Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/142bFOVjjPWiOAg6Ih0ccdqv0uQ.roa
File:                     142bFOVjjPWiOAg6Ih0ccdqv0uQ.roa (raw, json)
Hash identifier:          omqV86RvT4C5opFlKKmuWNI01LagccSkjfw+8ysRdUI=
Subject key identifier:   D7:8D:9B:14:E5:63:8C:F5:A2:38:08:3A:22:1D:1C:71:DA:AF:D2:E4
Certificate issuer:       /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial:       018A60370C3A091A02123181D94A539E8CDD
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/142bFOVjjPWiOAg6Ih0ccdqv0uQ.roa
Signing time:             Mon 04 Sep 2023 12:42:14 +0000
ROA not before:           Mon 04 Sep 2023 12:42:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     13037
IP address blocks:        185.6.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Sep 2023 13:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:60:37:0c:3a:09:1a:02:12:31:81:d9:4a:53:9e:8c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
        Validity
            Not Before: Sep  4 12:42:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d78d9b14e5638cf5a238083a221d1c71daafd2e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:9c:77:ee:e5:2b:22:fd:c8:47:34:91:96:b3:
                    cb:da:69:a5:8c:de:ef:5c:9b:2a:bd:02:55:f6:31:
                    bf:88:92:e8:19:2c:53:b5:cf:a1:77:40:9a:e7:8e:
                    9a:82:90:5a:5b:7f:f6:93:28:67:14:49:e0:0d:a3:
                    7e:fb:3c:9a:82:98:e3:ed:ac:03:a3:06:7e:65:0d:
                    47:1d:79:28:a2:14:6d:7d:f7:ba:02:26:3e:f6:55:
                    f9:5c:ac:2c:6c:4f:cf:90:0a:84:51:40:2e:48:e1:
                    b5:48:3e:f0:0a:28:ab:54:01:66:b3:c2:7e:be:dd:
                    b1:d3:39:0e:52:cd:2a:5c:c7:12:3e:d4:10:fd:f9:
                    40:93:04:e3:78:59:73:b1:6d:fe:31:25:4a:3e:e1:
                    1e:75:9c:88:fd:5e:e0:58:2b:1f:f3:55:a6:6e:87:
                    a4:e2:41:e3:37:5c:eb:3d:5c:c8:4b:3b:31:b0:69:
                    fa:68:18:69:aa:51:39:88:23:91:9f:ea:ae:04:6d:
                    0f:5e:bd:2e:a5:df:d9:45:10:d7:12:9c:bb:3d:ee:
                    8e:20:ca:27:3b:db:0b:74:84:7a:a9:b7:26:e2:96:
                    0c:70:26:cc:12:e0:c1:73:09:21:20:03:68:1d:99:
                    56:9b:aa:59:83:4f:cf:4d:47:69:db:3f:17:f0:94:
                    73:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8D:9B:14:E5:63:8C:F5:A2:38:08:3A:22:1D:1C:71:DA:AF:D2:E4
            X509v3 Authority Key Identifier:
                keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/142bFOVjjPWiOAg6Ih0ccdqv0uQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.6.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:e6:2d:38:a9:04:88:d8:af:da:6b:9b:9f:f0:ea:b8:4a:ed:
         64:75:9b:d7:06:6b:e2:8a:f0:a6:80:3a:2a:24:49:ea:61:59:
         27:e1:3b:63:94:af:2f:ac:1d:d0:04:d1:9b:1d:6d:ed:eb:cf:
         a7:95:b2:64:2d:d4:7a:5e:89:8b:38:cb:a2:b5:53:75:7a:fa:
         fe:45:c8:61:fd:0b:08:5b:d5:71:2f:c9:24:77:2c:f7:2e:77:
         a3:a3:4b:7b:a2:a1:56:5d:c2:a8:54:2d:40:7a:71:b9:ce:61:
         44:2d:c5:c5:3a:95:e7:b8:fb:a3:3e:0e:30:ab:77:c8:56:58:
         cc:49:94:b5:df:3d:e2:db:4d:44:b0:1d:b9:7b:41:d2:f3:6e:
         e8:e6:24:b5:be:60:01:2a:37:11:de:aa:7d:15:38:f6:3f:63:
         fc:76:51:24:c3:14:af:4f:fe:b4:43:d5:59:78:f9:08:f7:a1:
         23:5f:78:17:92:f6:4f:b5:7e:fe:3b:5a:2d:67:bd:7e:8a:f9:
         88:81:d1:03:d1:66:cf:93:c5:e5:fb:cb:f0:d7:1b:cb:d6:c7:
         96:4c:b6:e5:99:32:54:6d:10:58:d7:c8:54:b7:90:44:3e:16:
         10:91:e8:dc:1f:88:54:cf:f9:9c:de:80:73:48:4e:9d:db:e9:
         e2:ac:ad:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:34 2024 by rpki-client on console-fra.rpki-client.org