97:CE:A6:C9:1C:06:64:AD:16:6C:13:00:CE:38:D4:83:A4
Certificate issuer:       /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial:       018B19410E14520DABC658DA399F9EDA9B71
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/CoGwl86myRwGZK0WbBMAzjjUg6Q.roa
Signing time:             Tue 10 Oct 2023 11:02:55 +0000
ROA not before:           Tue 10 Oct 2023 11:02:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        185.193.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:19:41:0e:14:52:0d:ab:c6:58:da:39:9f:9e:da:9b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
        Validity
            Not Before: Oct 10 11:02:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0a81b097cea6c91c0664ad166c1300ce38d483a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d8:90:1c:da:b6:20:b7:92:cb:06:c5:f9:47:
                    93:98:2a:9a:ff:31:f3:29:12:1e:7f:68:15:c7:91:
                    0a:84:05:25:88:8f:19:af:03:68:b2:71:00:09:f2:
                    70:a3:0a:bb:65:89:65:e6:2b:c9:c1:8e:c8:c5:92:
                    2c:13:85:92:cb:78:30:39:9b:ec:da:ce:8a:0f:71:
                    cc:62:be:9e:5d:ef:53:e1:b6:10:f7:bc:74:84:d9:
                    31:e9:d2:6a:36:af:fe:f0:1c:a0:86:d8:a9:ac:99:
                    ec:8f:73:02:82:49:f4:b2:8d:02:23:47:14:b4:35:
                    9d:fb:b3:52:15:6e:ee:f6:61:bc:04:fe:4d:5e:19:
                    e3:52:96:db:34:1e:1a:30:7c:d1:6f:c8:05:3b:c0:
                    d9:97:3a:ed:78:f7:35:e1:3d:d0:c3:bb:a1:0c:a1:
                    78:52:a7:86:32:db:06:6a:ae:ed:e0:9b:06:91:43:
                    e9:19:9c:bb:f8:69:48:02:66:81:a5:cf:cc:23:78:
                    85:fe:bb:67:92:7d:23:f1:85:e9:f1:41:76:2b:c4:
                    dc:3e:4c:d6:9a:e1:6e:36:63:ab:22:2d:79:00:57:
                    a5:8d:c2:08:da:65:dc:53:a4:d8:02:52:f2:ff:7b:
                    50:04:f0:41:58:71:af:8e:92:cf:80:d6:27:c1:fb:
                    40:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:81:B0:97:CE:A6:C9:1C:06:64:AD:16:6C:13:00:CE:38:D4:83:A4
            X509v3 Authority Key Identifier:
                keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/CoGwl86myRwGZK0WbBMAzjjUg6Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:83:f6:79:90:3c:c9:23:8f:ee:d1:ac:ad:e8:6b:3c:32:62:
         42:3b:83:c3:75:08:38:8f:ff:4c:fa:e4:52:eb:91:9a:ca:38:
         a9:29:5c:f6:1e:4a:71:70:a2:2a:6e:fd:f2:9b:26:26:d4:ed:
         0e:a9:1a:96:f6:c0:71:c8:3b:07:36:19:63:a4:19:aa:b1:df:
         e6:d8:e3:18:46:ee:8e:ef:ff:2e:f0:4e:93:71:86:0c:6f:7f:
         4a:6f:b9:34:96:5e:49:ae:e9:71:2c:a4:a6:20:0a:62:5a:02:
         11:94:1e:3e:b2:fe:9d:b6:37:32:62:56:b8:2d:07:69:db:15:
         4b:94:75:70:20:8b:31:80:a8:9d:ef:a4:6d:f9:90:9b:4b:73:
         8f:18:c0:bc:db:ff:a9:ad:8b:2f:06:45:0a:74:3e:8b:20:c1:
         c9:6b:4b:94:e1:a4:6e:88:5f:ea:a9:17:18:07:26:52:eb:14:
         63:fe:11:bc:80:ca:6e:1c:a1:8c:08:2e:e5:39:fa:f8:11:2b:
         6b:5f:46:a7:8a:0a:70:9d:4c:27:65:68:70:ca:60:ba:33:9f:
         74:43:8e:c9:82:40:e7:70:03:c1:2d:0a:fa:31:b7:85:2a:ae:
         2b:ed:0f:2f:0d:4b:7e:3a:94:e9:32:f5:79:df:f5:2e:f2:69:
         df:e8:e0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:30 2024 by rpki-client on console-fra.rpki-client.org