Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/_GvZXOYIJwV9qynoTuiaev6avDA.roa
File:                     _GvZXOYIJwV9qynoTuiaev6avDA.roa (raw, json)
Hash identifier:          Or2puYHyjDl7xkAU5ZSY7XZ581PG15rnxSBthHqUq2I=
Subject key identifier:   FC:6B:D9:5C:E6:08:27:05:7D:AB:29:E8:4E:E8:9A:7A:FE:9A:BC:30
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       01856B4A234FDCC6A851942C3609FE3CE459
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/_GvZXOYIJwV9qynoTuiaev6avDA.roa
Signing time:             Sun 01 Jan 2023 03:04:58 +0000
ROA not before:           Sun 01 Jan 2023 03:04:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24774
IP address blocks:        37.230.161.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:4a:23:4f:dc:c6:a8:51:94:2c:36:09:fe:3c:e4:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Jan  1 03:04:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fc6bd95ce60827057dab29e84ee89a7afe9abc30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:6e:e0:6f:2b:61:9e:a3:4b:bb:6c:6f:c1:
                    e4:18:b0:1a:34:87:a9:af:09:59:da:14:87:46:65:
                    64:a3:98:13:79:9a:d3:60:4f:42:8a:d1:9c:5e:28:
                    92:ef:2a:a4:61:ac:06:81:f7:26:a9:ec:1c:fd:4c:
                    66:1f:e7:27:06:40:33:6f:f9:68:28:b7:5d:88:f7:
                    09:4a:8e:c7:68:f5:ca:91:67:e6:6e:bb:dd:bb:4c:
                    d8:cb:27:99:bc:41:bb:f9:43:ad:be:59:55:a2:6c:
                    1f:72:b2:c0:3a:24:c6:54:3e:f7:fb:e0:e4:15:7d:
                    95:81:be:b6:10:3b:27:e9:b8:8a:f7:ce:cc:d6:d4:
                    73:82:0c:96:45:b5:54:e5:37:6b:49:da:d6:ff:6c:
                    e4:c8:66:f9:1b:95:cd:44:3f:81:91:45:35:08:6e:
                    74:aa:cf:53:87:9b:c2:fa:4c:a4:e9:27:77:79:f4:
                    df:da:8c:bd:c7:f3:6e:64:06:11:68:f3:73:7b:0b:
                    75:15:2d:b8:f4:77:61:3c:93:77:c0:73:9a:ef:5b:
                    3e:51:27:c7:1f:ea:63:8e:b8:d4:64:c1:5f:0c:7d:
                    1b:99:0c:ce:74:5e:ae:c7:38:3c:b3:dd:3d:5a:71:
                    d9:b5:30:80:07:fd:13:13:f3:12:44:77:29:6f:7b:
                    11:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6B:D9:5C:E6:08:27:05:7D:AB:29:E8:4E:E8:9A:7A:FE:9A:BC:30
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/_GvZXOYIJwV9qynoTuiaev6avDA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:a5:8c:32:17:3e:bf:3d:4c:17:ab:73:5a:f8:52:8c:73:ea:
         d8:ee:f4:32:f9:0c:0a:e7:4c:44:63:b0:85:5b:2f:1d:c4:cf:
         d3:2e:e5:f1:dd:27:5a:ad:5e:a6:65:c0:7b:e0:61:ab:41:7c:
         d1:d1:bd:b8:29:62:71:ec:ac:1b:40:d0:b3:4d:f2:5f:0a:4c:
         73:cf:25:64:0c:18:56:f5:ff:1f:60:25:83:f9:cc:dc:4b:af:
         32:ac:de:ec:80:48:1d:72:e8:c7:62:8e:67:dc:68:98:fc:c7:
         3b:b6:d5:42:e3:3b:dc:1f:8f:e4:5d:44:9d:22:f2:49:b3:3f:
         b5:c5:f1:cf:02:88:33:3c:92:10:0d:bd:e1:f9:d7:a7:0c:4e:
         ef:9b:c6:44:6d:93:92:8d:2b:68:5a:c7:af:7c:01:a9:62:9f:
         77:24:11:cf:1a:6c:9d:7e:5e:f7:a2:68:cf:b8:8e:4a:02:6e:
         e0:65:63:d7:88:54:0a:c4:0f:6a:90:06:a0:2d:91:a4:b2:bc:
         6e:3f:de:34:14:9d:39:0e:63:e2:a7:93:94:2b:5a:aa:b9:23:
         ec:d0:df:75:a0:dc:e0:65:e7:51:8e:bc:6f:93:e8:00:55:b8:
         c2:ae:49:8b:67:ee:b2:59:e3:6e:14:0a:4d:8e:79:0e:af:02:
         63:23:6e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org