Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/JW0oFR6cs8XL0MfBRt3V2BlC4SA.roa
File:                     JW0oFR6cs8XL0MfBRt3V2BlC4SA.roa (raw, json)
Hash identifier:          pD6Dm3OsRFTxnr+YomRABfv7IylUVLtQCmvicGbESb4=
Subject key identifier:   25:6D:28:15:1E:9C:B3:C5:CB:D0:C7:C1:46:DD:D5:D8:19:42:E1:20
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       018AB79C211DECBF3BCC962E0C9ACD054630
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/JW0oFR6cs8XL0MfBRt3V2BlC4SA.roa
Signing time:             Thu 21 Sep 2023 11:59:37 +0000
ROA not before:           Thu 21 Sep 2023 11:59:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     40676
IP address blocks:        185.126.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 18 Oct 2023 15:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:b7:9c:21:1d:ec:bf:3b:cc:96:2e:0c:9a:cd:05:46:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: Sep 21 11:59:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=256d28151e9cb3c5cbd0c7c146ddd5d81942e120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:57:24:5f:e9:18:3d:35:e6:4e:63:94:bd:
                    06:3e:e0:12:ce:61:36:29:28:89:4a:d4:4b:a3:8c:
                    8c:82:1c:f8:f2:99:84:83:f3:2d:c1:c2:fd:76:0f:
                    2c:9a:1e:78:cb:79:d2:27:48:29:66:ba:be:7e:0e:
                    9e:16:f2:6b:91:b4:e6:bb:09:b3:8e:28:24:44:d5:
                    98:2a:43:66:68:15:e0:8e:cf:27:2e:9f:0b:ee:aa:
                    15:5d:cf:fb:ac:be:8d:d2:0c:d9:3e:fe:45:88:5e:
                    81:77:a9:e3:94:49:57:9f:b0:4b:bf:64:2d:27:22:
                    06:f5:1a:22:d4:c3:79:21:47:6d:41:91:87:09:45:
                    4b:25:00:d9:c0:66:79:a9:34:48:2e:a7:b3:d7:3c:
                    58:24:64:f7:fc:61:6a:7a:a2:bf:e6:04:6e:1d:bc:
                    1f:dd:f8:9e:ee:0c:e0:3a:42:71:a0:9b:82:27:9c:
                    e5:8c:99:8e:8a:15:fa:63:31:ef:cd:56:90:45:90:
                    57:50:dc:88:08:1c:1b:92:7f:f2:64:ea:0a:6d:5f:
                    2a:4e:4a:48:f6:00:22:df:d4:99:37:23:dc:f5:72:
                    f3:42:63:1f:de:30:11:e7:e2:a1:d6:e1:57:03:6d:
                    33:85:d7:89:59:44:00:2e:c3:69:4b:0b:03:7f:1e:
                    3c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6D:28:15:1E:9C:B3:C5:CB:D0:C7:C1:46:DD:D5:D8:19:42:E1:20
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/JW0oFR6cs8XL0MfBRt3V2BlC4SA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.126.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:81:52:a6:ae:ce:9b:20:df:a9:0a:3a:8c:b0:fc:b4:06:97:
         2f:ef:f0:d1:07:09:1b:cd:ff:92:97:45:40:0b:45:5f:89:60:
         b6:07:0c:49:e4:fe:85:7e:98:4c:3c:33:07:9b:0c:61:09:00:
         cf:13:db:92:fb:96:8b:ad:34:b4:62:c7:a4:c3:ba:43:43:3d:
         7a:74:ff:01:b2:2f:97:00:34:e1:48:8a:2e:2f:3e:a5:13:83:
         90:9f:c6:26:c4:e5:c7:28:59:9b:02:9f:ba:4c:f0:73:3a:27:
         55:91:eb:ec:91:f2:6b:59:0d:f4:93:13:41:e3:5a:93:8b:a3:
         0c:99:82:9d:aa:1e:ef:49:1e:77:8d:ad:c6:82:0d:1b:8d:77:
         61:29:2d:65:d1:3b:10:94:6f:f3:88:47:d2:0a:4b:b7:84:b2:
         45:88:7b:44:cb:59:c1:c8:3b:24:f7:c6:b5:ba:f4:f9:6d:60:
         46:98:eb:82:cb:45:bf:9f:da:28:dc:bf:00:a0:52:28:e2:cc:
         fa:6c:df:a7:3a:e3:8c:1e:42:39:78:f3:87:1f:49:f1:c0:af:
         50:34:e2:bc:64:a0:78:4f:ca:95:d3:58:c3:20:5e:60:e3:ac:
         d6:17:48:9c:11:0c:94:4a:57:0d:52:da:f8:30:46:18:d0:e9:
         52:e2:a4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:30 2024 by rpki-client on console-ams.rpki-client.org