Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/zcn7E_w-sMvL9VvI3ENvPquL6E0.roa
File:                     zcn7E_w-sMvL9VvI3ENvPquL6E0.roa (raw, json)
Hash identifier:          PpfL37xsGb2MJsVoUAaeY3HlAso3iMXoVWxG0HQNABo=
Subject key identifier:   CD:C9:FB:13:FC:3E:B0:CB:CB:F5:5B:C8:DC:43:6F:3E:AB:8B:E8:4D
Certificate issuer:       /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial:       0189F9EC6D61BC5E0162E8337E77FB805CC5
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/zcn7E_w-sMvL9VvI3ENvPquL6E0.roa
Signing time:             Tue 15 Aug 2023 15:59:28 +0000
ROA not before:           Tue 15 Aug 2023 15:59:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.155.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 13 Sep 2023 10:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:f9:ec:6d:61:bc:5e:01:62:e8:33:7e:77:fb:80:5c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
        Validity
            Not Before: Aug 15 15:59:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cdc9fb13fc3eb0cbcbf55bc8dc436f3eab8be84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d2:a7:8e:a8:b6:6e:40:36:cf:83:dd:15:0d:
                    21:fa:cc:0c:21:ee:2d:3b:00:03:97:f1:b1:27:31:
                    65:82:73:b9:04:d5:c1:95:20:25:01:50:df:36:23:
                    27:74:71:a4:2b:c5:83:d2:f5:40:60:b3:31:90:04:
                    d2:40:96:3f:92:46:e2:59:bf:4d:48:09:0c:b1:ef:
                    46:29:d6:97:86:4e:21:f5:e3:46:b2:d6:a0:35:5c:
                    1c:d2:01:95:d9:b5:99:d9:6c:41:83:ba:9d:b7:c8:
                    49:10:b0:76:83:81:2b:9b:0c:10:09:f4:d0:4a:0f:
                    2e:36:8c:a9:4d:87:e4:91:2c:90:42:fe:5e:60:60:
                    f8:1b:95:38:72:48:31:5f:b3:7d:d7:b9:cf:fd:f0:
                    d3:fb:bc:f1:22:b3:64:92:eb:32:7b:9d:3e:72:09:
                    8b:ed:28:8e:dd:8c:e7:6b:20:c9:2a:76:58:5a:8c:
                    7e:7d:65:4a:a5:a4:ee:cc:9d:fd:f1:9d:7b:37:9b:
                    69:f1:d7:d3:aa:fb:0b:37:25:78:e1:d5:4a:a0:53:
                    fc:91:ee:bd:cf:2f:61:08:33:81:b7:c3:0b:c9:2b:
                    0c:18:e0:9f:95:72:ee:96:d8:1c:7a:9a:3d:2e:db:
                    9f:d6:46:de:7c:ec:c7:db:6a:44:24:dc:54:a9:b1:
                    48:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C9:FB:13:FC:3E:B0:CB:CB:F5:5B:C8:DC:43:6F:3E:AB:8B:E8:4D
            X509v3 Authority Key Identifier:
                keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/zcn7E_w-sMvL9VvI3ENvPquL6E0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:69:9b:94:a5:49:66:dc:3f:9d:0d:3c:5f:70:35:8c:5f:b2:
         a4:0e:98:8d:15:a8:75:bc:c8:6a:45:dd:8a:08:b3:c3:5c:78:
         eb:3c:2e:66:a9:ea:0b:ab:f0:6d:99:cb:34:29:b6:5c:92:9c:
         b1:80:51:19:7d:a5:5c:02:3d:05:2c:1e:59:e5:fa:53:3d:90:
         39:16:7e:28:4c:5c:18:e0:ef:9c:a2:6f:f2:0f:e9:93:82:ed:
         aa:1e:7c:19:c1:51:13:25:f3:37:03:6a:e6:a6:2e:b7:77:14:
         61:fe:9a:02:9e:ef:3a:58:b4:da:0d:97:ef:00:b4:6c:58:de:
         ff:fd:7e:5f:c5:13:46:4c:6c:55:04:53:cc:79:fe:35:bc:d2:
         4d:81:34:3f:96:61:32:6a:65:2f:85:21:81:48:a2:f0:5b:5a:
         8b:ad:63:98:bd:5f:8a:80:65:ca:88:d9:e1:99:59:0a:ee:34:
         5f:ee:e5:81:b9:8b:86:bb:81:19:4f:e2:7b:c3:74:57:52:8f:
         d2:b4:f7:54:26:73:8c:90:ce:ac:d1:79:6b:b9:e0:c3:37:1e:
         87:e5:c9:38:ef:68:91:ed:e2:fe:62:a2:fb:99:64:64:9d:c5:
         9a:9d:16:ab:a6:3a:ca:60:15:8b:57:b8:e4:61:11:23:0c:27:
         d4:59:d6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:17 2024 by rpki-client on console-fra.rpki-client.org