Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/1-LVT6373ElZeJ29XWcc4dBqudNg.roa
File:                     1-LVT6373ElZeJ29XWcc4dBqudNg.roa (raw, json)
Hash identifier:          dWqW3hQsV8yGLh+/3P6kSePf5q/iBFo1K7ZPoZ5JTo8=
Subject key identifier:   F8:B5:53:EB:7E:F7:12:56:5E:27:6F:57:59:C7:38:74:1A:AE:74:D8
Certificate issuer:       /CN=88e719f426793b1e9063771460abd311a3dff116
Certificate serial:       01857079A7FE23985A290E6176257CC4B4D6
Authority key identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/1-LVT6373ElZeJ29XWcc4dBqudNg.roa
Signing time:             Mon 02 Jan 2023 03:14:58 +0000
ROA not before:           Mon 02 Jan 2023 03:14:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62528
IP address blocks:        185.134.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:79:a7:fe:23:98:5a:29:0e:61:76:25:7c:c4:b4:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e719f426793b1e9063771460abd311a3dff116
        Validity
            Not Before: Jan  2 03:14:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f8b553eb7ef712565e276f5759c738741aae74d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:18:7a:a6:78:0e:8c:2b:e3:ad:38:60:0e:cb:
                    8f:c8:f1:48:18:78:a6:d9:ac:50:03:6c:7a:6f:3a:
                    ad:a1:24:6e:d2:98:27:7a:36:89:78:2a:f2:f2:eb:
                    f6:3a:bf:16:9b:8b:85:2f:98:11:ab:22:4a:67:67:
                    08:37:30:a6:9f:8b:5e:8b:6b:8d:fc:37:b4:6c:87:
                    d2:27:d5:98:6a:20:d9:68:d1:ab:f1:ac:f2:d8:49:
                    94:c2:2a:51:b2:8a:ba:42:1f:fc:6b:dd:71:81:ac:
                    41:76:a4:8c:81:9f:96:4d:8c:82:05:9c:c4:bd:08:
                    25:46:b4:61:e1:93:db:2e:60:10:1d:37:f6:c6:90:
                    7a:e3:9d:12:38:49:69:e2:77:63:68:6c:34:5a:1d:
                    a3:ca:aa:67:36:b9:f6:d7:ab:25:9c:f4:01:39:8d:
                    8b:ce:c6:30:b2:c5:ce:5f:6f:5a:51:9e:33:14:cf:
                    c3:53:37:5b:2b:02:a7:56:ee:73:47:d4:19:a0:22:
                    86:62:80:e8:9c:cd:2e:6d:eb:75:75:9b:b4:68:e6:
                    64:f1:ee:3d:dd:68:33:08:a9:63:ee:56:a9:77:35:
                    57:27:d5:45:0b:b9:92:38:30:e7:57:84:1a:29:4f:
                    e1:25:6d:72:21:a9:96:75:c7:71:ea:83:26:49:1a:
                    24:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B5:53:EB:7E:F7:12:56:5E:27:6F:57:59:C7:38:74:1A:AE:74:D8
            X509v3 Authority Key Identifier:
                keyid:88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/1-LVT6373ElZeJ29XWcc4dBqudNg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.134.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:07:a7:52:e2:61:09:a2:f2:71:31:b8:63:2e:9a:21:b5:01:
         27:5e:52:eb:c7:d1:6b:f4:cc:b8:60:46:77:78:62:5d:9b:1c:
         05:a1:42:00:fe:20:31:9c:a6:b9:f4:0a:65:0c:63:6f:71:4a:
         b1:80:00:f3:22:0b:b9:28:8e:6e:fd:66:93:52:97:d9:89:d6:
         b0:6a:ba:3b:a4:11:3f:38:3c:e7:85:04:91:82:bc:32:d2:17:
         b6:79:e0:0f:4d:22:d6:c2:4e:ef:08:a1:31:9d:cc:05:0c:32:
         a2:27:80:19:21:d6:e6:51:69:17:88:e7:2a:15:a0:c6:10:94:
         3a:f1:ce:ff:e5:90:91:bf:ca:84:32:57:fe:fa:2e:51:16:0b:
         f1:38:88:5b:cb:00:72:5c:e5:58:31:aa:01:cb:c3:af:f5:ed:
         2b:8a:09:16:0f:75:51:36:68:09:bb:d7:34:3d:42:e3:9e:6c:
         77:d4:cf:02:3f:cc:ad:0a:bb:be:12:48:96:88:14:21:31:b6:
         02:f2:ab:fd:ef:04:45:5f:6c:93:66:ac:45:47:42:28:f7:db:
         cd:71:16:74:57:81:36:99:6a:f2:86:0e:f7:30:68:2d:cc:33:
         9f:f4:b6:40:a2:ae:f8:f6:64:7b:a5:6d:08:45:09:e0:9b:1f:
         75:0f:30:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:11 2024 by rpki-client on console-fra.rpki-client.org