Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/SYKfexwX6LsWkQBmrEQlRxvysvU.roa
File:                     SYKfexwX6LsWkQBmrEQlRxvysvU.roa (raw, json)
Hash identifier:          VsD4ZV8VpqCYCfua5AEdCxuHwuPledmWPIsac1CaEX4=
Subject key identifier:   49:82:9F:7B:1C:17:E8:BB:16:91:00:66:AC:44:25:47:1B:F2:B2:F5
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       018AA8A2192A636A528F9579DE9F3A3F20D6
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/SYKfexwX6LsWkQBmrEQlRxvysvU.roa
Signing time:             Mon 18 Sep 2023 14:11:50 +0000
ROA not before:           Mon 18 Sep 2023 14:11:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.81.28.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Sep 2023 06:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a8:a2:19:2a:63:6a:52:8f:95:79:de:9f:3a:3f:20:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Sep 18 14:11:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=49829f7b1c17e8bb16910066ac4425471bf2b2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c4:0f:82:65:d8:ee:2f:b8:be:79:2e:0e:e9:
                    a0:32:12:f6:7f:01:eb:a4:56:d6:79:56:07:51:5e:
                    ce:14:13:d1:7b:49:b1:7c:4d:7e:13:e9:5a:77:41:
                    3c:25:33:7e:5f:5d:2d:4e:ce:bb:0c:4c:f3:8e:79:
                    6a:b6:fb:4c:4c:7d:03:2a:67:93:e5:0f:33:5f:53:
                    da:bd:87:7f:1c:e7:59:dc:ae:e4:ea:fd:d3:e5:28:
                    bf:b9:9d:19:a7:4b:da:60:2a:97:e8:26:b4:87:c8:
                    e8:42:b4:d5:55:51:df:c2:d2:29:8d:dd:63:c6:18:
                    2a:f6:a5:4f:78:e0:96:af:91:16:8e:1c:e6:e1:52:
                    8b:5f:fb:f3:f0:63:c5:a2:a6:3d:b7:dc:fa:c9:c5:
                    a7:07:66:d5:a9:7b:51:07:20:27:47:11:33:5e:de:
                    45:fd:a6:ac:ee:47:00:fc:99:35:fb:66:73:bf:90:
                    23:12:04:de:a7:38:cd:83:33:86:62:cd:60:23:da:
                    b4:1f:36:a6:6e:45:84:7c:87:ce:76:19:8d:1e:a4:
                    72:3d:e4:9b:40:5e:e2:e5:7c:95:94:9e:80:ee:d4:
                    7e:ab:45:e3:e7:6a:8b:dd:33:06:f6:8b:c0:ee:ad:
                    d4:4c:46:97:b7:70:97:57:3f:f5:b1:2e:de:bd:01:
                    94:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:82:9F:7B:1C:17:E8:BB:16:91:00:66:AC:44:25:47:1B:F2:B2:F5
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/SYKfexwX6LsWkQBmrEQlRxvysvU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:89:93:5e:f0:e7:8f:59:68:28:50:05:3a:27:f7:db:35:03:
         54:6e:3e:69:85:55:cc:5b:43:00:0e:23:15:ea:a9:cd:c0:c3:
         7c:8c:5b:74:19:2e:0a:7c:4c:36:99:96:11:ac:63:0d:6b:ea:
         c1:be:bc:c0:04:c3:97:af:ea:f2:f5:7e:f2:c5:2d:26:58:d6:
         96:d9:33:3b:c1:87:de:b9:dd:3b:d9:ff:17:22:d2:7e:b7:51:
         4a:f7:28:58:d7:ff:0c:4e:cf:89:3f:d3:3d:66:e9:90:5f:db:
         de:8c:10:99:bb:02:32:01:5a:57:9e:22:aa:17:db:53:d4:12:
         64:af:19:e2:3a:38:53:35:11:47:54:b3:7d:e5:42:ac:0e:2c:
         26:74:e7:df:d7:4b:be:84:2d:1c:29:e1:b2:27:6d:18:d6:86:
         46:22:ac:91:45:00:14:f0:39:e2:94:f9:29:0b:a2:d9:ba:d1:
         a8:c5:cd:20:ef:19:7f:e0:59:44:7c:7f:44:1f:98:02:23:9b:
         00:55:32:bb:0a:d0:e1:1a:9b:cb:64:1f:b0:09:d2:b0:43:c3:
         e7:7b:ea:8f:22:d2:f6:a0:53:c7:3f:23:96:60:53:d7:13:a5:
         8b:48:7e:74:7a:eb:fe:bb:6d:d5:07:2f:17:af:a9:a1:be:7d:
         60:da:2b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:38 2024 by rpki-client on console-ams.rpki-client.org