Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/3EX3niG_AmuvQ2LPwWp6qhIA7Dk.roa
File:                     3EX3niG_AmuvQ2LPwWp6qhIA7Dk.roa (raw, json)
Hash identifier:          L/GmKjAnNu9HPXu5L6a+LpJNrdYMpzWUpvRw4n9bf0c=
Subject key identifier:   DC:45:F7:9E:21:BF:02:6B:AF:43:62:CF:C1:6A:7A:AA:12:00:EC:39
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       0185DF5B3F50A013C1769A66307A12A13B17
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/3EX3niG_AmuvQ2LPwWp6qhIA7Dk.roa
Signing time:             Mon 23 Jan 2023 15:59:37 +0000
ROA not before:           Mon 23 Jan 2023 15:59:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202585
IP address blocks:        185.244.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:df:5b:3f:50:a0:13:c1:76:9a:66:30:7a:12:a1:3b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan 23 15:59:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dc45f79e21bf026baf4362cfc16a7aaa1200ec39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:71:32:d4:f0:1e:02:38:9a:ac:78:18:35:e3:
                    91:d2:79:d8:0c:e9:a5:ac:51:af:f4:31:36:21:5a:
                    94:f3:91:93:88:05:d4:0c:80:0d:56:ee:cf:bc:68:
                    28:11:aa:7d:ba:d2:e9:f7:b7:7c:11:11:5a:f6:6b:
                    eb:3d:e5:39:e8:23:3b:97:bf:4f:ba:9f:4c:3e:5f:
                    98:d6:f6:c9:c3:1a:12:28:00:a7:34:5f:d0:2b:8c:
                    4f:51:40:74:32:82:16:9a:1f:e5:10:f2:60:b5:7f:
                    37:7e:fe:21:57:8f:22:6a:c6:66:d6:8f:9d:45:82:
                    49:39:b9:ec:95:dc:10:05:a3:09:25:fd:f3:b1:55:
                    e9:6e:54:26:3b:68:57:8b:a4:44:e8:d8:13:cb:fb:
                    c3:a5:22:56:9f:f3:35:3a:5b:e3:40:25:f4:c3:66:
                    24:07:35:54:3c:92:69:87:63:ff:8a:a5:0c:91:d9:
                    28:3c:d2:8c:d8:71:99:0a:b7:37:02:37:af:8e:85:
                    53:ce:f2:5f:dd:ef:b3:1c:ec:db:59:53:e4:01:50:
                    6e:37:19:92:5d:bb:48:59:83:a9:d9:dd:13:4d:a9:
                    6f:3e:e6:f7:40:e3:58:0e:c9:5c:31:43:92:7b:cd:
                    06:f9:74:dc:a5:d3:60:78:f1:56:58:4c:c0:4d:2a:
                    b2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:45:F7:9E:21:BF:02:6B:AF:43:62:CF:C1:6A:7A:AA:12:00:EC:39
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/3EX3niG_AmuvQ2LPwWp6qhIA7Dk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.244.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:4b:26:44:59:f8:98:f5:f1:8b:60:e1:e5:c2:f5:d8:f3:43:
         d5:17:78:4f:3d:f8:fc:d4:e3:2e:2f:e1:3e:17:77:34:e9:72:
         0d:0f:bf:5d:53:34:b5:ce:14:b6:97:3f:5e:0c:b6:a4:94:a4:
         cb:40:8e:76:ec:4c:4f:b0:56:44:f3:10:cf:7b:7a:9e:8a:0e:
         49:41:2c:f4:5a:8b:ae:e0:12:b4:81:1a:2d:1e:a4:94:5a:83:
         c1:f1:e0:53:cc:d8:9d:d5:76:e1:c8:ef:fe:fa:fb:ce:52:fc:
         25:c2:40:c7:35:d4:10:5d:d6:19:78:97:d9:36:93:43:03:93:
         ad:1e:b5:00:77:25:37:79:9f:f0:bc:f2:e1:4b:bd:5e:a9:ff:
         5e:8d:b2:a5:08:44:6a:23:40:6d:69:f5:b4:33:c0:bf:e1:27:
         31:b5:4c:6e:1d:19:34:b4:6a:19:a3:f2:ed:57:90:ac:00:cc:
         0e:19:64:1b:37:f4:01:d6:7c:fc:e7:9c:2a:af:c2:3a:f0:04:
         03:cc:cb:e1:a9:b6:53:2a:e0:55:a4:02:41:fa:bc:26:ba:c7:
         e8:01:78:34:64:f7:d4:69:53:91:7e:1b:5a:8f:cd:43:c8:9f:
         b4:84:78:2c:c6:34:dc:d8:46:87:79:7d:b0:4e:82:12:aa:4a:
         40:4e:ae:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:39 2024 by rpki-client on console-fra.rpki-client.org