Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/XQntpnK4N8VxJw0eRXuGjEvzbcU.roa
File:                     XQntpnK4N8VxJw0eRXuGjEvzbcU.roa (raw, json)
Hash identifier:          d3FgjuEoTfVkNtXx9hzOqTQ0Xoofp31Q9abK2pXgn5A=
Subject key identifier:   5D:09:ED:A6:72:B8:37:C5:71:27:0D:1E:45:7B:86:8C:4B:F3:6D:C5
Certificate issuer:       /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial:       0189D705582F8D44FB72F6C1BC6BA7A0D890
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/XQntpnK4N8VxJw0eRXuGjEvzbcU.roa
Signing time:             Tue 08 Aug 2023 21:19:58 +0000
ROA not before:           Tue 08 Aug 2023 21:19:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        85.153.56.0/24 maxlen: 24
                          85.153.75.0/24 maxlen: 24
                          85.153.74.0/24 maxlen: 24
                          85.153.104.0/22 maxlen: 22
                          85.153.7.0/24 maxlen: 24
                          85.153.6.0/24 maxlen: 24
                          85.153.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 Nov 2023 05:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d7:05:58:2f:8d:44:fb:72:f6:c1:bc:6b:a7:a0:d8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
        Validity
            Not Before: Aug  8 21:19:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5d09eda672b837c571270d1e457b868c4bf36dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:e7:d1:fe:02:cb:d7:cc:19:d0:02:a7:cb:3e:
                    96:b5:77:93:3f:3b:c1:5d:2f:7e:71:1a:dd:88:57:
                    60:3d:09:b7:19:c0:ee:b7:93:90:8c:20:28:98:2e:
                    8c:0b:1e:b0:f6:74:e0:b6:46:f6:23:c3:79:1a:f1:
                    e4:0e:e7:fd:e1:42:dd:ac:39:4f:c6:2b:ec:cd:02:
                    f8:58:db:4c:04:d0:09:36:5e:6e:3d:ce:1a:4e:66:
                    a8:0a:83:f8:18:17:18:45:16:e4:67:e6:02:f1:70:
                    fd:2b:1c:5c:1a:bf:68:37:67:6a:b1:c3:22:76:33:
                    a8:78:64:c2:af:05:10:d5:c4:88:22:9c:42:d4:86:
                    47:64:00:2c:b0:f2:77:2d:21:72:0e:64:5d:52:16:
                    85:1b:d3:56:15:b7:33:db:dd:31:62:13:b3:c6:17:
                    94:2b:14:54:17:94:95:b1:80:aa:b0:5d:56:55:20:
                    4c:31:a4:92:41:97:26:c7:e3:db:3b:5e:2c:ad:7a:
                    11:ae:4e:a1:5a:44:b6:77:a0:fb:f5:79:93:22:6c:
                    70:df:a4:af:3a:5e:1e:b6:12:22:f9:95:2a:d7:36:
                    54:d5:c9:91:55:96:33:71:05:26:16:bb:dc:80:87:
                    32:1c:e4:8f:ec:29:65:34:e5:f5:d1:fa:6b:39:79:
                    25:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:09:ED:A6:72:B8:37:C5:71:27:0D:1E:45:7B:86:8C:4B:F3:6D:C5
            X509v3 Authority Key Identifier:
                keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/XQntpnK4N8VxJw0eRXuGjEvzbcU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.153.6.0-85.153.8.255
                  85.153.56.0/24
                  85.153.74.0/23
                  85.153.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:0f:33:ab:e4:38:a0:4b:e6:e4:44:f2:6c:5e:cb:0f:0f:d7:
         ba:9f:ec:ec:75:a2:5f:c1:49:3d:59:58:c2:63:cc:32:c0:77:
         ed:de:22:ed:ce:aa:70:1c:32:e0:70:81:2d:7b:97:90:54:8e:
         19:f4:93:1a:e2:37:eb:73:d7:96:e3:7b:c6:07:67:76:65:d5:
         2a:a5:9e:f4:3a:96:36:03:76:29:89:5d:29:d0:99:e3:aa:70:
         77:97:75:41:b3:8e:97:15:89:5a:01:89:30:c2:4c:de:79:7c:
         fb:3d:95:a7:b9:c6:24:a4:6f:17:ef:33:a9:7e:c8:08:08:15:
         37:91:9d:fd:1b:dc:ea:65:f7:00:de:91:04:27:01:f1:66:c6:
         8b:16:26:b5:2a:c0:6d:f2:bc:2c:6a:f7:d2:d5:65:c1:4c:af:
         e7:b8:4e:5f:4c:42:a4:29:ec:3a:d7:f4:c4:43:f4:07:81:ed:
         da:57:8e:81:12:d5:48:a6:f9:bc:56:29:37:77:91:b5:73:e9:
         8e:cd:51:35:e9:f8:9a:51:14:cc:2e:19:03:a3:46:a2:35:cd:
         ab:fb:91:43:fb:ac:ff:98:f7:7b:19:97:b1:b4:7a:fa:f0:35:
         b0:e8:5d:7e:70:8f:a6:02:93:b3:ac:d5:4a:45:e1:d7:12:34:
         a1:a0:a1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-fra.rpki-client.org