Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/2wC-pv3KYD4d_CcenzK1Jk2JWMo.roa
File:                     2wC-pv3KYD4d_CcenzK1Jk2JWMo.roa (raw, json)
Hash identifier:          iikV8X1MPqDsBzirQyTQEnlbI9Ha8sBEMqRsJkxAH3I=
Subject key identifier:   DB:00:BE:A6:FD:CA:60:3E:1D:FC:27:1E:9F:32:B5:26:4D:89:58:CA
Certificate issuer:       /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial:       0188E28A086672121A66A143242ADBDAC076
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/2wC-pv3KYD4d_CcenzK1Jk2JWMo.roa
Signing time:             Thu 22 Jun 2023 09:57:56 +0000
ROA not before:           Thu 22 Jun 2023 09:57:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205320
IP address blocks:        185.155.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 15 Aug 2023 15:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e2:8a:08:66:72:12:1a:66:a1:43:24:2a:db:da:c0:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
        Validity
            Not Before: Jun 22 09:57:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=db00bea6fdca603e1dfc271e9f32b5264d8958ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d9:37:b0:06:9f:ee:95:6b:3d:3d:da:3c:38:
                    9f:f1:e4:66:1a:76:1b:ec:57:03:d8:c2:4b:cd:78:
                    58:c6:93:38:32:ce:9b:11:13:61:2a:dc:1b:fd:ea:
                    65:53:9c:63:a1:8e:80:26:2c:40:19:72:ab:a0:21:
                    1b:66:ec:c7:9e:83:88:11:cc:70:02:56:8a:1b:64:
                    a4:86:a9:c0:5a:41:4c:5e:c2:90:ab:ee:5c:bb:13:
                    25:1a:fb:be:8f:df:62:ae:2e:e9:02:83:58:bf:61:
                    c1:9a:90:47:17:f6:47:1e:29:7f:a8:0e:e1:57:7b:
                    07:d5:66:69:91:ad:ef:0c:bb:c8:a8:31:9d:1a:d9:
                    fe:2f:51:5d:89:06:24:c4:42:6c:06:83:20:06:cb:
                    ad:c1:f6:dc:01:d9:b8:cb:4d:f7:06:a4:5e:da:1b:
                    a8:7a:25:48:87:a9:63:67:0c:2d:51:0d:f6:80:c3:
                    0d:89:e0:4d:62:e1:95:4b:77:af:c2:5d:2c:67:20:
                    c2:9d:9e:dd:96:95:e3:f4:aa:ab:4b:29:e6:94:c2:
                    95:d2:68:e2:dd:3c:ba:3a:91:52:c3:73:26:e2:e4:
                    0d:f7:7d:5f:b9:42:c1:3d:c1:52:17:88:e3:54:65:
                    1c:d2:e8:0a:9d:90:c2:e6:e3:34:62:36:85:8d:76:
                    3f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:00:BE:A6:FD:CA:60:3E:1D:FC:27:1E:9F:32:B5:26:4D:89:58:CA
            X509v3 Authority Key Identifier:
                keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/2wC-pv3KYD4d_CcenzK1Jk2JWMo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:22:60:4b:24:14:5d:18:4a:05:fd:a9:4d:a6:f5:12:2d:a3:
         1a:43:2d:1f:f3:ce:07:30:15:44:75:62:3e:e4:df:8c:1b:96:
         0f:ec:82:ae:65:b0:fc:0f:8d:fc:22:b9:10:e6:29:44:c4:c1:
         47:8e:43:c8:0a:32:fa:df:a4:14:e8:95:ca:1f:b8:0e:ad:d6:
         1f:b7:3e:6c:5a:08:31:bf:8e:06:fd:a5:35:1a:6f:71:04:00:
         94:09:9d:4f:a8:87:83:c7:a9:fe:da:fc:7b:62:6f:38:44:0e:
         6c:d1:c1:a9:61:69:b3:19:06:f3:6f:a7:ed:d2:48:93:dc:48:
         30:1e:9d:20:45:f6:4b:b2:8d:60:80:af:83:65:a1:8b:76:6e:
         f3:a7:8c:e5:76:a3:b1:b6:03:84:93:b3:de:d7:f5:01:76:27:
         35:57:b8:2a:af:8e:fa:06:4b:a2:72:35:38:ac:03:a4:55:48:
         95:68:4c:f6:79:18:03:56:27:66:7e:f7:01:d8:f6:d3:40:2c:
         e2:e5:9e:10:59:dc:1e:70:c6:61:67:65:d7:97:c8:20:cd:91:
         47:ac:6f:fe:1c:b0:94:cc:0c:d3:1f:17:68:b1:e7:26:5b:1c:
         ef:53:a3:df:1a:a6:17:5f:fb:a8:05:7d:38:a6:b2:9f:a2:3f:
         9e:38:67:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:04 2024 by rpki-client on console-ams.rpki-client.org