Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/V8rrjJzB74T39EdsaUByEPRVBec.roa
File:                     V8rrjJzB74T39EdsaUByEPRVBec.roa (raw, json)
Hash identifier:          icGVhaHYogGDrBNOyEJjUCiRJmIZrzPoirqBNWoiFZs=
Subject key identifier:   57:CA:EB:8C:9C:C1:EF:84:F7:F4:47:6C:69:40:72:10:F4:55:05:E7
Certificate issuer:       /CN=5140b5cb5986084126f68d6032316d3b1b57696e
Certificate serial:       0186288946DCB48713801CE9AEA59CC38224
Authority key identifier: 51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/V8rrjJzB74T39EdsaUByEPRVBec.roa
Signing time:             Mon 06 Feb 2023 21:02:10 +0000
ROA not before:           Mon 06 Feb 2023 21:02:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199462
IP address blocks:        185.101.78.0/24 maxlen: 24
                          185.101.77.0/24 maxlen: 24
                          185.101.76.0/24 maxlen: 24
                          185.101.79.0/24 maxlen: 24
                          2a06:1b83::/32 maxlen: 32
                          2a06:1b80::/29 maxlen: 29
                          2a06:1b81::/32 maxlen: 32
                          2a06:1b84::/32 maxlen: 32
                          2a06:1b87:b00::/48 maxlen: 48
                          2a06:1b87:300::/48 maxlen: 48
                          2a06:1b87:600::/48 maxlen: 48
                          2a06:1b87:d00::/48 maxlen: 48
                          2a06:1b87:900::/48 maxlen: 48
                          2a06:1b87:500::/48 maxlen: 48
                          2a06:1b87:800::/48 maxlen: 48
                          2a06:1b87:200::/48 maxlen: 48
                          2a06:1b87:f00::/48 maxlen: 48
                          2a06:1b87:c00::/48 maxlen: 48
                          2a06:1b87:400::/48 maxlen: 48
                          2a06:1b87:e00::/48 maxlen: 48
                          2a06:1b87:100::/48 maxlen: 48
                          2a06:1b87:a00::/48 maxlen: 48
                          2a06:1b87:700::/48 maxlen: 48
                          2a06:1b87::/32 maxlen: 32
                          2001:67c:11bc::/48 maxlen: 48
                          2a06:1b80::/32 maxlen: 32
                          2a06:1b86::/32 maxlen: 32
                          2a06:1b85::/32 maxlen: 32
                          2a06:1b82::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 29 Dec 2023 16:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:28:89:46:dc:b4:87:13:80:1c:e9:ae:a5:9c:c3:82:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5140b5cb5986084126f68d6032316d3b1b57696e
        Validity
            Not Before: Feb  6 21:02:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=57caeb8c9cc1ef84f7f4476c69407210f45505e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d0:17:97:d3:9f:77:91:69:12:a0:20:a5:78:
                    49:91:78:34:e7:80:73:0c:11:bb:c0:68:12:ad:95:
                    f1:30:0e:5c:04:93:58:31:82:d0:38:84:7c:d9:07:
                    b8:a9:ba:f7:36:51:53:3d:6c:1d:bf:46:61:31:56:
                    77:e9:a1:b0:6d:7a:1c:aa:08:7a:7d:52:4a:11:bf:
                    ae:d2:be:1c:ba:c3:a2:af:37:0f:4e:9f:42:7b:40:
                    04:c4:06:3f:67:5e:cb:97:31:91:ff:48:4f:f5:8a:
                    11:b2:a6:c4:28:17:a0:13:30:40:61:9a:ce:0a:3e:
                    bf:9f:9a:05:a7:ee:e6:3f:0c:ae:b0:e6:89:85:5e:
                    a6:1a:6d:1e:3d:d3:95:be:be:1b:90:94:87:16:4f:
                    86:5e:bc:76:9c:24:46:74:a2:14:ab:69:e8:77:23:
                    e0:16:9a:d6:26:2b:51:56:0b:ea:8f:9e:fd:b2:a5:
                    80:e3:3e:bb:39:a8:12:e0:89:02:b9:f3:13:b9:a4:
                    ba:f1:c5:95:2f:67:74:82:96:55:d3:a8:86:bc:3a:
                    d6:ef:bf:98:4a:66:e4:92:91:32:a8:f6:df:b8:11:
                    48:06:ed:b7:5e:8c:25:7b:ad:a8:f3:c4:2e:09:47:
                    cd:9b:1e:9e:7f:97:01:41:49:88:75:da:47:cf:cd:
                    a0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CA:EB:8C:9C:C1:EF:84:F7:F4:47:6C:69:40:72:10:F4:55:05:E7
            X509v3 Authority Key Identifier:
                keyid:51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/V8rrjJzB74T39EdsaUByEPRVBec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.101.76.0/22
                IPv6:
                  2001:67c:11bc::/48
                  2a06:1b80::/29

    Signature Algorithm: sha256WithRSAEncryption
         32:d0:dd:35:f0:77:65:ce:92:6c:f5:88:0f:ca:b0:d5:d3:5e:
         2c:a2:3a:e4:10:69:71:89:f7:bd:d3:d6:42:ad:e9:79:12:f1:
         15:02:3b:9d:f6:91:73:39:0e:23:f0:54:24:4b:ff:3b:46:19:
         97:a2:55:27:ea:fc:c8:9b:61:25:4c:fb:3f:fb:96:74:0f:2e:
         e0:10:31:1e:dc:cc:5e:1e:d3:b4:a7:5e:07:53:8b:4a:91:af:
         97:99:30:b1:5a:25:8a:9a:65:e2:86:b5:fe:a4:cc:ac:b6:ec:
         64:4c:e0:0e:35:f4:e1:3b:b0:a9:72:70:a0:ba:81:4c:48:06:
         06:c1:e5:fb:1a:83:52:3b:39:cf:5e:b2:95:c9:8d:3b:94:82:
         79:62:00:88:ce:c7:78:71:92:cb:ce:ed:45:7e:e3:53:a4:db:
         68:63:aa:68:26:c0:9d:4c:c3:b8:28:75:0b:95:a1:9d:d3:f3:
         53:3d:2b:29:31:ef:d7:f0:a5:c6:0f:a6:63:90:27:4a:8d:60:
         60:6f:ec:4f:c4:56:b9:46:14:87:1e:50:84:24:57:bb:ce:25:
         a9:53:c9:8f:5a:48:7f:01:ea:e9:f9:f6:32:46:a2:1b:88:59:
         0a:f5:4d:31:02:dc:8a:49:73:18:e9:4b:73:be:ff:a1:22:bd:
         d4:80:74:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:07 2024 by rpki-client on console-ams.rpki-client.org