Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/NG6l_sJQYL83oN9M_OPDczddDR0.roa
File:                     NG6l_sJQYL83oN9M_OPDczddDR0.roa (raw, json)
Hash identifier:          Z6FwtscuYjZYV8dGYpY0a/Haj6FGwBF+u8WOuNVB10A=
Subject key identifier:   34:6E:A5:FE:C2:50:60:BF:37:A0:DF:4C:FC:E3:C3:73:37:5D:0D:1D
Certificate issuer:       /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial:       018BAA166B071F38A30DC2C14C3B52AAB4BB
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/NG6l_sJQYL83oN9M_OPDczddDR0.roa
Signing time:             Tue 07 Nov 2023 14:01:17 +0000
ROA not before:           Tue 07 Nov 2023 14:01:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199242
IP address blocks:        185.234.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 08 Nov 2023 09:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:aa:16:6b:07:1f:38:a3:0d:c2:c1:4c:3b:52:aa:b4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
        Validity
            Not Before: Nov  7 14:01:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=346ea5fec25060bf37a0df4cfce3c373375d0d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:ea:ac:dc:21:45:27:3e:c6:41:70:bb:35:
                    41:a1:91:ed:3f:9d:56:b1:b2:f4:73:50:aa:c3:da:
                    db:92:34:78:be:59:37:5e:a8:92:50:59:d7:73:9c:
                    a1:d8:f1:4b:76:0f:4f:92:12:b9:77:21:10:6c:ca:
                    3e:aa:a0:11:39:0f:3a:f4:33:13:57:35:82:86:af:
                    c3:b0:48:d8:ba:10:e0:ca:3e:a3:57:32:79:6e:1e:
                    e9:24:de:98:67:f4:3a:f0:99:36:19:dd:dd:ea:64:
                    38:27:23:6c:7e:bf:62:1e:6e:70:3c:48:58:c9:00:
                    3d:57:b9:e7:81:e0:7f:df:81:0a:73:e6:b6:2d:fc:
                    67:d4:54:6e:a1:ab:da:57:5a:b9:8d:58:3f:ab:cd:
                    07:0a:bc:d1:cd:42:bd:73:e0:3e:f4:14:39:e6:f2:
                    53:a4:5e:54:dc:e9:bb:a7:1b:fb:2b:0e:77:ab:e5:
                    2a:3c:86:7c:03:69:78:96:23:d1:49:a3:87:f4:a8:
                    fb:7e:c6:11:90:7e:d4:db:65:92:cd:96:3a:f2:cb:
                    1e:ea:e4:30:be:a9:ba:ba:1a:af:f4:e4:de:2a:75:
                    aa:ee:23:cf:c0:53:c6:cd:ea:f2:44:52:03:5c:79:
                    0c:a7:86:79:de:22:fe:36:60:9b:12:39:39:d9:4f:
                    05:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6E:A5:FE:C2:50:60:BF:37:A0:DF:4C:FC:E3:C3:73:37:5D:0D:1D
            X509v3 Authority Key Identifier:
                keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/NG6l_sJQYL83oN9M_OPDczddDR0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:9f:f2:ed:ad:81:86:74:30:e3:81:e8:39:3a:f7:ef:08:1d:
         5f:c9:f1:e2:e8:92:85:a0:8d:13:71:66:cb:54:8d:0a:2c:eb:
         27:56:34:58:34:f4:c8:ef:07:35:47:87:2f:12:7b:f5:9e:f8:
         d3:d8:e5:2d:b9:f0:69:88:c2:22:3f:24:7b:77:c3:b0:0d:df:
         f4:50:63:de:b6:b5:23:17:72:14:f6:aa:bd:92:9c:29:b5:88:
         b5:30:33:f1:d8:2c:22:c2:47:1f:4f:ca:ee:05:f8:95:05:ef:
         e4:4f:4c:38:c2:b6:da:f1:1b:4e:78:af:29:86:19:68:ad:ca:
         f0:da:6a:83:e5:0a:b7:b8:96:19:21:ff:a7:c6:6e:c0:6d:f7:
         37:4b:68:d7:fc:72:65:fb:3a:2f:9e:bb:65:da:19:77:bc:6e:
         39:0b:e5:14:f7:ba:b9:75:29:7c:e6:39:3d:89:c8:b5:4d:46:
         81:4c:48:0f:3a:7e:d2:3a:a2:65:21:d0:76:37:15:4c:52:06:
         71:5e:cd:9f:97:c6:1d:d3:8b:0f:f3:66:82:d8:cf:0c:7d:ca:
         2d:84:86:ff:d6:46:b9:85:0b:6a:e1:83:14:8c:32:5f:fb:16:
         01:75:74:da:bf:12:0b:56:4a:50:a1:9b:a8:22:56:52:38:ee:
         c4:6b:5f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:49 2024 by rpki-client on console-fra.rpki-client.org