Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/6FrFPeP4-yzpWvEAqCq0PnsjcKQ.roa
File:                     6FrFPeP4-yzpWvEAqCq0PnsjcKQ.roa (raw, json)
Hash identifier:          0XReOJr2ucjqSAxQMa8b4TTOkWdCZbShLZSFT88XXPA=
Subject key identifier:   E8:5A:C5:3D:E3:F8:FB:2C:E9:5A:F1:00:A8:2A:B4:3E:7B:23:70:A4
Certificate issuer:       /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial:       01867929F2C62699E877287FC9553CEBB9AD
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/6FrFPeP4-yzpWvEAqCq0PnsjcKQ.roa
Signing time:             Wed 22 Feb 2023 12:47:17 +0000
ROA not before:           Wed 22 Feb 2023 12:47:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56484
IP address blocks:        185.124.150.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 05 Mar 2023 14:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:79:29:f2:c6:26:99:e8:77:28:7f:c9:55:3c:eb:b9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
        Validity
            Not Before: Feb 22 12:47:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e85ac53de3f8fb2ce95af100a82ab43e7b2370a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:04:d8:fb:c0:a6:16:1d:46:94:87:be:b5:e3:
                    0e:02:6e:67:6c:01:b9:bc:3c:91:f6:9f:6d:7b:6c:
                    53:28:63:d9:4a:2e:fe:6d:f5:ee:bc:9b:51:13:39:
                    1b:a2:91:94:8c:94:52:5e:2a:2f:a5:e8:b0:aa:9f:
                    f6:9d:fb:10:50:d6:28:be:98:ee:b4:99:1a:13:07:
                    c3:44:69:33:f0:06:b1:e2:26:ea:f9:20:ca:df:63:
                    0e:4a:54:e5:f1:03:87:fb:de:40:f7:dd:15:c7:dd:
                    99:5e:f9:89:5c:15:6d:68:c4:4d:03:93:b1:90:71:
                    95:b0:5d:85:29:e6:f9:c0:1a:73:51:07:76:68:46:
                    59:e4:24:68:74:bc:b4:93:e7:bd:e1:1e:6c:2a:6d:
                    02:a4:10:6e:f8:a4:84:b4:0c:ef:b5:6e:87:01:c5:
                    49:8a:da:e0:a6:18:cd:24:ab:e2:57:26:42:af:98:
                    dd:76:1c:7a:fd:e4:9a:8f:22:40:12:cb:3b:8f:5c:
                    09:17:45:6b:72:c4:ef:4c:18:f4:3e:29:2e:fa:1c:
                    35:e6:ef:ef:f5:30:43:2a:d2:e5:82:e2:76:ab:a8:
                    1b:46:b4:0a:2d:af:84:1c:cf:d7:17:ae:8c:88:ca:
                    4b:42:94:5a:12:0e:b4:43:de:7d:ff:2c:02:43:75:
                    3a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5A:C5:3D:E3:F8:FB:2C:E9:5A:F1:00:A8:2A:B4:3E:7B:23:70:A4
            X509v3 Authority Key Identifier:
                keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/6FrFPeP4-yzpWvEAqCq0PnsjcKQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.124.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:3b:d2:c7:9b:9a:e8:2d:50:93:f1:8d:fd:c7:0e:d1:8b:44:
         96:e4:77:d4:66:aa:df:5f:ef:46:5f:b4:59:f9:cd:3f:cf:aa:
         e1:5b:bc:d3:3f:c3:c4:33:3c:34:cc:42:d6:08:2e:a4:f4:a8:
         be:f4:3a:19:c6:ee:8e:e6:9c:4b:9f:65:61:a0:99:9a:3c:ad:
         10:ca:6e:fb:03:99:f8:5b:4e:d8:31:65:a2:98:56:c6:36:cd:
         66:6b:0a:90:00:d5:39:21:eb:3e:ed:97:70:43:7c:92:6a:67:
         0a:54:6e:bd:93:24:28:f0:ea:67:6e:c4:20:1f:f6:27:b7:1f:
         df:4e:ec:d0:cf:e6:37:5b:05:91:fd:b9:23:7c:2c:88:7a:26:
         16:40:23:96:21:6b:dc:35:a5:4f:c1:a5:15:bb:c5:9f:3d:29:
         7a:48:59:33:6d:69:79:79:83:b6:89:7b:fb:48:47:b7:89:9e:
         c6:13:a4:fd:28:3f:f2:b6:ef:ff:00:10:cb:b2:92:4e:b1:24:
         2d:54:e3:ad:7f:73:72:43:a4:b3:fd:c4:50:30:ed:f7:1e:33:
         ea:14:4f:5a:2b:df:ea:fc:8f:d4:4d:c9:59:0f:21:ed:c2:ee:
         f1:87:37:61:37:98:da:d1:52:83:2e:31:88:51:f6:96:77:4c:
         78:1e:fb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:06 2024 by rpki-client on console-fra.rpki-client.org