Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/QDDvy5nCrNYh4x2dEMpbFZA76pg.roa
File:                     QDDvy5nCrNYh4x2dEMpbFZA76pg.roa (raw, json)
Hash identifier:          oYL08HTwYFPeBounj1lPwWfKOinVl/pEcBjRzzNukN4=
Subject key identifier:   40:30:EF:CB:99:C2:AC:D6:21:E3:1D:9D:10:CA:5B:15:90:3B:EA:98
Certificate issuer:       /CN=ed800950a31dcdacaac56adb936a42beb845e24b
Certificate serial:       0188589A96E508E6EBCBF040E213F3247170
Authority key identifier: ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/QDDvy5nCrNYh4x2dEMpbFZA76pg.roa
Signing time:             Fri 26 May 2023 15:08:26 +0000
ROA not before:           Fri 26 May 2023 15:08:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60781
IP address blocks:        185.221.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 14:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:58:9a:96:e5:08:e6:eb:cb:f0:40:e2:13:f3:24:71:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed800950a31dcdacaac56adb936a42beb845e24b
        Validity
            Not Before: May 26 15:08:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4030efcb99c2acd621e31d9d10ca5b15903bea98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:90:e9:2f:3d:0b:4e:cd:e8:94:75:5b:d0:
                    64:82:0c:1d:85:80:96:ed:41:5b:ce:ca:64:79:af:
                    7d:09:1b:2e:11:95:05:3c:f2:80:34:e1:26:97:05:
                    3a:85:77:2e:89:d0:ee:29:25:46:62:93:90:5a:72:
                    45:f0:b8:31:4c:95:8d:ab:60:3d:72:4a:4e:2d:b1:
                    7a:34:84:40:66:29:a1:8c:1b:a4:42:4a:a6:2b:23:
                    5c:b9:00:6e:66:48:5a:e1:d9:a7:c7:a5:4c:af:4f:
                    de:4c:c7:88:48:48:ee:5b:86:98:9a:f3:19:76:d1:
                    d0:59:5d:aa:3e:0e:b6:c7:d0:61:27:de:d4:b5:9a:
                    12:5b:2c:1b:ad:e8:63:c4:f8:50:e3:92:db:6f:a3:
                    a4:d7:c5:a2:16:9f:d2:52:69:dc:dc:57:9c:41:09:
                    c0:ec:1b:9d:8e:ee:12:72:17:10:5a:f6:31:2a:1e:
                    3a:15:90:87:ac:5f:79:c7:17:33:ca:92:cf:33:de:
                    6e:bc:ae:99:00:4e:bd:24:6f:ce:cf:56:20:bd:17:
                    9b:a6:38:9b:f8:ce:a3:bf:8f:f3:3c:9d:bd:d6:dd:
                    81:98:ee:ee:73:eb:74:e5:22:0d:59:b3:ca:2a:3b:
                    fe:4f:1d:08:e3:b5:84:7f:ac:65:db:09:15:f4:5a:
                    c3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:30:EF:CB:99:C2:AC:D6:21:E3:1D:9D:10:CA:5B:15:90:3B:EA:98
            X509v3 Authority Key Identifier:
                keyid:ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/QDDvy5nCrNYh4x2dEMpbFZA76pg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.221.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:30:c0:a3:a6:0e:4c:26:86:39:91:20:fe:06:9d:bd:f6:da:
         dd:e3:ab:68:75:fe:c3:22:c0:8f:d3:93:39:e3:96:65:13:85:
         08:c1:06:4a:a8:4b:6b:67:62:67:ba:5f:92:b8:0a:32:f6:88:
         7e:0f:58:0a:b9:78:ca:f9:e5:6d:81:23:8d:5a:fe:42:6a:48:
         9c:02:30:87:7e:29:d8:d6:9e:5b:ab:e1:9e:d0:de:c6:2a:32:
         3b:ca:99:7c:33:95:9d:08:b7:2a:5f:bb:ae:27:bc:fe:34:3f:
         fc:d1:4f:07:b7:31:2e:0f:a5:31:a4:da:29:94:5c:ac:0b:62:
         58:4a:75:00:b0:b9:ea:17:6f:ea:8c:d1:1e:6e:6c:0f:cb:86:
         a9:25:20:5a:31:e1:13:60:a0:4b:b7:36:8a:de:bd:7d:2c:b9:
         a1:82:5f:11:1f:ca:ee:ac:a9:bd:7b:2b:59:6b:93:92:b4:79:
         8c:48:f3:87:4b:53:f6:e3:b5:71:67:ca:99:d9:69:2b:d9:0e:
         ef:60:37:a7:c5:8d:a5:9c:17:78:e5:7b:78:8d:c7:69:2b:a9:
         39:e3:ef:5f:8a:df:e2:74:a2:95:eb:9d:4e:c6:ab:d0:36:eb:
         84:04:7a:52:95:de:1c:d3:2d:54:c1:9c:3a:97:23:ef:9a:f7:
         7f:e3:d3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:07 2024 by rpki-client on console-ams.rpki-client.org