Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/pYeU_x9HcBHdWrajZEfYsMVPYBU.roa
File:                     pYeU_x9HcBHdWrajZEfYsMVPYBU.roa (raw, json)
Hash identifier:          b/PJFo184C8x+KuAOlk2DbAe4XXYpnjPrVSj4t8Vz/s=
Subject key identifier:   A5:87:94:FF:1F:47:70:11:DD:5A:B6:A3:64:47:D8:B0:C5:4F:60:15
Certificate issuer:       /CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Certificate serial:       018A237A69FBF887702E596A61D463EDCF23
Authority key identifier: E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/pYeU_x9HcBHdWrajZEfYsMVPYBU.roa
Signing time:             Wed 23 Aug 2023 17:38:59 +0000
ROA not before:           Wed 23 Aug 2023 17:38:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49100
IP address blocks:        185.162.216.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 23 Aug 2023 17:52:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:23:7a:69:fb:f8:87:70:2e:59:6a:61:d4:63:ed:cf:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
        Validity
            Not Before: Aug 23 17:38:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a58794ff1f477011dd5ab6a36447d8b0c54f6015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:e8:e4:89:cd:d9:e8:97:67:f4:2b:13:e8:
                    b1:bf:40:83:c2:af:d7:1c:9b:1f:86:28:0b:2b:42:
                    bd:dc:65:0a:44:26:7a:42:16:d3:ad:83:1a:0b:02:
                    83:36:e4:fb:da:5a:06:68:bf:ee:9d:35:e1:f3:07:
                    e5:11:c1:4c:c2:01:62:d0:37:39:92:96:ba:fe:d7:
                    0c:34:56:68:71:1f:82:30:90:3a:97:76:35:d2:1c:
                    36:2a:93:d1:66:d6:c9:49:e8:f9:10:cd:0d:6b:b0:
                    d3:9f:d9:71:23:a5:86:42:04:1e:e9:84:2a:c6:a6:
                    43:87:e8:6b:9c:b3:59:60:18:00:4a:64:8a:99:e7:
                    07:dd:a9:5a:e1:ea:01:b9:f0:a1:01:29:e0:e3:78:
                    1a:7f:85:13:50:37:4d:15:9c:47:24:7f:65:0d:b6:
                    58:47:84:3c:63:a2:bc:fe:b3:60:3e:6b:56:36:73:
                    78:af:1d:6c:48:80:da:eb:c2:32:79:97:0e:23:c4:
                    7f:72:23:15:52:b7:6b:16:54:40:8c:bd:97:90:87:
                    7d:a0:b2:b9:62:6f:fc:f0:1d:5e:8d:2c:fb:a4:05:
                    db:2f:04:30:56:13:7f:55:ab:5a:9e:4c:3a:03:c0:
                    84:2c:96:55:18:cb:23:42:37:ef:52:bf:19:43:4e:
                    2c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:87:94:FF:1F:47:70:11:DD:5A:B6:A3:64:47:D8:B0:C5:4F:60:15
            X509v3 Authority Key Identifier:
                keyid:E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/pYeU_x9HcBHdWrajZEfYsMVPYBU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.162.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:2b:a5:6e:e5:35:79:79:e7:c2:25:4c:67:30:5a:06:39:be:
         6d:fb:5d:ff:86:aa:ef:34:39:dd:f2:21:4c:3a:f1:9d:45:7e:
         ef:f6:b3:71:c0:e1:91:e4:28:36:6f:e0:e5:b2:ac:04:bd:6b:
         bd:c4:b2:fb:db:e9:89:4a:12:74:a3:6f:ae:07:dd:5f:e9:94:
         e7:40:42:f4:b3:96:e7:6e:71:61:83:14:af:77:d7:2d:84:97:
         27:b5:0d:0e:90:da:51:4b:d8:d0:d0:9a:a0:76:0c:e6:85:47:
         ee:4d:f0:ac:7f:2a:96:5b:d4:d6:d2:87:d2:98:99:cc:05:f1:
         65:ad:21:db:cf:16:cf:b8:ef:03:29:16:f1:f1:d7:a2:08:fa:
         b3:a3:17:6a:5a:29:1c:26:4a:16:46:f7:cf:ad:12:7f:ba:25:
         7e:21:3b:dc:46:2b:47:f9:f5:fd:11:4c:02:3e:1d:3e:95:2b:
         83:13:dd:69:9a:bf:93:96:82:63:1a:3a:ca:1d:58:2e:af:16:
         ad:86:05:87:fe:45:65:c9:8d:b4:b5:f7:52:ce:5d:33:a0:04:
         8d:cd:2e:be:4c:69:dd:cd:48:54:87:08:58:fc:c1:67:2f:c4:
         5a:57:f1:1e:2e:d0:e9:6b:f1:2a:12:24:4c:96:5a:76:97:9f:
         07:fa:eb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:43 2024 by rpki-client on console-ams.rpki-client.org