Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/bt6uA4LUnQB6HvsYrQan791Ks_U.roa
File:                     bt6uA4LUnQB6HvsYrQan791Ks_U.roa (raw, json)
Hash identifier:          B8jpkIY9V3cCggESsPQjOMhGIbw84B9UpZdXoZQ+EUw=
Subject key identifier:   6E:DE:AE:03:82:D4:9D:00:7A:1E:FB:18:AD:06:A7:EF:DD:4A:B3:F5
Certificate issuer:       /CN=e618eff923e35bf83792353c4633ca2300f75b6c
Certificate serial:       0190D4A0136969EEF2FB978BA8290BF49FEB
Authority key identifier: E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/bt6uA4LUnQB6HvsYrQan791Ks_U.roa
Signing time:             Sun 21 Jul 2024 09:29:38 +0000
ROA not before:           Sun 21 Jul 2024 09:29:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        185.218.142.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 22 Jul 2024 08:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:d4:a0:13:69:69:ee:f2:fb:97:8b:a8:29:0b:f4:9f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e618eff923e35bf83792353c4633ca2300f75b6c
        Validity
            Not Before: Jul 21 09:29:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6edeae0382d49d007a1efb18ad06a7efdd4ab3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:62:1e:f4:42:f9:03:05:1f:db:b6:8f:f2:a2:
                    d3:8f:99:eb:7b:79:e7:f8:0c:ed:a4:2a:da:53:7c:
                    9e:13:b6:f6:cd:92:a3:70:5f:a7:8b:08:9e:16:dc:
                    74:e3:79:cd:4c:8d:02:ef:4b:62:82:df:e1:0e:18:
                    89:62:3f:bf:9b:7b:02:bc:8d:a7:f4:ae:18:45:d3:
                    22:73:49:fe:77:ee:29:c2:59:11:e7:30:58:03:3e:
                    07:60:4d:4d:7b:ee:da:8b:25:ea:76:b2:fc:bb:56:
                    2f:96:67:64:b5:4c:b3:2a:b9:17:93:fa:d9:58:0c:
                    4c:bc:15:0a:a4:f1:4a:10:ca:bc:d1:73:f4:87:86:
                    65:15:b6:95:9c:5a:9e:35:33:4c:eb:a4:e0:b9:a8:
                    e1:cb:64:24:e7:ba:8d:8d:02:1a:f8:d3:c5:aa:71:
                    9d:be:95:73:78:4c:41:a2:09:99:e6:1a:bb:f0:b2:
                    22:51:7f:6f:a2:e6:9e:c5:50:9d:be:d8:b5:a3:f1:
                    fd:7c:f0:d6:af:a1:1c:45:f6:92:b5:13:4f:79:75:
                    16:ab:a0:a6:b0:86:f2:b7:91:44:80:75:8f:c2:ff:
                    c0:21:cb:c4:47:cc:c5:d9:bc:f4:62:c6:51:99:8c:
                    a1:1d:fb:e7:02:65:32:47:28:e9:ec:a4:35:71:38:
                    91:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DE:AE:03:82:D4:9D:00:7A:1E:FB:18:AD:06:A7:EF:DD:4A:B3:F5
            X509v3 Authority Key Identifier:
                keyid:E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/bt6uA4LUnQB6HvsYrQan791Ks_U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:27:9d:f2:40:54:47:19:9b:8f:77:fb:21:a1:0b:e3:2d:6b:
         d9:99:2d:fc:d2:3a:3f:af:5a:f0:12:a4:e7:fe:a3:bc:07:42:
         20:7c:9a:07:a8:d6:b0:03:5b:e1:b9:9b:06:a8:c8:61:f2:ca:
         86:ff:fd:21:d1:f8:78:94:6b:db:57:88:d5:c3:30:13:02:b1:
         bf:f0:c5:4f:aa:a8:bb:ed:ba:c8:c1:81:ab:0a:31:4b:74:9e:
         bd:a4:7b:79:09:30:2d:e8:4f:70:88:cc:2e:bf:a1:af:aa:e3:
         6e:ca:1a:79:24:10:ba:d0:0f:dc:b8:7b:35:9b:65:3c:0f:c6:
         74:49:4c:79:95:d0:1b:19:dd:8e:8f:d5:e1:5f:c1:82:e7:28:
         db:58:be:18:90:e1:7a:aa:6a:bc:54:3b:46:17:68:e9:5c:b5:
         62:48:8b:5b:11:1b:02:a3:b0:23:56:d1:9a:ca:6e:7d:c6:88:
         9f:15:82:73:ad:46:8d:2e:18:ac:ce:3b:97:09:84:fa:38:0f:
         47:32:0a:d8:7a:e1:b3:e5:b1:01:7e:d4:0c:3c:4e:3e:a1:52:
         dd:08:15:fa:ca:d4:82:9e:8e:6b:e4:9a:04:52:a2:93:e9:6b:
         0f:8a:6b:73:62:0c:f8:07:4d:c2:59:66:32:c7:a3:1e:1b:16:
         03:f7:b7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 11:14:30 2024 by rpki-client on console-ams.rpki-client.org