Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/MVAtMOy36MbLnKNxXjbux1so4tI.roa
File:                     MVAtMOy36MbLnKNxXjbux1so4tI.roa (raw, json)
Hash identifier:          IHMitvPOb3GzfIx3bUnBHtlIA9xCFnfY/mo5NPimssU=
Subject key identifier:   31:50:2D:30:EC:B7:E8:C6:CB:9C:A3:71:5E:36:EE:C7:5B:28:E2:D2
Certificate issuer:       /CN=e618eff923e35bf83792353c4633ca2300f75b6c
Certificate serial:       018F958E0856B034907C640BC653964ADAD1
Authority key identifier: E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/MVAtMOy36MbLnKNxXjbux1so4tI.roa
Signing time:             Mon 20 May 2024 10:31:04 +0000
ROA not before:           Mon 20 May 2024 10:31:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        185.218.142.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 22 May 2024 08:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:95:8e:08:56:b0:34:90:7c:64:0b:c6:53:96:4a:da:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e618eff923e35bf83792353c4633ca2300f75b6c
        Validity
            Not Before: May 20 10:31:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=31502d30ecb7e8c6cb9ca3715e36eec75b28e2d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1d:ff:3a:04:91:14:20:4d:d4:32:2f:7c:10:
                    d0:87:97:a3:42:cc:aa:15:35:a8:ad:ac:ef:65:41:
                    4e:dc:37:f3:90:fc:08:6d:a2:93:ff:45:30:91:9d:
                    f5:10:36:26:28:30:9b:55:52:fe:25:a1:4c:a6:fd:
                    17:1a:a8:f2:f7:4a:55:19:cc:21:62:30:08:0b:af:
                    9b:7c:d3:1f:00:f5:3a:63:a8:a4:d9:25:71:91:a4:
                    15:14:ed:eb:58:fb:e4:80:3f:c4:2f:5a:30:32:54:
                    de:7a:bf:46:7b:50:28:c3:fd:88:48:ea:cb:21:36:
                    bc:a4:c1:7b:7a:25:e9:0a:91:ba:6a:5f:ed:b9:67:
                    b2:a3:dd:8d:c2:94:ef:ad:86:52:b0:15:c4:8e:72:
                    14:c7:49:bf:42:2a:be:0a:73:7f:0c:43:bc:84:3f:
                    c4:5f:5d:47:b9:33:c1:d1:f4:11:9f:4f:81:8c:f3:
                    c2:90:45:48:a0:ff:c1:22:59:d5:c4:8a:da:28:35:
                    bb:36:7c:f6:9a:8b:3c:71:ca:ef:78:73:24:70:70:
                    8b:33:6b:f7:f0:fb:67:35:0a:e7:98:ca:07:4e:45:
                    59:c3:a7:28:04:93:90:e2:22:7f:3c:05:be:22:74:
                    90:94:77:55:5c:8f:22:53:51:4a:21:ba:58:9e:c5:
                    2f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:50:2D:30:EC:B7:E8:C6:CB:9C:A3:71:5E:36:EE:C7:5B:28:E2:D2
            X509v3 Authority Key Identifier:
                keyid:E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/MVAtMOy36MbLnKNxXjbux1so4tI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:2a:9c:b7:05:e8:ab:90:c0:0f:25:72:09:f5:cf:38:e2:af:
         52:8c:33:00:46:81:98:e6:0c:d6:92:33:30:59:2f:4e:87:7d:
         da:03:2c:1c:33:b6:5a:e5:63:e2:51:bf:3d:02:f8:61:18:52:
         1b:29:7e:df:b8:8b:8a:ab:48:f7:35:7f:91:73:65:6d:01:74:
         5d:5a:4a:00:50:1d:89:d6:f8:2f:3d:e6:0d:5b:65:32:de:fe:
         cd:c9:c1:95:5b:69:af:52:ce:a0:9d:c4:3a:9b:6b:f2:32:37:
         0e:8e:90:59:7f:8e:a2:02:77:cf:81:e5:0d:4a:56:98:0c:cd:
         35:0b:70:88:27:74:81:5c:0c:d0:6d:ad:3e:e2:96:61:5e:d3:
         b7:34:a8:bf:95:ed:09:a7:d0:e3:4e:6d:0c:c8:9a:20:43:d3:
         64:b0:61:82:6c:f3:a7:71:ed:47:62:b6:5e:28:c2:be:0a:7a:
         ed:dc:ed:de:54:e8:ac:41:23:72:78:e4:db:99:46:e4:e9:b0:
         d6:16:54:b3:e5:9e:a4:7b:03:2f:d9:13:9d:fb:78:9b:1e:bc:
         3c:25:63:5c:16:68:c2:63:29:a8:8d:a7:8e:40:df:b2:22:2c:
         a8:d6:f9:c6:93:bf:a8:2a:22:5b:23:cb:55:0c:37:ba:1a:fd:
         98:96:56:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:57 2024 by rpki-client on console-ams.rpki-client.org