Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/7wh4RSwzl_wC5taKldIgqYyTvvE.roa
File:                     7wh4RSwzl_wC5taKldIgqYyTvvE.roa (raw, json)
Hash identifier:          ifDN5PSYu6rTl0U5XDkmVxHL9S0d3Z5Tft8CIz8XOv8=
Subject key identifier:   EF:08:78:45:2C:33:97:FC:02:E6:D6:8A:95:D2:20:A9:8C:93:BE:F1
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       018A97854C974C9A9F838ABCEDF14C5199C0
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/7wh4RSwzl_wC5taKldIgqYyTvvE.roa
Signing time:             Fri 15 Sep 2023 06:26:50 +0000
ROA not before:           Fri 15 Sep 2023 06:26:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     40676
IP address blocks:        185.126.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Sep 2023 16:59:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:97:85:4c:97:4c:9a:9f:83:8a:bc:ed:f1:4c:51:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: Sep 15 06:26:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ef0878452c3397fc02e6d68a95d220a98c93bef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:64:03:be:61:72:41:22:9f:da:55:86:2d:2d:
                    30:58:db:1a:07:ce:48:1b:f3:a3:9d:d2:1d:04:27:
                    a8:06:d5:7b:c1:b9:ca:df:c1:18:bc:51:bf:71:e7:
                    ac:f7:1f:46:5e:a2:b1:08:c7:d1:82:b3:f7:6b:d9:
                    49:85:ef:74:c4:8f:ac:0d:68:73:24:d2:38:b9:ed:
                    3f:6a:8b:8d:5b:e4:97:8e:8d:d9:f0:1c:14:ec:08:
                    d8:26:d1:71:0d:bb:2c:a9:ea:df:c9:76:fd:74:14:
                    53:35:b7:bd:d5:bd:a5:35:45:78:be:92:5e:3d:e2:
                    f5:09:cb:01:64:c7:4d:48:7e:e8:aa:7b:8d:70:86:
                    d5:8f:19:d7:1b:68:f7:8c:af:2c:12:a1:c5:5f:5d:
                    53:f2:29:cc:9f:c6:50:f5:42:61:10:23:91:2b:59:
                    c0:f7:e8:76:e9:4b:0d:7f:4e:cb:8e:ad:8b:a5:aa:
                    92:b5:dc:9c:0a:1f:16:a3:3c:26:c1:00:70:f9:d0:
                    98:d8:87:c9:31:97:9e:1f:12:c7:ab:d9:7e:05:54:
                    78:85:84:05:e8:71:cf:c1:bc:e7:be:c2:e6:b4:81:
                    f7:b4:6a:2e:eb:65:a0:d4:3a:4e:19:d6:bc:58:6f:
                    e5:0f:35:2f:42:89:f9:42:3f:de:6c:6a:e2:f4:eb:
                    ba:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:08:78:45:2C:33:97:FC:02:E6:D6:8A:95:D2:20:A9:8C:93:BE:F1
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/7wh4RSwzl_wC5taKldIgqYyTvvE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.126.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:cb:b9:97:22:76:31:03:c6:0d:37:0b:f9:c4:4b:19:c5:7f:
         7f:a1:79:99:3a:54:57:f6:e2:03:9d:ec:e0:23:e7:1a:eb:f2:
         f1:e0:a1:dd:02:df:55:3e:67:99:83:b9:dc:b3:63:da:1a:b7:
         89:fc:33:b0:43:e4:90:3f:6b:1b:cb:2f:93:79:77:fe:8b:f0:
         2c:26:39:18:0e:34:e7:d9:d6:9f:e8:e1:d6:ee:39:28:b4:31:
         b3:a4:34:b7:97:ba:e5:bf:17:eb:e0:72:a4:70:6d:00:bb:b0:
         75:e5:4b:48:45:0d:7c:08:f5:be:cf:3b:af:43:6b:79:59:68:
         34:a9:06:96:1b:fe:56:67:f9:ee:4a:9d:ca:73:15:4a:f5:d4:
         63:e7:65:d2:3a:d9:bc:f2:fa:87:f0:56:3a:85:e2:14:bd:17:
         f5:d5:aa:d8:8f:dd:85:f1:0e:47:a0:7b:c0:cd:ff:22:ba:ea:
         67:bb:60:68:b5:0b:f4:c4:72:bb:f2:d2:f6:2c:ef:79:d0:73:
         36:a8:3b:ea:33:21:94:fb:c9:8c:93:6e:19:4a:30:39:df:21:
         a9:cf:a8:e2:a7:c1:5f:df:ac:de:56:fd:49:ad:80:44:6a:1c:
         a5:84:75:ee:0b:7b:53:7d:b8:15:52:74:d3:ec:5e:68:27:95:
         2c:3f:b8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:30 2024 by rpki-client on console-ams.rpki-client.org