Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/_Jh0ZCThicThbDLihBKV2lnqQbI.roa
File:                     _Jh0ZCThicThbDLihBKV2lnqQbI.roa (raw, json)
Hash identifier:          YcDLjlyRWDfRQSD1aoenRzAKlEoUG3QbDNdp1rfy+ww=
Subject key identifier:   FC:98:74:64:24:E1:89:C4:E1:6C:32:E2:84:12:95:DA:59:EA:41:B2
Certificate issuer:       /CN=6b60412823a0224a5d00e4963d6b23d22504997d
Certificate serial:       01856D01B175873920C98613EF13A4446954
Authority key identifier: 6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/_Jh0ZCThicThbDLihBKV2lnqQbI.roa
Signing time:             Sun 01 Jan 2023 11:05:05 +0000
ROA not before:           Sun 01 Jan 2023 11:05:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43872
IP address blocks:        185.178.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 03 Nov 2023 10:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:01:b1:75:87:39:20:c9:86:13:ef:13:a4:44:69:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b60412823a0224a5d00e4963d6b23d22504997d
        Validity
            Not Before: Jan  1 11:05:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fc98746424e189c4e16c32e2841295da59ea41b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:26:0d:fe:31:50:a7:d1:04:e5:93:5e:6f:89:
                    4f:b2:8b:31:3e:c7:aa:f3:09:14:28:d4:46:6e:0b:
                    37:ab:1f:30:37:74:51:a2:05:e0:2b:ac:6f:38:32:
                    dc:4e:c6:c9:38:8e:e7:47:07:cc:b0:fc:09:0c:c6:
                    29:f3:79:6c:68:52:28:6a:91:38:ea:93:ac:d4:45:
                    fc:6f:3a:2d:ea:6a:c6:d8:2a:f2:ea:b9:70:d0:2d:
                    09:55:43:3a:29:24:ba:f8:10:5c:2d:4d:5c:c3:89:
                    22:93:ce:ef:95:e9:4c:90:a0:b5:52:30:44:0a:81:
                    48:5b:ce:55:d5:50:7c:b1:b6:4b:6c:ef:01:d5:b0:
                    7f:5d:2a:92:64:75:19:79:43:03:11:17:7f:66:83:
                    86:38:7b:00:da:3a:69:8e:aa:bd:3c:11:38:1a:56:
                    d2:20:87:93:5b:a3:42:f3:3c:4f:0e:44:65:cc:35:
                    e6:c7:2b:33:3a:b1:0c:c9:06:a9:fb:2d:1d:fc:78:
                    6c:ec:f8:3d:bb:af:6d:92:fc:53:d0:42:b7:52:47:
                    7e:5e:6b:6d:42:15:73:23:44:e0:93:35:4d:97:69:
                    5a:14:32:af:f2:58:1f:ba:ea:49:bd:41:57:77:1b:
                    69:e8:d6:1b:9f:0d:e5:19:60:4f:61:51:22:98:28:
                    b2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:98:74:64:24:E1:89:C4:E1:6C:32:E2:84:12:95:DA:59:EA:41:B2
            X509v3 Authority Key Identifier:
                keyid:6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/_Jh0ZCThicThbDLihBKV2lnqQbI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.178.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:05:13:29:8e:61:4e:b7:37:92:22:04:3f:96:e0:4d:9d:18:
         bd:91:5a:0a:79:94:d6:54:8b:89:6d:e4:32:ff:52:db:8a:b3:
         8d:5d:54:86:a7:c2:f6:2b:8d:c1:ef:bf:38:2d:8d:60:ae:2b:
         b8:6c:1c:e0:b2:b2:6b:98:27:c8:06:4d:41:62:dc:78:d4:1a:
         2e:fe:f1:ae:8b:c4:88:8a:98:a8:1b:f5:e3:32:6c:91:92:39:
         8b:f5:1a:99:f8:93:5e:ad:db:85:b1:95:56:86:6f:06:6d:55:
         ef:b3:6b:67:b6:43:63:b3:e1:25:b2:84:e0:64:3a:b7:a8:e0:
         de:17:47:ff:e7:4b:10:79:7b:21:9c:f0:33:ab:2c:fc:90:39:
         dc:7c:d1:d9:9d:95:8b:41:4e:5e:52:cd:92:c1:ef:e3:72:f0:
         9d:8f:86:03:ca:69:9d:f5:18:6c:a7:67:73:e8:d8:fd:dc:37:
         e5:b4:5b:c4:b3:49:e2:59:58:68:85:7f:77:f5:1e:a0:c7:55:
         66:ba:d2:31:fc:c7:f0:12:13:52:7f:10:ba:e5:29:fa:4c:6e:
         b6:91:65:15:3c:55:d0:44:f5:4c:6f:a4:0b:f5:07:60:2d:fe:
         1b:64:f6:19:a1:69:ec:b8:a8:6d:2d:30:74:49:fd:b0:03:68:
         d9:c0:d1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:59 2024 by rpki-client on console-ams.rpki-client.org