Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/G1sgMDF5iyY23xZtFPORS9FzP6M.roa
File:                     G1sgMDF5iyY23xZtFPORS9FzP6M.roa (raw, json)
Hash identifier:          BKpl8Kfjj/Ding6iASMXY9D6pGFkISFaa5jZ+hfxZco=
Subject key identifier:   1B:5B:20:30:31:79:8B:26:36:DF:16:6D:14:F3:91:4B:D1:73:3F:A3
Certificate issuer:       /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial:       018C209850297165B8B9F273483EA8825064
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/G1sgMDF5iyY23xZtFPORS9FzP6M.roa
Signing time:             Thu 30 Nov 2023 14:18:21 +0000
ROA not before:           Thu 30 Nov 2023 14:18:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        85.11.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:20:98:50:29:71:65:b8:b9:f2:73:48:3e:a8:82:50:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
        Validity
            Not Before: Nov 30 14:18:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1b5b203031798b2636df166d14f3914bd1733fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2b:e3:b3:8d:51:c9:f9:45:ca:bc:d6:ef:7a:
                    34:af:c0:c0:fa:4d:52:a9:ef:5e:a9:a5:3e:3d:b3:
                    18:01:ad:f8:19:fd:35:09:80:47:0c:15:7c:10:08:
                    e5:36:87:bd:2b:cb:d3:03:54:d4:78:70:e7:c7:57:
                    0d:8d:73:5e:e8:33:e1:ca:b1:2f:cc:41:a5:f8:a9:
                    b2:83:c3:06:a0:62:72:4b:d4:2e:9e:10:ec:b3:aa:
                    b9:4e:51:4a:d8:7f:c4:a7:b8:80:5f:ef:b8:57:16:
                    a1:00:5d:59:88:04:76:d8:37:8a:1e:f8:a2:13:18:
                    d7:2d:7b:c1:17:af:96:05:37:0e:ba:65:1d:79:72:
                    63:76:89:d5:e9:b7:ed:14:d6:3b:8d:e8:8c:7a:d4:
                    e4:e8:ed:10:29:67:e9:8e:f8:8b:56:16:22:c6:d2:
                    fb:3e:2b:ba:05:03:92:da:c5:a2:91:67:e3:0a:d5:
                    77:d4:6c:6b:87:68:10:f8:eb:10:fd:e8:a9:be:7f:
                    91:c3:a3:f8:27:69:1b:c3:41:b6:8f:30:9f:b5:3c:
                    c5:3d:1c:fb:3c:4a:1a:4b:98:db:62:f2:77:46:7b:
                    5f:ad:25:68:0c:ad:84:9a:09:17:22:e1:c2:72:51:
                    13:16:13:00:92:d7:fd:b3:0e:48:93:7a:ed:22:f2:
                    23:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5B:20:30:31:79:8B:26:36:DF:16:6D:14:F3:91:4B:D1:73:3F:A3
            X509v3 Authority Key Identifier:
                keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/G1sgMDF5iyY23xZtFPORS9FzP6M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.11.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:3a:db:c4:ab:2e:d7:a9:bc:91:06:44:f9:97:2d:d7:87:cf:
         0c:6a:a9:cb:ac:01:01:3e:30:20:3e:65:df:b3:9c:d3:e7:bf:
         3f:fb:da:a7:26:d4:63:c9:69:ac:e1:8e:3e:9b:84:8c:b9:96:
         84:6f:63:fe:30:93:f9:dc:c5:bc:56:fd:ad:e9:7c:20:58:73:
         98:aa:66:00:fa:c0:76:a1:50:f4:66:51:d6:61:94:01:1e:97:
         45:e2:2f:75:b2:e1:1d:a9:c7:ae:b4:10:e9:78:cd:54:aa:49:
         c2:b0:65:a1:ea:0c:34:15:3e:49:c1:96:94:fa:77:d4:8d:3a:
         b3:3d:0c:5f:aa:20:34:20:02:74:4d:ba:56:26:ce:71:b3:a9:
         3d:0c:d5:64:5a:14:3a:0d:86:2a:03:aa:97:f9:70:d7:84:ca:
         af:a1:1f:91:16:dd:6b:57:06:bc:58:d6:ae:32:86:c8:e4:4c:
         37:71:e3:7f:ae:23:f1:f0:35:97:5d:a8:c0:ac:92:92:ff:ea:
         57:47:70:6d:6d:2e:8a:06:9f:38:3a:3c:da:e0:66:ae:c9:28:
         47:4f:9f:21:d8:f6:21:22:e4:83:38:52:3d:cd:0f:18:83:84:
         87:25:b6:c6:b4:86:9c:28:ca:b1:44:e1:16:32:8e:73:27:71:
         34:54:ce:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:56 2024 by rpki-client on console-ams.rpki-client.org