Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/w_Xoj3HyFSdUqzreQCjme5cr1g0.roa
File:                     w_Xoj3HyFSdUqzreQCjme5cr1g0.roa (raw, json)
Hash identifier:          sq5bM0lXeWgN3n+TRJ7tbN4LTZB9lTUcTpMaijxuTVs=
Subject key identifier:   C3:F5:E8:8F:71:F2:15:27:54:AB:3A:DE:40:28:E6:7B:97:2B:D6:0D
Certificate issuer:       /CN=ed64691c31892cc991ad4e9a9671147759e417ab
Certificate serial:       0187C2BCBD03E3CCAEB47B8754EE613B06AC
Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/w_Xoj3HyFSdUqzreQCjme5cr1g0.roa
Signing time:             Thu 27 Apr 2023 12:42:41 +0000
ROA not before:           Thu 27 Apr 2023 12:42:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47264
IP address blocks:        185.75.240.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jul 2023 14:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:c2:bc:bd:03:e3:cc:ae:b4:7b:87:54:ee:61:3b:06:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab
        Validity
            Not Before: Apr 27 12:42:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3f5e88f71f2152754ab3ade4028e67b972bd60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:55:77:d8:b3:f2:ea:23:37:c3:52:da:c4:59:
                    c9:77:b7:de:00:69:45:16:ad:79:00:e4:39:af:d1:
                    e9:24:cb:46:fc:86:a1:2a:f1:2a:b9:93:24:5b:71:
                    36:47:21:11:d0:eb:72:63:ae:72:a3:3f:b6:44:a4:
                    57:f3:a7:cd:31:d4:4d:54:79:23:e2:61:a5:b1:98:
                    6e:5c:06:1a:db:67:6e:2a:a9:b4:76:c3:67:e0:12:
                    e3:97:0e:09:90:34:dc:3c:a5:5e:ac:e4:a7:48:16:
                    b1:2f:fc:44:ac:29:7d:1d:2b:00:e8:a0:0e:92:7a:
                    b2:ef:c7:c9:83:d3:a5:b7:f0:89:f1:71:50:aa:f5:
                    1b:a4:97:07:84:10:57:98:f8:97:3a:f5:06:77:a9:
                    2a:93:8d:e9:73:a1:ba:de:6b:1a:49:45:f0:13:9b:
                    59:ed:27:d3:cb:79:07:27:34:7d:95:96:57:02:f7:
                    88:df:60:45:16:cf:e0:3a:22:b8:54:fc:5b:d2:2d:
                    74:50:6c:c3:00:55:5e:4f:a8:c6:48:5f:c6:46:19:
                    2a:eb:c7:d1:61:51:de:6e:ef:5a:b7:17:25:e5:1d:
                    d3:0a:be:74:89:cd:7c:7d:56:b2:1b:23:0b:69:5c:
                    7b:52:ac:6e:06:b7:d0:e6:70:1e:9f:19:fa:64:9b:
                    71:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F5:E8:8F:71:F2:15:27:54:AB:3A:DE:40:28:E6:7B:97:2B:D6:0D
            X509v3 Authority Key Identifier:
                keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/w_Xoj3HyFSdUqzreQCjme5cr1g0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.75.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:a6:91:53:4c:49:83:a3:c2:ac:4e:b7:cb:e3:3a:59:44:6a:
         db:1f:11:3b:74:d1:45:66:80:08:b4:be:3f:de:66:16:cb:38:
         b9:fa:23:ec:75:f9:55:5d:b6:a2:36:7a:a6:ce:c0:59:df:96:
         a3:de:23:96:a8:31:5d:e4:60:ce:51:8c:4e:b9:f4:2e:34:8a:
         28:3a:9c:6b:7f:e3:dd:fb:11:81:1a:7f:fe:93:90:51:ba:1b:
         08:1d:ab:67:b3:fb:bd:0a:56:4b:00:87:49:3f:68:02:45:75:
         d3:f0:1a:87:2b:61:c9:25:d6:33:92:7f:0d:e2:71:95:76:82:
         46:b0:86:16:1d:dd:f6:2a:e8:4e:e1:db:9b:b6:33:fe:bc:33:
         28:be:13:d6:11:ae:18:1c:76:ff:bb:c1:53:3e:5b:be:01:52:
         9b:5e:81:0a:6a:da:07:cb:b9:79:6d:49:98:4f:c1:34:8f:90:
         1a:a0:81:67:e4:c5:91:16:9b:95:51:e1:5d:87:0a:fa:85:38:
         e2:c9:d3:e8:57:f1:8d:15:b1:f0:7f:3d:59:a1:8b:82:5f:db:
         1a:b7:d1:ca:18:d3:18:cb:53:bb:10:33:e9:c1:c1:3a:e0:ad:
         0e:1b:a1:cd:8b:b0:df:e9:fd:75:ee:c0:8d:a6:80:95:dd:c9:
         1f:a2:9e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:35 2024 by rpki-client on console-ams.rpki-client.org