Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/JuVrO9X-CxeowVKtSn5FmrRhHWU.roa
File:                     JuVrO9X-CxeowVKtSn5FmrRhHWU.roa (raw, json)
Hash identifier:          mDukffKssU+1Le5cgyQkk8x4LPscVQNBqt8VuDyKRiM=
Subject key identifier:   26:E5:6B:3B:D5:FE:0B:17:A8:C1:52:AD:4A:7E:45:9A:B4:61:1D:65
Certificate issuer:       /CN=fe076c4eb82198289b13ff528593907d3214d648
Certificate serial:       0186BC894F123ADB8040417DEDC02E22516D
Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/JuVrO9X-CxeowVKtSn5FmrRhHWU.roa
Signing time:             Tue 07 Mar 2023 14:46:00 +0000
ROA not before:           Tue 07 Mar 2023 14:46:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211871
IP address blocks:        185.139.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 28 Nov 2023 09:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:bc:89:4f:12:3a:db:80:40:41:7d:ed:c0:2e:22:51:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648
        Validity
            Not Before: Mar  7 14:46:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26e56b3bd5fe0b17a8c152ad4a7e459ab4611d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b1:75:83:3d:fb:79:f1:aa:ff:a7:b9:c4:5b:
                    b5:5e:97:be:d3:3f:d1:1b:cb:a8:fa:9f:a8:a9:42:
                    47:a8:32:6d:99:1a:35:d5:52:15:47:0e:90:b9:12:
                    3e:42:29:42:5b:c6:8a:14:7b:b2:f1:73:8f:42:fa:
                    51:a2:f6:52:89:55:9a:e6:4c:90:0e:7b:c0:15:f3:
                    08:9f:eb:ff:4b:56:e9:ac:f6:53:e4:ec:34:d1:fc:
                    7c:a2:bf:1e:9d:ec:4d:51:aa:44:fb:c6:28:f9:2c:
                    e5:c3:49:14:fb:84:ab:ba:13:13:12:45:49:d8:3f:
                    f6:3d:66:fa:65:a0:75:34:5b:3f:45:52:11:b1:0f:
                    ec:c4:6a:84:c5:78:0c:69:9b:ac:a5:49:43:14:24:
                    78:0c:2b:d7:ff:17:dd:14:cf:ae:9b:b5:49:3b:ea:
                    94:42:55:ce:78:44:3e:68:1b:1f:30:2e:85:77:e4:
                    90:18:9b:7e:13:a6:62:29:35:67:27:58:5b:06:d6:
                    ab:97:21:4f:74:88:53:b6:65:21:6f:18:75:9e:9a:
                    65:a3:a2:4a:5f:c0:b5:6b:00:d8:cc:aa:69:a2:7b:
                    44:89:49:a7:63:4b:34:a0:73:a1:67:bc:86:9e:c2:
                    0e:5b:1c:65:13:c8:94:95:43:d1:8c:8c:e5:a2:5a:
                    65:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E5:6B:3B:D5:FE:0B:17:A8:C1:52:AD:4A:7E:45:9A:B4:61:1D:65
            X509v3 Authority Key Identifier:
                keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/JuVrO9X-CxeowVKtSn5FmrRhHWU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:b5:36:f5:9b:5e:f2:15:11:74:ac:0d:21:2a:60:65:9e:a9:
         17:19:95:34:d3:fa:1f:49:0e:df:02:ad:e5:2a:62:87:ee:b0:
         5d:55:95:f0:61:60:63:4d:6e:cc:d0:59:07:1a:f9:0d:a1:f0:
         86:6a:f4:bd:ab:85:28:72:e4:9d:cb:74:16:a5:ed:07:54:5c:
         48:ef:7e:0f:f3:26:4f:f2:24:13:d7:d4:d2:0e:b4:85:ea:eb:
         5f:ab:24:50:39:c1:be:89:23:b8:99:c5:3e:6a:69:ff:ba:75:
         39:bd:3b:af:be:c7:33:1b:4a:ca:2b:bd:fd:13:01:f7:5d:7f:
         4d:62:7f:6d:80:99:ca:34:89:89:27:2d:8c:ff:d6:a9:fa:73:
         94:6e:75:d0:28:25:ab:67:82:5f:48:69:ad:fa:da:5a:e0:19:
         6c:8f:15:fe:0f:15:2a:fb:d2:f2:60:46:af:cd:d4:46:3b:07:
         81:09:0c:79:0e:7d:67:47:14:ad:51:db:42:f5:76:32:be:02:
         d2:97:b0:1f:4a:48:b3:d2:a7:4c:2e:a1:ab:86:21:c7:0d:0e:
         ca:49:17:4f:c9:ff:2e:85:04:31:89:70:13:25:c3:3a:e4:90:
         37:da:75:7b:13:58:59:67:a9:7c:b8:33:84:cc:31:a7:64:55:
         31:0b:50:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:15 2024 by rpki-client on console-ams.rpki-client.org