Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/0A2B3Co3WacGfG3P0eCPCUf1jzA.roa
File:                     0A2B3Co3WacGfG3P0eCPCUf1jzA.roa (raw, json)
Hash identifier:          iShFINmodkOQ0e/pgka83OjrcYxqzzlJvjenWZZZWAo=
Subject key identifier:   D0:0D:81:DC:2A:37:59:A7:06:7C:6D:CF:D1:E0:8F:09:47:F5:8F:30
Certificate issuer:       /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial:       018E9316BF79372FA973138A8261BF642E36
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/0A2B3Co3WacGfG3P0eCPCUf1jzA.roa
Signing time:             Sun 31 Mar 2024 05:58:45 +0000
ROA not before:           Sun 31 Mar 2024 05:58:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     21859
IP address blocks:        185.155.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 02 May 2024 10:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:93:16:bf:79:37:2f:a9:73:13:8a:82:61:bf:64:2e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
        Validity
            Not Before: Mar 31 05:58:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d00d81dc2a3759a7067c6dcfd1e08f0947f58f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4f:0e:c6:dd:62:5a:1b:bc:90:d0:dd:f3:db:
                    51:8f:f8:97:11:37:e5:fa:ab:f8:6a:0a:96:c3:df:
                    73:b9:af:e2:da:dc:02:3f:31:98:e2:86:b0:94:be:
                    be:45:16:33:3d:e5:ce:32:ee:0b:5b:7f:f4:c7:ad:
                    a6:78:06:44:75:dd:42:62:b0:89:b5:22:09:9d:52:
                    f3:12:85:2a:28:1b:9f:01:99:07:33:8b:23:98:60:
                    6a:fb:7a:84:9b:98:9d:7a:2b:f8:72:81:ab:c6:3e:
                    3c:be:b2:85:eb:14:ff:2b:46:16:58:c6:3f:74:79:
                    ce:79:31:05:b8:f2:59:65:1a:2e:a8:10:49:ed:50:
                    99:b2:d4:93:b3:36:89:2d:d3:fa:ca:95:6a:35:84:
                    e2:5d:79:c8:85:f7:0c:66:ee:74:fd:fd:5f:66:e6:
                    36:46:cc:ab:7e:2c:33:16:93:bc:27:3b:de:6c:b0:
                    a9:49:55:0c:41:0c:76:16:cf:28:f1:05:6f:ec:03:
                    9f:e1:b1:59:d2:a0:17:83:8a:c1:75:10:8a:31:3b:
                    e1:06:fb:0e:09:be:cd:62:ed:5f:6b:22:89:b9:09:
                    ad:bc:d5:12:a8:ec:d1:48:2c:02:be:00:f9:64:d6:
                    7c:19:cc:44:bd:a8:ad:a8:57:13:e0:a8:d7:c4:c8:
                    99:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0D:81:DC:2A:37:59:A7:06:7C:6D:CF:D1:E0:8F:09:47:F5:8F:30
            X509v3 Authority Key Identifier:
                keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/0A2B3Co3WacGfG3P0eCPCUf1jzA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:3b:42:cc:6f:4e:da:00:fb:f5:ae:4e:3b:b0:96:88:e5:80:
         58:75:c7:9b:81:f9:95:b7:2b:c2:80:66:bd:28:db:4b:c4:18:
         25:6b:1a:1a:9e:ce:ad:ab:94:7a:34:62:c3:34:96:82:cc:b5:
         d8:2f:f9:bc:0b:52:a7:0e:a3:1b:69:40:fc:6c:64:03:04:40:
         d7:8d:8b:dc:a3:b5:89:0e:c5:38:44:3e:e9:88:5b:76:ca:e5:
         78:20:67:1a:81:15:7b:eb:cf:23:5c:86:5a:77:63:a2:90:cc:
         a8:09:52:e4:0a:d9:64:1c:93:3b:0e:5f:73:36:56:8d:7f:41:
         50:f4:5d:f6:7d:7f:22:53:87:57:17:92:a9:2e:8d:f3:1a:82:
         54:66:8f:a7:13:ef:31:d4:c3:80:73:36:58:41:03:fa:fa:d8:
         a9:d5:4d:4e:23:df:37:bc:13:3b:4d:5a:15:23:39:26:13:d8:
         2e:1b:9b:c4:95:f2:e6:f6:20:26:07:a8:b8:e9:38:51:a4:dc:
         09:25:c2:fc:63:77:28:4a:f6:a1:23:25:91:da:ff:d9:6c:46:
         c0:6c:1d:79:ef:16:36:98:b3:c2:86:ea:79:fd:c6:c9:fe:88:
         6b:d7:a3:fa:bb:a8:07:f8:7b:e2:f6:1e:48:6d:d5:ad:24:83:
         f1:1a:fb:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6TFr95Ny+pcxOKgmG/ZC42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl
NTUxNDIwHhcNMjQwMzMxMDU1ODQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDBkODFkYzJhMzc1OWE3MDY3YzZkY2ZkMWUwOGYwOTQ3ZjU4ZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU8Oxt1iWhu8kNDd89tRj/iXETfl
+qv4agqWw99zua/i2twCPzGY4oawlL6+RRYzPeXOMu4LW3/0x62meAZEdd1CYrCJ
tSIJnVLzEoUqKBufAZkHM4sjmGBq+3qEm5ideiv4coGrxj48vrKF6xT/K0YWWMY/
dHnOeTEFuPJZZRouqBBJ7VCZstSTszaJLdP6ypVqNYTiXXnIhfcMZu50/f1fZuY2
RsyrfiwzFpO8JzvebLCpSVUMQQx2Fs8o8QVv7AOf4bFZ0qAXg4rBdRCKMTvhBvsO
Cb7NYu1fayKJuQmtvNUSqOzRSCwCvgD5ZNZ8GcxEvaitqFcT4KjXxMiZCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNANgdwqN1mnBnxtz9HgjwlH9Y8wMB8GA1UdIwQY
MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct
YzgyM2NjOGYzODM3LzEvMEEyQjNDbzNXYWNHZkczUDBlQ1BDVWYxanpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3
LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZs3MA0G
CSqGSIb3DQEBCwUAA4IBAQBsO0LMb07aAPv1rk47sJaI5YBYdcebgfmVtyvCgGa9
KNtLxBglaxoans6tq5R6NGLDNJaCzLXYL/m8C1KnDqMbaUD8bGQDBEDXjYvco7WJ
DsU4RD7piFt2yuV4IGcagRV7688jXIZad2OikMyoCVLkCtlkHJM7Dl9zNlaNf0FQ
9F32fX8iU4dXF5KpLo3zGoJUZo+nE+8x1MOAczZYQQP6+tip1U1OI983vBM7TVoV
IzkmE9guG5vElfLm9iAmB6i46ThRpNwJJcL8Y3coSvahIyWR2v/ZbEbAbB157xY2
mLPChup5/cbJ/ohr16P6u6gH+Hvi9h5IbdWtJIPxGvvC
-----END CERTIFICATE-----
Generated at Thu May 2 13:51:20 2024 by rpki-client on console-fra.rpki-client.org