Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/srPix_HncwjcntftBSEuht8wGms.roa
File:                     srPix_HncwjcntftBSEuht8wGms.roa (raw, json)
Hash identifier:          Yb1iw64CKXEgbgwJxfDLhKg+V4XDBOYKyYbqeVynNn8=
Subject key identifier:   B2:B3:E2:C7:F1:E7:73:08:DC:9E:D7:ED:05:21:2E:86:DF:30:1A:6B
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       0188349475C364206D22A3126FC181AC2AC9
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/srPix_HncwjcntftBSEuht8wGms.roa
Signing time:             Fri 19 May 2023 15:15:24 +0000
ROA not before:           Fri 19 May 2023 15:15:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206264
IP address blocks:        185.126.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:34:94:75:c3:64:20:6d:22:a3:12:6f:c1:81:ac:2a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: May 19 15:15:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b2b3e2c7f1e77308dc9ed7ed05212e86df301a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:2d:93:47:74:de:d9:96:ae:82:47:d4:93:
                    dc:b3:bd:0a:88:9d:ff:7d:18:17:8f:e7:59:29:21:
                    16:46:81:ed:8a:67:a4:31:12:32:2e:4e:38:10:db:
                    e3:55:d4:a2:3a:0a:0c:45:11:71:30:0a:fd:2a:0d:
                    d5:03:92:79:f8:66:9f:40:43:51:b0:f0:d8:6d:8f:
                    9c:06:1e:30:fe:44:49:ed:b0:47:5c:2f:04:94:77:
                    5e:99:92:d0:30:0a:32:e8:9a:98:7d:96:91:8c:48:
                    36:7a:bc:68:ad:07:59:42:23:d7:e7:6a:5d:3e:bd:
                    27:7e:5f:01:70:6f:6a:b1:28:c5:43:c8:e0:a0:1d:
                    ec:2e:5e:62:72:a1:b9:c4:2f:9d:dc:6c:be:18:4b:
                    0c:c9:34:0e:37:a9:38:2c:1e:28:d8:9b:ed:32:fd:
                    64:eb:41:c4:c4:b1:93:db:f0:70:16:e6:5a:61:92:
                    24:d6:61:a6:83:9b:61:71:ec:4f:46:f9:42:f1:43:
                    48:8f:12:be:0c:68:73:6b:f8:1f:3d:88:2b:ac:e6:
                    d3:dc:97:18:64:aa:ea:fc:1f:d5:e5:90:76:b0:df:
                    bd:24:c6:c2:3a:20:91:56:b7:52:d7:31:25:05:e7:
                    04:4a:c6:c8:26:50:47:73:5e:d2:c6:37:b6:00:dc:
                    7f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B3:E2:C7:F1:E7:73:08:DC:9E:D7:ED:05:21:2E:86:DF:30:1A:6B
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/srPix_HncwjcntftBSEuht8wGms.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.126.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:58:6a:9a:99:96:c2:d1:83:c4:ba:dc:6c:91:65:a8:7d:b2:
         46:5a:64:b4:c2:64:a2:be:f4:31:ba:4a:77:d7:c3:cc:46:c1:
         7c:6e:53:7d:d1:52:bf:9f:9d:21:71:91:02:fc:63:17:87:d3:
         ee:ea:c5:fc:08:80:93:08:1c:0f:a0:d7:27:3c:fc:32:1b:b1:
         62:1f:3d:9f:e1:db:14:42:6a:88:37:16:8a:27:79:dc:a8:6e:
         d4:96:a7:f6:28:3c:a9:22:9d:d8:ba:e5:77:c6:e0:4f:f4:a1:
         be:8a:59:4f:d0:4b:d3:e5:10:af:79:96:73:ce:d3:c2:be:a5:
         fe:31:6d:39:c4:b2:4a:28:15:64:95:68:de:50:fc:8f:63:e4:
         7b:b6:10:26:c0:7e:6a:00:82:53:26:2b:9d:09:85:54:b3:48:
         bf:08:b6:28:5f:b9:c0:73:17:71:ef:b6:98:1e:83:08:7f:38:
         7d:78:22:2d:9c:92:be:18:f9:e1:60:bf:4b:1c:4e:a7:0c:5c:
         8f:5b:47:53:3e:cd:69:5a:bb:dc:21:3d:18:38:b8:90:e6:24:
         fd:3d:04:70:d3:1d:0b:93:6a:05:3b:4b:1a:89:8e:8b:50:ed:
         52:64:33:30:f1:9b:a2:29:93:b6:3e:a1:27:67:8a:bf:00:c4:
         2b:50:99:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 17:42:43 2023 by rpki-client on console-ams.rpki-client.org