Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/BeSKtYPIGDhkZ_5gdnbyaTGsKBo.roa
File:                     BeSKtYPIGDhkZ_5gdnbyaTGsKBo.roa (raw, json)
Hash identifier:          lqkIg2u4fUd8tDEa/QOz3D93ZzTspjetbcdOtWuAlOs=
Subject key identifier:   05:E4:8A:B5:83:C8:18:38:64:67:FE:60:76:76:F2:69:31:AC:28:1A
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       01856DC1D5791A0DC935A002B94D6C157D83
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/BeSKtYPIGDhkZ_5gdnbyaTGsKBo.roa
Signing time:             Sun 01 Jan 2023 14:34:57 +0000
ROA not before:           Sun 01 Jan 2023 14:34:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206435
IP address blocks:        185.126.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:c1:d5:79:1a:0d:c9:35:a0:02:b9:4d:6c:15:7d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: Jan  1 14:34:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=05e48ab583c818386467fe607676f26931ac281a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ef:e9:4b:43:c4:fb:f6:ed:22:b6:cd:6f:9a:
                    05:85:59:d2:2f:78:99:ea:a7:c0:d1:8b:14:63:ef:
                    64:80:4c:bd:6f:97:41:b6:5b:ea:6d:31:39:72:f9:
                    81:3e:25:4a:4b:26:7b:a9:34:c7:8f:4d:39:50:1a:
                    34:00:18:43:67:66:88:c6:44:f0:c2:77:11:be:e0:
                    01:e1:49:72:6d:cd:20:4b:54:ed:22:c1:8a:f9:0d:
                    cc:70:63:1e:56:9d:1f:c6:b2:ae:cd:d5:3a:13:02:
                    87:7c:b6:4b:25:35:2a:4a:b5:15:ab:13:32:14:d8:
                    8e:92:41:4f:a8:60:bc:3f:af:5d:c5:30:6b:0a:af:
                    78:32:c7:0b:50:c4:f0:24:8d:f7:49:7d:a1:3b:ea:
                    21:df:5f:5f:7d:1e:92:8e:9c:31:4d:8c:23:a3:6c:
                    00:93:8d:9c:cb:d8:d7:6d:0a:9c:8f:d4:fd:eb:70:
                    a8:a6:dc:38:36:d6:82:57:2b:57:47:05:e4:a3:14:
                    4f:22:42:16:14:24:6b:34:6b:92:24:2d:7c:20:62:
                    b5:99:3b:05:95:7e:46:88:b1:6b:84:0d:03:b1:ef:
                    78:b1:9a:5e:f0:65:3b:39:d6:8b:a4:50:bc:ce:07:
                    13:45:0e:fb:9a:e9:19:05:87:7a:41:b4:80:a2:5d:
                    44:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E4:8A:B5:83:C8:18:38:64:67:FE:60:76:76:F2:69:31:AC:28:1A
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/BeSKtYPIGDhkZ_5gdnbyaTGsKBo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.126.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:e9:65:a4:74:81:95:bb:55:f3:39:08:75:0e:db:9f:02:e4:
         2c:db:03:24:05:06:29:22:e4:8b:6b:4e:b0:0f:ab:03:e5:72:
         03:9d:ed:f9:c1:8d:32:6e:1a:8a:5c:42:b6:3c:65:ac:85:8b:
         69:c1:52:9c:da:9d:2c:64:bd:f2:0b:3a:42:39:f5:2f:ef:77:
         8c:08:e9:d4:c0:78:9d:da:c9:6c:29:93:52:1b:17:8e:5a:d7:
         44:f9:02:80:88:35:55:f9:ff:06:f0:20:6c:e6:1a:56:1a:9f:
         40:3f:de:ec:85:31:55:8b:60:e2:61:46:ff:42:33:83:23:02:
         3a:72:db:94:ad:d7:e5:37:3d:eb:08:da:0b:3b:07:91:69:02:
         20:55:e4:4c:cc:da:c5:67:b2:1f:ea:9e:6a:d9:10:59:cf:f8:
         7f:2f:a3:61:2f:39:84:86:83:2f:a8:11:07:43:4f:03:b7:25:
         25:d5:d3:35:4a:2f:1a:91:3b:2b:6a:d9:d3:51:1e:06:6e:a8:
         2f:6e:04:51:b8:8a:c1:38:cc:3c:f6:a9:32:d5:c3:18:85:53:
         01:31:1b:b4:f4:e5:e1:03:a6:2c:d5:2a:fc:c5:9b:85:48:38:
         e9:34:72:ea:43:96:2f:f5:86:3a:b8:64:e1:63:ac:c3:d2:9f:
         aa:93:3e:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtwdV5Gg3JNaACuU1sFX2DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjMwMTAxMTQzNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWU0OGFiNTgzYzgxODM4NjQ2N2ZlNjA3Njc2ZjI2OTMxYWMyODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme/pS0PE+/btIrbNb5oFhVnSL3iZ
6qfA0YsUY+9kgEy9b5dBtlvqbTE5cvmBPiVKSyZ7qTTHj005UBo0ABhDZ2aIxkTw
wncRvuAB4Ulybc0gS1TtIsGK+Q3McGMeVp0fxrKuzdU6EwKHfLZLJTUqSrUVqxMy
FNiOkkFPqGC8P69dxTBrCq94MscLUMTwJI33SX2hO+oh319ffR6SjpwxTYwjo2wA
k42cy9jXbQqcj9T963Coptw4NtaCVytXRwXkoxRPIkIWFCRrNGuSJC18IGK1mTsF
lX5GiLFrhA0Dse94sZpe8GU7OdaLpFC8zgcTRQ77mukZBYd6QbSAol1EfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAXkirWDyBg4ZGf+YHZ28mkxrCgaMB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvQmVTS3RZUElHRGhrWl81Z2RuYnlhVEdzS0JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX60MA0G
CSqGSIb3DQEBCwUAA4IBAQAy6WWkdIGVu1XzOQh1DtufAuQs2wMkBQYpIuSLa06w
D6sD5XIDne35wY0ybhqKXEK2PGWshYtpwVKc2p0sZL3yCzpCOfUv73eMCOnUwHid
2slsKZNSGxeOWtdE+QKAiDVV+f8G8CBs5hpWGp9AP97shTFVi2DiYUb/QjODIwI6
ctuUrdflNz3rCNoLOweRaQIgVeRMzNrFZ7If6p5q2RBZz/h/L6NhLzmEhoMvqBEH
Q08DtyUl1dM1Si8akTsratnTUR4GbqgvbgRRuIrBOMw89qky1cMYhVMBMRu09OXh
A6Ys1Sr8xZuFSDjpNHLqQ5Yv9YY6uGThY6zD0p+qkz7B
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:35 2024 by rpki-client on console-fra.rpki-client.org