Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/zYCgdTnDB608oBB0RJFVVim_3eo.roa
File:                     zYCgdTnDB608oBB0RJFVVim_3eo.roa (raw, json)
Hash identifier:          eeEyBi+DKBF+xnyA5oqDi9FWWLVnSo/2J3fU0YS/te8=
Subject key identifier:   CD:80:A0:75:39:C3:07:AD:3C:A0:10:74:44:91:55:56:29:BF:DD:EA
Certificate issuer:       /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial:       0186BFBBC9843A329D4EF3789DBCF8F9E63E
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/zYCgdTnDB608oBB0RJFVVim_3eo.roa
Signing time:             Wed 08 Mar 2023 05:40:00 +0000
ROA not before:           Wed 08 Mar 2023 05:40:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206388
IP address blocks:        185.187.51.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 27 Mar 2023 10:15:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:bf:bb:c9:84:3a:32:9d:4e:f3:78:9d:bc:f8:f9:e6:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
        Validity
            Not Before: Mar  8 05:40:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cd80a07539c307ad3ca010744491555629bfddea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:27:6a:27:f9:bc:f3:ef:0d:73:4e:a5:23:76:
                    1c:9e:e8:91:47:78:a1:f2:74:1c:cf:fc:81:21:80:
                    1a:8f:38:90:31:d1:0f:5e:3a:d2:66:51:82:27:40:
                    06:ef:2a:e0:31:95:e2:4c:cf:d1:e3:fc:25:0d:0b:
                    70:ac:7b:a3:90:66:cb:9c:9f:b2:59:5f:3d:e6:16:
                    85:5c:20:8b:7a:15:60:d3:e3:b4:0d:4c:78:29:f7:
                    f1:50:b5:44:f9:63:34:ad:b9:bb:fd:a0:38:a5:40:
                    78:4d:d6:a4:a6:7b:a3:50:79:c7:49:ba:df:52:6d:
                    d0:e7:d9:e5:34:b2:33:3f:f7:3b:7e:de:2a:8a:00:
                    07:a6:92:0f:a8:5f:db:72:dd:f8:ba:03:49:02:88:
                    ff:52:f1:21:8f:bc:48:56:51:b9:ed:16:0c:9e:6c:
                    b0:5e:45:eb:99:e8:3c:22:b9:53:6e:2f:ee:a1:a6:
                    c4:5b:ca:3c:df:62:ac:d5:95:b0:ff:0f:cc:90:c4:
                    84:94:9a:34:89:32:c5:b4:0c:71:ac:71:32:0b:5d:
                    aa:b4:1c:c0:db:99:df:0c:89:84:8d:38:2d:a4:6a:
                    35:e1:02:d4:cf:ec:e5:cb:9c:a1:92:5c:6b:2d:71:
                    fe:a0:54:63:d5:ed:0d:92:bf:d1:da:ef:7f:4c:6f:
                    74:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:80:A0:75:39:C3:07:AD:3C:A0:10:74:44:91:55:56:29:BF:DD:EA
            X509v3 Authority Key Identifier:
                keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/zYCgdTnDB608oBB0RJFVVim_3eo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:dc:24:f8:d1:8d:42:20:73:18:5a:0e:49:d4:18:4d:48:72:
         60:8c:82:ab:76:30:86:8f:e3:35:7e:fc:45:65:f1:89:d7:b8:
         bb:64:5d:d4:99:d9:c8:b6:41:d6:73:4c:22:1b:a5:df:ec:2b:
         49:27:99:ff:f3:be:d9:fd:17:69:c0:a5:dc:3c:26:1a:5d:34:
         85:cd:dd:bd:1c:2d:73:38:a2:2c:fa:f4:8e:96:8d:8e:91:a7:
         80:4e:4b:60:c9:6e:82:e8:dd:7c:05:cc:50:15:ba:b6:f3:c4:
         f4:b5:1f:cb:f0:9d:dd:73:4d:63:e1:9a:5d:35:ef:ed:db:31:
         d7:e7:ab:82:12:ad:93:dd:59:10:42:f8:0b:7a:12:1e:07:ca:
         c9:2b:89:b3:56:1b:0c:1e:0c:2d:7e:09:8a:8f:2c:99:46:72:
         6e:17:05:09:b4:d7:71:85:12:14:8f:ee:12:b0:22:f2:92:f1:
         83:71:61:72:90:f8:6f:2e:4b:6a:fd:f8:67:27:16:46:ef:2b:
         84:33:68:cc:92:0f:c4:97:bd:03:a7:1b:5a:5d:31:17:a1:75:
         b1:98:e1:3f:57:a7:3d:c7:93:cc:97:d9:0b:f4:4b:7c:6f:eb:
         ee:42:ac:96:a5:ce:ba:09:5e:7a:2e:f5:09:b5:6e:42:b7:54:
         a2:89:f8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:11 2024 by rpki-client on console-ams.rpki-client.org