Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/61RiqCfoQ9PXVLEol_aYB_c9FR8.roa
File:                     61RiqCfoQ9PXVLEol_aYB_c9FR8.roa (raw, json)
Hash identifier:          mj/u43dNWQB1EtEn54SiG9kCXN9zROCd/B/U3HVDyC4=
Subject key identifier:   EB:54:62:A8:27:E8:43:D3:D7:54:B1:28:97:F6:98:07:F7:3D:15:1F
Certificate issuer:       /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial:       018C26AE8844CA5EDBD0A60D37C381FC43FF
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/61RiqCfoQ9PXVLEol_aYB_c9FR8.roa
Signing time:             Fri 01 Dec 2023 18:40:21 +0000
ROA not before:           Fri 01 Dec 2023 18:40:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     150630
IP address blocks:        185.226.206.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 08 Dec 2023 11:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:26:ae:88:44:ca:5e:db:d0:a6:0d:37:c3:81:fc:43:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
        Validity
            Not Before: Dec  1 18:40:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb5462a827e843d3d754b12897f69807f73d151f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ba:53:2f:a3:ea:ee:aa:a6:19:c1:be:ef:51:
                    14:9f:63:03:70:55:c9:02:b2:25:e5:09:b9:08:23:
                    69:b3:5d:17:a3:b7:29:5e:08:72:05:b6:cb:e3:78:
                    dc:d9:f4:44:e5:1f:4a:de:4e:b0:1e:4a:e9:12:76:
                    b3:85:bb:ea:74:5b:df:18:05:6c:00:1f:bd:64:15:
                    db:4a:5b:69:8c:80:64:ff:96:14:4d:cd:01:fb:27:
                    c4:37:c9:be:40:6d:ad:37:40:a6:e9:75:99:c3:2f:
                    b6:b0:ca:61:4c:8e:04:45:db:9f:cc:50:01:e9:82:
                    46:06:0a:8d:94:63:e2:39:9e:92:ce:2c:33:db:74:
                    7f:8b:98:84:bc:c1:4d:e0:14:b3:88:93:68:ba:fb:
                    e9:ad:04:35:ca:b0:4d:12:71:b7:eb:34:76:ff:56:
                    08:e9:14:a0:f2:a3:2a:bc:47:ab:40:c5:46:97:1c:
                    78:ac:20:3c:d4:45:81:b1:a4:74:8f:02:1e:42:b1:
                    26:a9:5b:fb:11:45:c4:0d:d9:0b:17:d6:da:77:fc:
                    fa:65:80:8b:28:8c:29:fe:c0:96:07:6f:53:78:50:
                    2c:7e:eb:ac:32:37:f3:bb:2f:2e:d5:b7:6c:1f:c6:
                    00:c3:e7:69:87:17:d2:23:e9:d3:2f:56:f3:7e:90:
                    7b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:54:62:A8:27:E8:43:D3:D7:54:B1:28:97:F6:98:07:F7:3D:15:1F
            X509v3 Authority Key Identifier:
                keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/61RiqCfoQ9PXVLEol_aYB_c9FR8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:b2:29:7e:67:2e:37:20:e8:dd:af:33:24:b8:13:20:f6:ff:
         a4:88:b3:a7:62:42:8e:41:f6:66:da:4c:ed:32:eb:24:a1:67:
         a6:4f:e6:87:63:0a:26:82:32:3c:72:1f:db:46:6a:d2:25:b9:
         d1:c2:8a:9d:e0:6b:ba:4b:8f:23:17:b4:47:d0:03:16:49:5f:
         d0:37:d5:a7:3d:cc:20:82:3e:72:b5:0c:a6:d6:b0:a0:42:0f:
         0c:1f:7b:4a:2b:34:52:c6:de:a8:de:84:f9:8e:bb:a8:20:30:
         3e:b5:5c:aa:e0:ff:a0:39:d3:ed:bf:69:64:5e:00:f0:c3:b9:
         d9:5f:ad:90:6c:6e:4e:6d:00:f1:70:75:0e:23:b8:9e:17:b8:
         59:fc:6b:38:9a:b5:95:2a:34:d2:d8:e4:5b:a5:e2:0c:97:87:
         33:6a:21:ab:b1:d9:9d:10:a3:00:b7:c7:14:c6:df:b9:ec:0f:
         26:03:b2:38:ed:58:f7:02:05:2a:da:8e:98:3f:d5:40:ee:c5:
         c5:11:65:e3:d1:02:b5:7c:c6:f7:6a:88:8f:98:c9:b2:76:c1:
         c5:d7:af:0c:eb:43:6c:5f:24:1e:73:1d:ad:1f:2f:b9:7a:1f:
         7e:33:16:b1:60:f0:b8:c3:88:0c:13:a7:b8:be:62:d1:76:88:
         a0:7b:ef:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:50 2024 by rpki-client on console-fra.rpki-client.org