Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/SeMojPr8S178BXi1A5A6nj4b63M.roa
File:                     SeMojPr8S178BXi1A5A6nj4b63M.roa (raw, json)
Hash identifier:          uOWGCYZAFGveZN9rLEsnRO+iWmFNBhudUQ3aYkLf6TQ=
Subject key identifier:   49:E3:28:8C:FA:FC:4B:5E:FC:05:78:B5:03:90:3A:9E:3E:1B:EB:73
Certificate issuer:       /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial:       018CB4B6FFA1119F6557C36519AE0FE1E274
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/SeMojPr8S178BXi1A5A6nj4b63M.roa
Signing time:             Fri 29 Dec 2023 08:35:40 +0000
ROA not before:           Fri 29 Dec 2023 08:35:40 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     396356
IP address blocks:        185.139.34.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b4:b6:ff:a1:11:9f:65:57:c3:65:19:ae:0f:e1:e2:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
        Validity
            Not Before: Dec 29 08:35:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=49e3288cfafc4b5efc0578b503903a9e3e1beb73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8a:ea:7e:7f:7c:48:e3:9e:e4:5e:7b:35:be:
                    fc:de:4c:10:83:ee:dd:72:5a:7a:a8:31:4d:e1:24:
                    9b:87:05:3f:cd:8e:c6:95:49:c3:ec:e7:1a:d4:d6:
                    9e:ab:67:69:2e:8c:a1:24:ca:f6:e0:ff:f6:3e:9a:
                    4e:b5:2f:9f:1e:ba:f6:6e:d0:ba:63:c0:11:47:46:
                    ad:9c:0d:ab:e5:48:31:f3:6c:52:6d:7a:6b:b6:16:
                    02:d7:0b:73:d6:e6:14:7a:fe:15:93:35:da:08:8e:
                    f4:72:1d:89:d4:4a:f8:18:de:ac:95:e1:13:ac:32:
                    70:2e:32:38:95:4e:bb:76:8a:87:4e:e5:81:97:8b:
                    8a:a1:eb:ab:62:e0:65:b4:2b:10:cb:08:d5:5f:e9:
                    fb:48:f6:81:84:8d:8c:2c:08:36:80:c4:44:4b:87:
                    fc:0a:6c:2f:2c:a1:27:19:c8:83:c7:0f:d5:31:a8:
                    bb:dd:83:2a:81:92:dd:ec:6c:8d:1e:9c:1a:74:0a:
                    28:63:77:61:a0:b4:85:49:5e:ad:5e:68:d8:17:48:
                    93:bc:1c:66:1e:0e:68:44:15:53:30:05:2c:ea:42:
                    d4:78:d8:81:45:c6:6f:ee:3b:0c:dd:d6:70:98:27:
                    19:f6:ad:8f:20:85:6d:fb:5d:f9:6e:b0:e1:25:ea:
                    ad:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E3:28:8C:FA:FC:4B:5E:FC:05:78:B5:03:90:3A:9E:3E:1B:EB:73
            X509v3 Authority Key Identifier:
                keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/SeMojPr8S178BXi1A5A6nj4b63M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:4d:1c:e0:d5:05:82:9c:a1:81:d4:8e:7d:9e:c1:62:46:7d:
         cf:fe:c1:34:fc:5f:15:3a:67:a1:8d:69:f0:d9:4c:07:90:22:
         9e:90:44:f3:2d:1c:bd:17:74:61:43:ed:87:dd:24:39:52:35:
         76:93:64:3a:af:51:22:26:da:63:cd:fc:89:43:a0:65:c6:07:
         00:ed:be:80:d8:8c:76:8b:66:92:fc:21:e7:a4:53:bf:4c:e3:
         10:ec:58:93:f3:f3:76:c6:a0:a1:81:98:82:84:cf:b7:ee:12:
         2f:d5:f4:ed:c9:b3:87:18:01:91:ad:b8:98:60:bd:e8:4c:e7:
         a5:11:8c:f9:83:9a:1b:df:6b:89:cd:c7:3f:f0:b3:6c:86:23:
         2b:19:a6:ef:46:bf:34:25:7b:5b:ed:89:6f:18:a6:f8:25:1e:
         19:fb:01:95:6c:4a:63:fe:5c:9a:df:4a:97:32:bd:ba:58:34:
         ad:62:c3:96:65:31:f8:64:0f:17:99:16:d5:4d:0c:e5:01:a8:
         d7:b4:b3:4f:1d:f2:15:cd:56:b6:f8:ac:74:c3:82:94:50:30:
         7f:7b:f5:f7:c5:2c:49:1d:2c:30:d2:d5:c3:59:21:b9:64:85:
         ca:78:a2:52:11:fb:01:f5:9d:1b:af:1e:68:42:fd:9c:d0:78:
         d3:3f:97:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:47 2024 by rpki-client on console-ams.rpki-client.org