Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/C6uhDA4GIlZ5Y0GIJZYLbUtyAM8.roa
File:                     C6uhDA4GIlZ5Y0GIJZYLbUtyAM8.roa (raw, json)
Hash identifier:          ic33kdacea4md9BcsvwoeVeWie+ZvlI93iJF1beKM9s=
Subject key identifier:   0B:AB:A1:0C:0E:06:22:56:79:63:41:88:25:96:0B:6D:4B:72:00:CF
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       01856DC1D52A4D3B30B9A22220AEAD4BB15A
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/C6uhDA4GIlZ5Y0GIJZYLbUtyAM8.roa
Signing time:             Sun 01 Jan 2023 14:34:57 +0000
ROA not before:           Sun 01 Jan 2023 14:34:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206264
IP address blocks:        185.126.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 19 May 2023 10:30:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:c1:d5:2a:4d:3b:30:b9:a2:22:20:ae:ad:4b:b1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: Jan  1 14:34:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0baba10c0e0622567963418825960b6d4b7200cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:21:33:53:62:e2:d8:50:8e:62:4d:de:a7:df:
                    44:d2:b2:78:65:b3:fc:76:f8:5f:5b:49:bd:a5:e2:
                    5c:0f:b7:16:74:f3:ca:67:73:9b:48:42:72:ea:7e:
                    49:04:c6:38:a6:7a:86:e6:04:5b:94:1e:8e:23:cb:
                    48:3d:97:7c:10:14:a0:61:7a:2b:81:a8:60:5c:17:
                    09:2e:c9:88:06:e2:04:3f:7e:a9:c1:84:f3:23:aa:
                    b5:be:ec:ed:f8:1a:c7:cb:f2:30:a5:e8:8a:cf:04:
                    80:dc:96:e9:c3:65:ea:fc:54:2b:31:c2:c0:03:48:
                    32:de:e5:e1:d0:ef:7e:e5:c2:1f:29:62:cd:61:5b:
                    03:49:70:93:06:62:d2:72:46:51:d0:97:41:4e:51:
                    5a:bc:ad:5e:b9:f0:e3:0c:6f:18:7f:6f:84:a9:09:
                    94:7d:f5:44:d0:9d:f2:47:d8:a9:d3:46:0f:c9:e7:
                    8a:c6:9d:a1:9c:9a:4b:d6:d9:e1:81:51:3c:cc:cd:
                    54:e3:a3:6c:3a:2f:bb:60:6e:d9:fc:68:cc:c4:2b:
                    34:96:03:06:99:40:bc:3a:dd:57:c6:b5:db:d9:f9:
                    9b:cf:49:f6:53:ad:62:5d:77:0d:34:1c:9b:e3:af:
                    d5:26:58:2f:d1:be:7c:d9:52:c3:4e:90:e8:e5:9a:
                    f2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AB:A1:0C:0E:06:22:56:79:63:41:88:25:96:0B:6D:4B:72:00:CF
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/C6uhDA4GIlZ5Y0GIJZYLbUtyAM8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.126.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:01:cd:0b:3e:df:67:58:86:2a:46:31:a5:b4:31:7d:e0:c0:
         10:24:33:47:35:dc:8a:00:7f:d7:cf:22:9f:e5:7d:a9:db:49:
         34:bc:ec:2c:a4:6d:eb:d8:83:92:d6:ec:38:ba:2b:92:d5:9f:
         dd:c7:61:1a:ba:8c:72:f6:ca:cd:b8:4e:50:a8:fb:a8:29:ec:
         3e:b8:eb:ae:82:79:88:27:04:63:f2:de:bf:35:e8:46:e0:ee:
         07:a4:15:c4:07:60:4a:d5:d1:98:c9:d3:f8:8e:9e:ca:02:b1:
         7a:c3:5b:8e:10:d8:c4:89:95:19:dc:e9:4e:d8:4c:46:11:e0:
         28:fd:2c:5e:53:8c:3c:98:39:5d:bf:6f:40:20:ba:eb:93:d6:
         69:ec:86:49:ad:7b:98:91:6d:b7:0a:ec:df:9d:ce:aa:f1:5c:
         a6:d7:db:db:10:fd:28:82:ac:59:72:88:89:0a:28:77:77:66:
         51:ba:2f:d5:e2:02:1d:27:8e:02:4c:52:98:b9:88:6e:9e:33:
         9f:1a:ed:ac:c3:9d:6f:69:08:fd:63:2f:fa:14:b0:9f:0a:34:
         15:da:68:03:c7:cd:64:dd:b6:b9:c3:2a:33:8c:af:3f:d4:92:
         2a:6f:2b:25:03:96:28:84:ce:9c:92:b8:db:ab:3c:ed:53:dc:
         2b:f1:54:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:35 2024 by rpki-client on console-fra.rpki-client.org