Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/SPHJble-58c4SrRcFTXUWeJ4xp4.roa
File:                     SPHJble-58c4SrRcFTXUWeJ4xp4.roa (raw, json)
Hash identifier:          lUYM6AWQwvo4ffbq6Bfgmeot34zE1UoQVgK8QXLPsck=
Subject key identifier:   48:F1:C9:6E:57:BE:E7:C7:38:4A:B4:5C:15:35:D4:59:E2:78:C6:9E
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       0187B24864221A34CD8A08A933AEE137B0EE
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/SPHJble-58c4SrRcFTXUWeJ4xp4.roa
Signing time:             Mon 24 Apr 2023 08:01:41 +0000
ROA not before:           Mon 24 Apr 2023 08:01:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.81.28.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 05 May 2023 12:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b2:48:64:22:1a:34:cd:8a:08:a9:33:ae:e1:37:b0:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Apr 24 08:01:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=48f1c96e57bee7c7384ab45c1535d459e278c69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:97:10:2a:84:88:df:22:13:3c:fd:d8:fe:87:
                    05:a7:be:06:c1:df:7b:52:05:f3:04:27:2c:80:f4:
                    4c:a0:b5:63:69:5e:ec:12:58:ce:64:07:22:f9:04:
                    ec:67:29:b8:b3:97:94:f2:ad:a3:c1:4c:4e:93:45:
                    df:21:7f:ba:12:2b:a1:29:da:c7:5f:93:4c:37:92:
                    ed:a8:cd:69:8c:6f:5d:8f:8f:8b:0b:9a:62:12:a0:
                    b7:ac:0c:87:a9:6a:3c:ac:2c:9a:58:81:71:58:86:
                    42:3e:1f:8f:05:49:48:33:63:c4:b0:de:c6:4b:c3:
                    d0:45:92:4b:66:5d:e1:e5:6f:a3:77:d3:6b:78:cb:
                    82:e2:35:a8:f9:93:cb:d9:05:41:36:fd:17:46:a1:
                    00:b3:20:e8:7c:cb:c7:82:a2:bc:6a:03:02:29:8b:
                    c4:1f:b0:98:c4:73:00:7b:78:43:44:b0:a7:a1:c7:
                    cb:6d:85:70:3a:96:31:f7:ed:60:6c:89:22:5e:21:
                    47:52:4a:d7:48:34:4c:43:d8:e2:b0:06:cd:c4:d8:
                    ab:5d:51:e8:d5:5b:15:e4:24:8d:75:65:3a:46:16:
                    f6:48:ac:f3:2d:0d:5e:dc:db:9a:29:65:f4:0e:a9:
                    ad:26:d5:7f:e8:de:a4:db:e3:52:87:47:4f:1f:4b:
                    6b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F1:C9:6E:57:BE:E7:C7:38:4A:B4:5C:15:35:D4:59:E2:78:C6:9E
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/SPHJble-58c4SrRcFTXUWeJ4xp4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:9a:d5:8d:5d:ca:7b:a7:d7:39:4d:c8:45:31:f9:b0:18:cc:
         13:b3:47:60:b7:83:8d:44:b0:46:26:05:ad:0d:4a:f2:08:d8:
         f5:38:75:7d:1f:1e:a2:43:4d:8a:cb:30:28:85:98:52:6a:7d:
         58:d4:22:31:d1:05:f5:8c:9b:1d:c2:73:23:39:41:dd:02:9e:
         fb:0e:f5:be:6a:fb:08:f8:1e:b4:2f:46:d4:f9:e0:49:96:e3:
         cf:9a:bc:42:ba:73:2e:3e:a0:a4:99:2f:53:70:d5:86:00:fe:
         97:3b:1f:ac:eb:22:b0:37:33:82:4e:c2:8a:d1:4d:46:d4:9a:
         64:83:68:68:ac:d0:a9:7e:c3:b5:20:f2:99:28:3c:1a:1a:e1:
         30:2d:7f:ae:a5:9c:72:93:d5:a9:c9:45:e2:a4:43:dc:38:38:
         de:2a:f7:f9:e1:d6:ef:c6:ae:1c:b7:4b:34:1d:e8:04:e5:29:
         5a:08:c3:9c:4f:87:de:b3:d0:cc:6a:a1:62:44:9a:aa:40:72:
         3c:ad:de:84:40:bc:41:37:7a:b7:4e:30:41:c3:94:94:91:d9:
         53:e9:62:48:23:e5:4f:10:ed:8b:c5:bc:d6:de:bf:88:71:f5:
         0b:da:7e:67:9b:4a:dd:01:84:8c:2d:ea:57:b6:e1:bc:63:be:
         56:34:4d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:38 2024 by rpki-client on console-ams.rpki-client.org