Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/rHWQc0iFLpSkE1WKIujVl3SUHx0.roa
File:                     rHWQc0iFLpSkE1WKIujVl3SUHx0.roa (raw, json)
Hash identifier:          iMl7QM1jzEp+EAXugrjNfqL4Xos098cFatKyDi3X/1E=
Subject key identifier:   AC:75:90:73:48:85:2E:94:A4:13:55:8A:22:E8:D5:97:74:94:1F:1D
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       018B389A944AEF96187F0EE4C41AA73F5EE5
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/rHWQc0iFLpSkE1WKIujVl3SUHx0.roa
Signing time:             Mon 16 Oct 2023 13:08:56 +0000
ROA not before:           Mon 16 Oct 2023 13:08:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51087
IP address blocks:        194.36.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 18 Nov 2023 22:59:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:38:9a:94:4a:ef:96:18:7f:0e:e4:c4:1a:a7:3f:5e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Oct 16 13:08:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ac75907348852e94a413558a22e8d59774941f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:04:23:0a:60:bf:09:1d:8c:e6:f2:5c:b7:f7:
                    88:ad:25:44:83:fc:2e:e5:cc:18:90:b9:a7:0c:08:
                    84:6a:97:e4:b4:77:aa:9e:7d:3d:4b:13:1e:5b:4d:
                    12:c6:10:40:fc:29:59:b0:6e:f9:32:cf:d6:9c:c6:
                    19:34:69:94:97:05:7d:81:a6:31:13:bc:0f:43:e8:
                    3e:76:a2:5e:3c:a6:dd:02:f2:5a:f3:f0:20:c0:4c:
                    64:7a:65:79:ff:7a:8e:c7:a8:03:df:68:20:27:30:
                    b5:ba:a3:41:e1:ba:04:63:64:c9:d3:40:8b:0d:88:
                    5b:fa:36:f2:b0:da:d7:e2:f6:eb:1e:73:9c:af:b1:
                    18:af:25:03:3c:a3:2f:6c:ca:9f:9a:e4:99:30:1c:
                    79:08:5c:be:66:06:51:ef:d2:19:be:c9:c0:df:c7:
                    cc:1c:a1:24:a4:5a:22:4c:14:68:a7:b7:ca:c5:9e:
                    b1:d7:58:13:8a:de:55:b5:bd:c6:94:df:4c:de:f7:
                    6a:c3:b5:06:9d:64:3e:12:05:8b:6e:22:5d:bd:32:
                    f2:99:b3:4e:24:a0:02:65:01:d9:0f:67:0b:05:6b:
                    81:7a:69:1f:5e:78:9e:c5:6c:aa:3f:50:e9:61:65:
                    22:e2:af:d7:a3:01:e0:bf:fa:e2:8d:34:9c:df:01:
                    77:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:75:90:73:48:85:2E:94:A4:13:55:8A:22:E8:D5:97:74:94:1F:1D
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/rHWQc0iFLpSkE1WKIujVl3SUHx0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.36.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:42:09:b2:70:99:6a:a2:1b:0a:b7:cf:16:82:ea:2b:8b:a8:
         12:a3:cc:4c:96:1b:86:29:bf:d9:0f:cf:ff:49:81:4a:dc:c2:
         7e:9c:46:23:b8:2d:8a:88:71:e4:c2:ef:e5:dd:f9:54:10:b3:
         34:12:df:56:47:d6:78:66:32:3a:b2:cc:5e:5b:ef:e2:81:57:
         c0:c8:28:98:e6:0a:c2:32:ae:32:5a:c2:6c:79:7f:21:81:ef:
         51:fd:70:f0:2e:3d:a0:f6:28:c7:ea:bf:fa:91:55:6d:16:b8:
         d0:c5:22:01:89:16:2a:10:b8:a0:14:6f:36:c5:8c:6e:a2:3e:
         d0:48:62:95:10:b1:d6:86:6c:74:0c:93:9a:7e:7d:71:b8:e5:
         5f:07:85:82:4d:ee:18:de:c6:96:9a:96:dd:ca:13:75:1d:33:
         06:c5:19:3a:25:c2:32:93:cb:d1:a7:ab:e1:d3:49:1b:fc:ee:
         33:50:2d:62:2e:47:6f:eb:c1:46:5f:91:83:75:3c:0d:83:50:
         cb:10:ec:08:ee:3b:ba:fe:f2:c2:23:4a:e4:81:50:82:09:df:
         ef:ca:93:2f:33:01:6a:aa:3e:a4:8a:63:91:d9:4f:1d:ae:84:
         59:f3:ac:e1:0a:2e:55:65:ab:49:9b:59:6d:d0:38:ef:84:c5:
         0b:a9:f6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org