Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/HSYfZfMjkLdeWfk9QjEpiI9GM3M.roa
File:                     HSYfZfMjkLdeWfk9QjEpiI9GM3M.roa (raw, json)
Hash identifier:          vRTyDAJxM/yaOhL1TGB3ZhqE538i7ePkKmSV0o/A+a4=
Subject key identifier:   1D:26:1F:65:F3:23:90:B7:5E:59:F9:3D:42:31:29:88:8F:46:33:73
Certificate issuer:       /CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Certificate serial:       0185730C9E4CDB9809D618A01F6FB8175487
Authority key identifier: 40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/HSYfZfMjkLdeWfk9QjEpiI9GM3M.roa
Signing time:             Mon 02 Jan 2023 15:14:44 +0000
ROA not before:           Mon 02 Jan 2023 15:14:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61136
IP address blocks:        185.253.132.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:0c:9e:4c:db:98:09:d6:18:a0:1f:6f:b8:17:54:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
        Validity
            Not Before: Jan  2 15:14:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1d261f65f32390b75e59f93d423129888f463373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a1:c9:0b:e5:e8:bb:70:ba:77:6c:d4:15:83:
                    0b:2f:cd:f7:79:51:fe:36:62:b3:87:d0:d5:6b:6f:
                    c3:79:51:40:26:25:75:fd:e2:1a:d8:2a:a3:e3:c6:
                    e2:db:b2:a0:80:07:1a:7e:50:30:f4:7d:dc:c1:09:
                    3b:c1:8c:92:45:c9:d1:b8:c3:a0:27:b1:e8:e6:35:
                    ed:b2:f3:b1:6f:d4:08:74:0b:b1:0e:dd:97:bc:37:
                    d2:48:30:7e:87:59:68:92:cf:8c:fe:cf:b2:3a:78:
                    41:fe:e2:8a:29:3c:9d:37:3f:7a:62:95:6b:62:a8:
                    9c:da:62:3f:ff:0a:06:6a:74:4d:01:3d:0c:d5:e5:
                    8d:35:9c:e5:71:64:1b:33:b4:8d:88:45:b0:b8:c8:
                    81:5b:e0:8f:df:fe:23:05:b2:d4:8b:61:36:00:78:
                    03:22:df:18:35:84:aa:3d:54:dd:eb:5d:77:e1:1d:
                    4c:0e:20:bb:a0:01:7c:2c:5a:a8:4b:2b:e9:22:1c:
                    d2:6a:86:bc:5a:cc:50:3e:2a:b1:3a:df:d9:3d:e1:
                    8b:1d:fe:d4:f0:23:75:a3:1f:b0:6d:98:2c:88:6d:
                    a1:6a:97:ef:9c:2e:d3:07:8e:eb:86:82:b8:07:dd:
                    77:4b:d1:d0:8a:a6:55:85:9a:38:61:ce:24:22:a7:
                    eb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:26:1F:65:F3:23:90:B7:5E:59:F9:3D:42:31:29:88:8F:46:33:73
            X509v3 Authority Key Identifier:
                keyid:40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/HSYfZfMjkLdeWfk9QjEpiI9GM3M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.253.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:26:e1:c0:60:6a:d2:0a:24:53:08:01:8a:db:01:ba:6a:03:
         cc:6c:74:dc:99:0f:f6:b6:9f:9e:a1:d7:03:35:a6:2a:24:ec:
         fe:f1:ec:a4:16:73:7a:7c:6e:a1:2a:91:ea:be:f9:ad:1e:c1:
         50:09:8b:dc:ea:07:08:4a:b5:84:87:d3:08:7f:eb:fa:89:d1:
         fe:86:9e:7e:cc:95:9a:0b:b2:ec:81:27:76:e1:db:07:f5:8c:
         1c:fd:ac:c1:b8:6e:c1:36:ab:61:66:93:9d:c1:16:02:6b:ad:
         f1:96:c3:1a:f0:13:c1:f5:63:09:b2:96:71:8e:c8:d0:02:cd:
         38:2f:fe:a1:eb:bc:b2:d0:7d:24:51:ff:26:bb:fa:f9:32:67:
         75:6f:58:0d:17:78:bf:3c:91:2f:5f:92:08:f9:62:e6:0a:59:
         99:87:d6:3d:6c:21:e8:15:5d:1a:65:fa:47:51:3b:26:9a:85:
         d6:d9:19:cc:a5:47:2a:e7:02:a7:27:fc:34:ab:34:ab:35:f8:
         a3:db:e8:d3:2b:7d:b1:24:25:5b:0d:48:e3:04:5e:ca:ce:91:
         65:af:03:0f:31:0a:ca:d0:f9:c3:b2:72:a6:6c:02:ee:01:89:
         07:bc:69:df:0f:4c:14:1f:b3:6f:9f:64:8b:81:11:df:a8:4f:
         78:58:0d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:13 2024 by rpki-client on console-fra.rpki-client.org