Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Rx-v-n4l3LDcNk4JOzDlDMFiXC4.roa
File:                     Rx-v-n4l3LDcNk4JOzDlDMFiXC4.roa (raw, json)
Hash identifier:          HeFPwgBLQa+wT7roKyzvuugDfg77En7oecXaNOwtKIk=
Subject key identifier:   47:1F:AF:FA:7E:25:DC:B0:DC:36:4E:09:3B:30:E5:0C:C1:62:5C:2E
Certificate issuer:       /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial:       01910CBEEC98CF9A6C71842DB149F8047351
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Rx-v-n4l3LDcNk4JOzDlDMFiXC4.roa
Signing time:             Thu 01 Aug 2024 07:02:04 +0000
ROA not before:           Thu 01 Aug 2024 07:02:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     62240
IP address blocks:        185.161.111.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 08 Aug 2024 06:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:0c:be:ec:98:cf:9a:6c:71:84:2d:b1:49:f8:04:73:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
        Validity
            Not Before: Aug  1 07:02:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=471faffa7e25dcb0dc364e093b30e50cc1625c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:97:7c:47:e5:c7:8a:2b:2e:d6:af:40:22:df:
                    6f:c0:d5:c2:3c:7e:f9:4e:b9:c9:f3:33:c0:33:13:
                    31:09:2e:96:c0:25:bf:98:e0:dd:8f:0f:96:71:db:
                    bc:76:4f:63:3f:1f:32:1d:eb:c6:bd:cf:5e:6a:c2:
                    4f:f0:a0:bd:94:99:99:bc:37:56:57:5f:24:46:2a:
                    88:ba:80:3b:45:9b:24:4d:ab:fd:0c:75:34:2c:b6:
                    3b:4e:7a:5b:c0:8e:9f:a2:29:13:19:8a:4e:45:dc:
                    33:3c:0c:f9:44:3e:be:24:00:b3:f3:09:32:d3:0e:
                    d1:85:e5:da:6b:01:d7:4c:d6:04:d1:14:66:8d:4a:
                    37:10:c4:62:a2:f8:31:f6:67:08:e0:1a:dd:19:df:
                    d6:f3:0f:1e:13:cd:b3:85:03:fd:b1:91:dc:ca:af:
                    31:ce:1b:0a:74:34:a5:f2:a3:86:08:4d:61:c6:83:
                    fa:a0:b6:91:f5:d6:35:73:14:25:32:27:b1:ef:d6:
                    ea:eb:22:68:94:23:53:67:fe:03:d7:31:48:60:4a:
                    1f:5c:21:63:5a:6c:99:4b:e9:93:14:6b:03:f7:ee:
                    09:3b:85:09:22:2b:ec:8a:a2:5f:21:c1:2f:a0:c0:
                    a6:a6:19:b0:32:26:37:06:a2:37:a1:c7:34:ce:8a:
                    f1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1F:AF:FA:7E:25:DC:B0:DC:36:4E:09:3B:30:E5:0C:C1:62:5C:2E
            X509v3 Authority Key Identifier:
                keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Rx-v-n4l3LDcNk4JOzDlDMFiXC4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.161.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:c0:18:b8:65:f8:bb:ce:d0:b9:a9:c1:99:6a:d5:3d:f2:55:
         14:9a:e1:09:f2:87:32:d7:de:06:25:7d:ec:5c:1c:f3:45:27:
         bc:e4:b3:4e:92:2d:79:a4:cf:11:36:e7:a8:b8:9e:78:45:bf:
         7f:6c:5c:73:4b:1c:bf:68:1a:33:28:50:75:20:f0:67:29:18:
         50:9a:b3:c9:cf:f2:e5:aa:d2:3c:a0:1f:64:9b:8a:ea:29:dd:
         60:11:23:29:c8:f1:d6:13:81:86:5c:3c:43:f1:14:b2:23:b5:
         a0:ce:01:c5:db:bf:4c:3f:fe:20:3e:ce:09:22:3a:fc:cd:70:
         7b:63:71:f2:46:23:14:49:48:23:2a:56:64:61:e4:1c:d3:29:
         33:93:a3:6f:2a:2f:8f:de:a9:7b:ec:d8:15:9c:6d:fe:6f:cf:
         a6:53:e3:88:27:a4:ac:e4:b4:a3:8c:75:c6:1c:dd:f2:f0:91:
         65:81:79:c0:2e:c2:60:61:92:df:67:ee:9a:13:60:1e:6c:92:
         19:9b:83:b2:07:0d:93:da:2e:d6:11:35:83:7f:39:1a:da:47:
         a6:15:cb:fa:44:b1:4b:0f:62:86:16:24:2e:04:da:81:5a:aa:
         31:20:d6:25:6c:bf:8e:71:53:33:88:20:7f:ad:f7:83:74:7c:
         ef:82:d8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 08:00:14 2024 by rpki-client on console-ams.rpki-client.org