Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/rNZV31pHNPHvqWj7JevozjzrwvY.roa
File:                     rNZV31pHNPHvqWj7JevozjzrwvY.roa (raw, json)
Hash identifier:          ku4lOnsqm8DeOclzeACm0TZF8SZwoRQUXdfiso7r28Y=
Subject key identifier:   AC:D6:55:DF:5A:47:34:F1:EF:A9:68:FB:25:EB:E8:CE:3C:EB:C2:F6
Certificate issuer:       /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Certificate serial:       01856DCB09462717569E5A997277F6669693
Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/rNZV31pHNPHvqWj7JevozjzrwvY.roa
Signing time:             Sun 01 Jan 2023 14:45:00 +0000
ROA not before:           Sun 01 Jan 2023 14:45:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44285
IP address blocks:        185.137.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 01 Feb 2023 10:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:cb:09:46:27:17:56:9e:5a:99:72:77:f6:66:96:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
        Validity
            Not Before: Jan  1 14:45:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=acd655df5a4734f1efa968fb25ebe8ce3cebc2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b3:f6:5b:3e:af:76:94:c0:98:57:f6:ec:22:
                    37:09:3f:41:c7:f4:e6:4b:bb:da:9f:3b:33:81:74:
                    6a:a4:8a:d4:19:eb:57:b7:85:56:9c:f2:9c:a2:17:
                    26:c9:6e:3f:1c:74:25:b9:bb:47:a1:57:c2:10:d9:
                    97:6e:69:3e:2c:83:10:3e:10:7a:be:2a:af:ad:5a:
                    ff:7f:e2:df:bd:6f:74:dc:25:12:76:f7:eb:6b:6c:
                    88:82:76:4a:f4:0a:b2:ad:a7:3a:30:66:5c:98:91:
                    fe:d0:fe:54:f6:d1:2b:5c:53:97:73:25:84:26:6a:
                    44:b5:4e:8d:ca:c4:4c:41:09:2e:f6:7f:28:61:86:
                    ef:32:d8:7e:ef:2e:cb:9f:90:84:04:32:79:83:c0:
                    0e:6f:ac:92:ac:13:c3:92:76:51:83:96:df:fa:f4:
                    81:5e:ce:e8:ae:eb:9d:02:6d:c7:f0:34:1f:98:b4:
                    3f:0a:c6:f0:fe:ee:45:0f:e9:70:d4:b6:a0:da:76:
                    94:aa:cf:5e:1f:4d:c5:dc:bc:58:d7:23:cf:19:9a:
                    6c:e7:3f:b3:03:92:47:c4:f5:03:ef:60:9e:f3:f6:
                    b2:38:e3:26:4a:36:6e:08:38:61:a7:18:a4:65:e2:
                    35:92:97:58:51:62:b7:c5:b7:2d:b3:bc:0f:63:36:
                    e9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D6:55:DF:5A:47:34:F1:EF:A9:68:FB:25:EB:E8:CE:3C:EB:C2:F6
            X509v3 Authority Key Identifier:
                keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/rNZV31pHNPHvqWj7JevozjzrwvY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.137.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:bd:7c:25:86:d1:35:b2:12:40:10:35:8c:b2:64:d8:e1:e3:
         56:da:d5:00:fd:d7:0a:b1:d1:f7:8b:cc:6e:44:e0:e7:eb:df:
         d9:c8:d6:41:2b:b9:70:85:76:4e:10:63:41:34:5b:74:21:e8:
         65:44:86:e8:99:72:60:cc:66:a3:04:26:9a:75:3a:ca:52:c0:
         3e:f0:03:a9:5e:42:ac:16:8c:aa:cb:e9:df:a0:b3:13:75:c2:
         2d:22:fc:f9:f9:a2:36:6d:3f:53:6a:f9:38:3f:dc:05:01:16:
         91:05:5c:8e:3a:ed:9e:85:c6:22:64:e0:48:bd:5a:9a:a3:8f:
         e2:5f:ad:7b:48:f6:3f:8c:60:84:4a:70:9a:33:49:3b:6d:a3:
         bc:82:fe:9d:82:1e:e9:84:8a:2c:fd:f0:89:57:b2:ad:fd:7b:
         ca:7a:0f:3e:49:bd:cf:d7:e8:23:82:a4:5f:ee:a1:f0:08:66:
         c2:28:6b:a9:41:a2:b1:6e:e9:bf:a1:99:e3:68:4c:c6:65:30:
         4a:a7:a7:4e:20:f9:70:b8:c2:df:e1:b1:5e:9e:35:ba:36:3e:
         a3:b0:ba:75:12:90:bf:80:1f:47:b0:b5:c0:74:ef:6c:c7:04:
         b2:da:aa:aa:ba:e9:1d:84:91:f5:92:91:b2:10:30:32:13:7e:
         90:47:46:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:37 2024 by rpki-client on console-ams.rpki-client.org