Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/8yIYBoW_8FaQv1_So8h-X0EADYM.roa
File:                     8yIYBoW_8FaQv1_So8h-X0EADYM.roa (raw, json)
Hash identifier:          +ml54R8Xo0sUoQq586NaymNSu6Mw3IUx+Tdl3Tm2wgk=
Subject key identifier:   F3:22:18:06:85:BF:F0:56:90:BF:5F:D2:A3:C8:7E:5F:41:00:0D:83
Certificate issuer:       /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial:       018C2F36FB76B14C98F6253E60DB0FEC7DA7
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/8yIYBoW_8FaQv1_So8h-X0EADYM.roa
Signing time:             Sun 03 Dec 2023 10:26:21 +0000
ROA not before:           Sun 03 Dec 2023 10:26:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203847
IP address blocks:        185.206.52.0/23 maxlen: 23
                          185.122.44.0/22 maxlen: 22
                          2a01:57e0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Sun 03 Dec 2023 17:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:2f:36:fb:76:b1:4c:98:f6:25:3e:60:db:0f:ec:7d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
        Validity
            Not Before: Dec  3 10:26:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f322180685bff05690bf5fd2a3c87e5f41000d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:16:3e:01:a0:e2:4a:4a:96:5c:90:6a:5f:4a:
                    77:bf:bb:d1:47:29:32:ad:df:d6:c1:88:ed:97:a9:
                    8d:40:32:5f:fd:61:c8:ad:72:80:3e:cc:2e:01:59:
                    8d:59:8e:c4:7f:72:49:b3:ad:86:e5:ff:92:dd:bc:
                    67:f6:f5:db:de:f0:c1:ea:75:ec:c1:d1:c7:6f:86:
                    bb:4f:91:a3:7a:32:5f:0d:c6:f7:0e:e9:8e:62:c7:
                    c9:b6:6a:5e:5f:81:7d:c4:ea:2a:73:eb:9e:a9:5a:
                    5b:1f:38:30:67:89:bc:18:02:2a:e6:6f:78:32:17:
                    7c:eb:b7:1a:a3:20:ee:5e:a5:49:4f:54:b7:b1:ee:
                    84:0a:d4:fb:63:5d:9d:d8:e9:bc:28:61:88:8e:fb:
                    fd:71:1e:60:e5:46:f9:49:3d:74:4b:20:11:de:a5:
                    91:60:b0:51:cd:d9:9b:53:b4:1a:78:f5:6c:8b:eb:
                    92:41:04:03:5a:17:68:36:12:72:d2:29:93:35:5b:
                    00:d3:6f:33:36:4b:eb:0b:1e:d2:ee:b3:73:d2:76:
                    95:f3:cc:94:b6:74:aa:4d:a6:0d:9b:a2:85:3b:e9:
                    48:64:9d:26:c0:66:c5:19:9e:bb:0d:7b:96:b3:d2:
                    f2:12:a9:5b:f1:59:11:c3:84:94:71:7e:92:06:56:
                    ac:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:22:18:06:85:BF:F0:56:90:BF:5F:D2:A3:C8:7E:5F:41:00:0D:83
            X509v3 Authority Key Identifier:
                keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/8yIYBoW_8FaQv1_So8h-X0EADYM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.122.44.0/22
                  185.206.52.0/23
                IPv6:
                  2a01:57e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:93:59:8b:2e:b8:84:56:3d:ce:30:45:a8:08:86:26:ae:48:
         86:0b:82:ca:ed:b5:33:09:3c:e6:11:81:9f:59:09:63:2d:a1:
         3d:cc:9c:57:ab:38:7a:42:f0:46:22:f4:24:62:c4:fb:2f:e9:
         46:f9:44:f1:85:e2:ff:f0:34:84:0e:bd:a1:76:a5:c6:10:51:
         d0:ce:28:03:50:02:7e:78:e0:22:c0:db:d5:5e:a1:89:5a:7f:
         3e:27:04:ef:81:5f:3e:43:ca:07:fd:d2:80:0e:02:e5:4d:79:
         7a:3c:6e:ba:f2:db:67:d6:6f:39:db:dd:92:96:b1:d6:37:fc:
         3e:b7:05:9a:06:30:65:26:6b:0b:29:c1:b0:04:9b:71:55:a9:
         b6:ec:c0:f4:9f:19:99:ab:0d:fd:4b:49:e7:87:ee:2c:cb:8f:
         5e:f6:1e:39:75:1e:fc:7f:b9:fe:3a:ed:30:c4:0f:fd:5e:79:
         b8:07:9b:dd:be:03:93:2d:54:2e:8b:47:4d:2d:17:34:30:99:
         1e:1a:d7:f4:a7:ba:96:3b:df:05:50:cb:da:23:e3:0b:30:e7:
         a6:ef:68:68:8c:79:a8:5a:f9:11:51:93:64:95:ff:bc:de:00:
         4d:b5:de:6b:53:ac:ae:c0:f2:30:a8:ce:54:8c:ee:d0:e8:7f:
         52:2b:7e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:12 2024 by rpki-client on console-fra.rpki-client.org