Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/Mm0vM2YE5JHY6OtMOHoIVj3TfNs.roa
File:                     Mm0vM2YE5JHY6OtMOHoIVj3TfNs.roa (raw, json)
Hash identifier:          Qf+hGpmu22Chro9jnY7lJ1EAuP30wuJ8CzpPhbaVC/U=
Subject key identifier:   32:6D:2F:33:66:04:E4:91:D8:E8:EB:4C:38:7A:08:56:3D:D3:7C:DB
Certificate issuer:       /CN=304e59a223f4bcb823492fb1096c3a82310c03da
Certificate serial:       018572B40EC2F1F09B1EC636AD8D1B7518CD
Authority key identifier: 30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/Mm0vM2YE5JHY6OtMOHoIVj3TfNs.roa
Signing time:             Mon 02 Jan 2023 13:38:00 +0000
ROA not before:           Mon 02 Jan 2023 13:38:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57166
IP address blocks:        185.119.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:b4:0e:c2:f1:f0:9b:1e:c6:36:ad:8d:1b:75:18:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304e59a223f4bcb823492fb1096c3a82310c03da
        Validity
            Not Before: Jan  2 13:38:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=326d2f336604e491d8e8eb4c387a08563dd37cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5e:89:f7:ec:3a:44:17:1c:61:4d:74:f2:61:
                    a2:6b:95:57:ec:a2:08:e5:54:63:74:22:fd:de:9f:
                    a3:a7:d7:4f:29:fc:07:bf:82:5d:67:4a:11:2b:4b:
                    5c:a0:51:67:ba:e0:ed:4b:45:09:db:f3:08:38:5d:
                    c9:64:89:c1:1a:7d:0d:e5:71:a7:cd:af:0c:2e:63:
                    3e:10:fe:53:87:cd:40:26:05:e6:d6:2e:1b:9f:f4:
                    58:ac:b7:fc:46:cc:f1:38:eb:94:46:56:a6:07:5c:
                    f5:21:f0:a4:de:35:80:b3:4b:4a:11:ff:a6:11:21:
                    48:76:06:78:79:11:23:a4:4b:b3:e8:d3:a0:2e:4b:
                    97:d1:a8:ad:0c:0e:bd:87:5f:75:fc:da:ef:33:7b:
                    49:6c:6e:b2:29:c4:01:ca:9f:f5:49:97:ad:fc:c2:
                    5f:42:51:69:22:09:e4:72:bf:c3:11:34:15:6f:e4:
                    96:53:58:8f:d1:0c:34:b5:f8:2b:76:41:25:86:a9:
                    65:cc:24:e2:6b:53:de:93:e0:1f:2a:2e:26:e6:9e:
                    7e:90:05:cc:96:cc:c7:ec:37:c9:3f:a1:cf:e5:de:
                    28:8d:e2:06:f3:d4:db:21:7a:05:2b:a4:84:c3:da:
                    1f:4f:40:44:6e:e8:01:cd:13:44:75:95:aa:d7:b7:
                    8e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6D:2F:33:66:04:E4:91:D8:E8:EB:4C:38:7A:08:56:3D:D3:7C:DB
            X509v3 Authority Key Identifier:
                keyid:30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/Mm0vM2YE5JHY6OtMOHoIVj3TfNs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.119.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:3b:ce:52:5e:02:7e:51:38:5c:92:15:f8:70:38:5c:4a:07:
         0f:b5:60:67:9c:74:c8:5e:f8:9c:f5:98:b7:10:66:1e:ed:35:
         ed:58:52:f8:b1:f6:b0:3b:e9:54:61:bf:5d:92:7f:01:da:8c:
         b0:98:71:0c:66:d4:02:18:b5:21:5f:f7:36:f8:3e:72:d9:b2:
         62:36:d5:6a:4f:fa:a9:82:9e:18:f6:35:0c:68:2d:b8:d1:42:
         79:b4:81:a5:71:30:36:f7:c2:e4:82:85:1e:9d:6c:18:eb:ec:
         d7:b2:bb:13:65:87:a7:b0:12:87:b0:67:5c:61:44:a2:bb:98:
         7c:c7:d8:aa:96:18:69:48:05:86:9d:c8:53:4b:e5:e0:59:fd:
         02:d0:34:d7:b1:52:86:fb:06:99:b9:02:6f:93:c5:4c:80:31:
         04:7a:34:92:d0:c5:42:c8:0f:87:a5:53:9b:5c:51:98:97:be:
         fa:2b:99:51:9e:25:40:d5:44:f8:1e:02:bf:18:12:53:22:32:
         3b:5f:e1:e6:ee:fb:4a:80:1d:35:85:17:01:1e:a6:2d:22:07:
         05:20:d1:d3:0b:aa:89:1f:10:21:12:34:a0:df:80:34:35:c0:
         51:27:4e:35:eb:38:c5:46:d0:87:43:bc:23:49:76:be:40:86:
         40:c9:90:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:43 2024 by rpki-client on console-fra.rpki-client.org