Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/RvcwkEUXibJbDv2Ui32O-_458yM.roa
File:                     RvcwkEUXibJbDv2Ui32O-_458yM.roa (raw, json)
Hash identifier:          PD67S+KcKOAxQS8FddpPqIrVeMDL9G8By/0c6h0WR9w=
Subject key identifier:   46:F7:30:90:45:17:89:B2:5B:0E:FD:94:8B:7D:8E:FB:FE:39:F3:23
Certificate issuer:       /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial:       01887B6674093061F495BF5BA10F2B9E1B12
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/RvcwkEUXibJbDv2Ui32O-_458yM.roa
Signing time:             Fri 02 Jun 2023 09:18:11 +0000
ROA not before:           Fri 02 Jun 2023 09:18:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.193.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 10 Oct 2023 11:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:7b:66:74:09:30:61:f4:95:bf:5b:a1:0f:2b:9e:1b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
        Validity
            Not Before: Jun  2 09:18:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=46f73090451789b25b0efd948b7d8efbfe39f323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ad:81:0c:51:02:fc:d0:94:24:ee:72:e2:a6:
                    3a:6f:1b:07:90:3d:51:94:dd:cc:02:34:a3:7b:bc:
                    60:57:cf:00:3a:b6:56:b5:5a:c6:6e:f0:b9:fd:cf:
                    e5:68:99:21:37:8b:e5:6a:7e:20:02:4b:94:3e:e5:
                    d3:1f:5a:28:60:b3:c3:54:1a:fd:25:f2:c2:2c:72:
                    d5:0c:18:d4:7c:c6:b5:13:be:97:23:d5:77:be:20:
                    50:ce:05:70:df:c6:45:69:96:ea:a2:ef:3c:c8:72:
                    8d:1a:24:d2:7d:10:e7:51:ba:54:fd:98:47:03:49:
                    19:53:a3:8e:2b:db:d5:d1:28:ac:82:dd:41:5d:4e:
                    c8:4a:ed:d3:8d:e4:6e:43:6e:8d:e2:32:a4:17:09:
                    32:79:ef:5c:a9:f0:b5:ef:71:a7:d5:76:8a:84:95:
                    bc:27:29:a9:03:8f:5c:6e:17:bd:e3:49:58:14:0a:
                    6d:19:05:c5:e4:e9:34:11:fd:c3:7f:74:a7:2c:8b:
                    4e:4c:80:44:31:71:1d:f5:c6:7e:c1:0f:b8:e4:99:
                    e1:1c:89:b8:03:cb:a1:eb:5e:db:1f:03:ba:9f:d4:
                    32:fd:f2:7b:91:b9:22:b9:a8:a0:24:65:58:ce:f5:
                    cd:bc:c5:fb:a6:92:09:3c:2a:78:95:1f:53:65:0a:
                    74:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F7:30:90:45:17:89:B2:5B:0E:FD:94:8B:7D:8E:FB:FE:39:F3:23
            X509v3 Authority Key Identifier:
                keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/RvcwkEUXibJbDv2Ui32O-_458yM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:61:a5:ed:70:da:9d:b4:68:bf:a9:c8:ec:ea:04:cd:c3:31:
         a3:b6:85:04:63:f5:22:21:14:8d:49:8f:8d:73:a8:54:ee:97:
         e9:d7:53:ad:51:f7:c0:e6:07:2c:a3:ec:08:16:74:59:78:f9:
         ce:25:26:b0:ce:cf:f8:3a:e0:3a:ec:19:5c:38:3e:5e:9a:db:
         64:0f:c2:3a:b7:ac:76:87:22:fb:f1:a7:b7:d1:86:c8:11:ac:
         f5:4c:a4:fd:af:d7:56:55:36:65:a0:a7:c1:44:ca:a5:71:4e:
         91:75:09:2c:00:6f:92:8a:04:82:cc:4e:8a:a2:49:f9:64:5c:
         1d:b2:5c:9a:0d:6b:87:81:e8:be:8a:97:4e:eb:95:27:a0:8d:
         f3:e5:d3:8b:a1:6d:7c:52:0e:ab:82:3e:8c:e0:cf:8c:0d:54:
         7c:4f:19:f6:8a:51:3f:ef:c7:29:b7:72:7a:72:82:ee:3f:0f:
         10:43:4c:ec:58:46:53:dc:78:c3:72:ef:88:4f:f3:a3:b7:a9:
         ed:23:63:2b:8a:59:1a:6c:da:71:bd:66:08:3f:50:56:0f:a0:
         b5:b4:0e:fb:e5:fb:85:13:d3:29:b1:7f:d4:ac:44:b0:1a:5a:
         ca:c6:9f:44:ad:c4:57:64:58:2e:16:6a:c7:5f:c7:da:aa:0c:
         6a:e5:3d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:41 2024 by rpki-client on console-ams.rpki-client.org