Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/frexbjYfsQCjNhfKOelx1ON84PI.roa
File:                     frexbjYfsQCjNhfKOelx1ON84PI.roa (raw, json)
Hash identifier:          RsZj7ME9tdiTD8FWMLd1TbrxsxBMcgE2Trf8u0afLKo=
Subject key identifier:   7E:B7:B1:6E:36:1F:B1:00:A3:36:17:CA:39:E9:71:D4:E3:7C:E0:F2
Certificate issuer:       /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial:       0187030D29C46A329568AFADDE29152846EF
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/frexbjYfsQCjNhfKOelx1ON84PI.roa
Signing time:             Tue 21 Mar 2023 07:23:26 +0000
ROA not before:           Tue 21 Mar 2023 07:23:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208068
IP address blocks:        185.139.35.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 19 May 2023 18:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:03:0d:29:c4:6a:32:95:68:af:ad:de:29:15:28:46:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
        Validity
            Not Before: Mar 21 07:23:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7eb7b16e361fb100a33617ca39e971d4e37ce0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:02:c8:90:b7:59:eb:34:24:ba:7c:29:90:7a:
                    ad:17:18:03:d6:d9:1c:ad:f3:31:97:35:04:0c:01:
                    e4:8c:8d:4f:4a:2b:6a:7f:be:0f:11:e7:31:46:1b:
                    9c:25:1a:55:87:e1:08:41:28:1c:91:95:66:ef:72:
                    f2:24:44:a5:37:ef:27:b4:f0:77:e1:b0:57:b9:d2:
                    41:34:ca:c6:d6:c9:b6:ec:7e:48:79:77:e3:14:9e:
                    00:5f:92:c2:bc:87:06:eb:4c:61:b9:74:e1:a8:51:
                    be:db:d4:83:b9:fb:44:fc:39:f7:4f:2b:ca:fe:2e:
                    9d:5f:cf:af:e7:84:41:62:3d:de:8e:28:50:95:5a:
                    25:26:11:90:e7:e5:30:25:5e:95:c2:6f:61:1e:13:
                    98:0f:dc:c9:da:45:27:9d:9a:1c:8f:76:1f:5d:a6:
                    67:f0:9b:3e:b6:67:1e:fa:65:ad:22:f8:ae:84:6c:
                    36:b5:9b:99:51:29:56:f5:fb:50:d9:74:73:d6:82:
                    f8:b6:fb:c2:fa:0b:8c:91:00:40:ab:71:b8:a4:d1:
                    03:1c:2d:ae:06:dc:81:5a:ef:77:ca:10:51:de:c1:
                    54:74:9d:e3:57:23:2a:31:54:ef:d8:05:c3:b9:12:
                    76:57:2b:1b:80:9b:f7:cc:04:c8:c0:7c:cc:63:43:
                    48:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B7:B1:6E:36:1F:B1:00:A3:36:17:CA:39:E9:71:D4:E3:7C:E0:F2
            X509v3 Authority Key Identifier:
                keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/frexbjYfsQCjNhfKOelx1ON84PI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:5f:a3:b9:0a:b6:ca:8f:a5:36:3d:32:d8:84:fc:16:42:19:
         d1:0c:d8:fb:e0:ed:17:f8:36:0c:29:73:bd:6d:f5:cb:8c:41:
         e0:d9:a3:86:1d:d2:cf:44:06:61:33:32:93:f9:6a:d7:c2:a0:
         99:77:73:dd:1b:5e:24:91:22:93:27:79:be:55:cd:35:c1:46:
         37:b7:c7:d1:99:50:58:a1:1e:06:5f:97:27:0c:1f:30:ea:2c:
         a1:b3:7f:a6:98:26:f9:b8:ce:88:91:5e:c9:46:43:77:3f:1d:
         80:75:d2:e9:4a:c0:92:97:eb:2b:b8:de:23:26:14:22:19:44:
         6a:ee:d9:e1:b1:86:39:1e:8f:f0:d3:19:e9:79:c2:34:f4:84:
         41:bb:c6:71:de:be:23:4f:10:d2:e4:42:03:ac:0d:c8:84:0b:
         33:19:ad:35:03:2f:6a:ee:12:05:49:8f:06:20:7b:aa:60:09:
         9e:c6:34:97:08:a6:8c:06:a0:77:80:e4:e6:92:11:a1:d9:3f:
         42:49:64:a5:9a:34:ec:8d:84:37:54:ce:fc:d4:f8:e8:4f:a8:
         79:9e:a7:5e:ad:38:51:22:74:2c:fa:c1:54:1a:a1:d2:3f:2d:
         f0:a3:b1:41:2a:73:44:c9:f0:21:5e:39:46:0f:9a:0a:2b:e5:
         5d:c8:35:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:47 2024 by rpki-client on console-ams.rpki-client.org