Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/SLhqx67YMyDCns6HGD_Lv0Zs4-Y.roa
File:                     SLhqx67YMyDCns6HGD_Lv0Zs4-Y.roa (raw, json)
Hash identifier:          6ATxQh8XqwPN+ChWKryhV8MzpH/blnbuaoUFesbPd78=
Subject key identifier:   48:B8:6A:C7:AE:D8:33:20:C2:9E:CE:87:18:3F:CB:BF:46:6C:E3:E6
Certificate issuer:       /CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Certificate serial:       01856B6E835034CC444FF7132654E825B2FB
Authority key identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/SLhqx67YMyDCns6HGD_Lv0Zs4-Y.roa
Signing time:             Sun 01 Jan 2023 03:44:42 +0000
ROA not before:           Sun 01 Jan 2023 03:44:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59883
IP address blocks:        185.67.160.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:6e:83:50:34:cc:44:4f:f7:13:26:54:e8:25:b2:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
        Validity
            Not Before: Jan  1 03:44:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=48b86ac7aed83320c29ece87183fcbbf466ce3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:8a:5c:84:e0:db:28:40:43:1e:58:c9:51:
                    3b:a4:a1:18:d6:2d:4c:52:f3:2a:01:24:86:25:b4:
                    4f:35:5e:8c:89:15:fa:c1:12:75:a6:1b:b2:85:1d:
                    d8:83:31:79:62:bb:fc:bc:66:6d:6a:48:0f:4a:8f:
                    d8:dd:7e:bc:a7:45:14:39:7e:0e:10:36:a5:e0:89:
                    05:3c:f6:b4:ad:db:c7:c1:7b:c3:e3:f4:1f:d3:35:
                    7c:10:bb:87:08:e6:7a:f2:3e:b3:4f:62:e5:ea:d9:
                    4e:1b:17:8e:7c:a3:00:d8:a5:e8:a1:db:1c:c6:19:
                    45:3b:7c:2f:16:77:95:7d:20:c5:94:0e:00:25:f4:
                    6e:9f:a5:96:7a:d8:97:c4:d7:f2:91:21:16:1d:73:
                    d0:cb:04:ea:da:49:03:86:b1:ca:36:fe:be:ac:60:
                    2c:5a:9d:a1:21:20:1f:34:af:2e:6b:8a:ce:73:2c:
                    3f:09:3c:ab:f6:e8:a9:e4:30:15:a9:5c:67:84:35:
                    f9:34:19:d8:27:d5:87:27:7b:68:ce:4c:4e:8c:7f:
                    62:a9:2a:5a:c2:87:36:50:41:db:74:55:65:c8:2f:
                    87:cc:ef:12:fa:f3:4e:9b:6b:7c:00:95:eb:68:ff:
                    28:e8:3d:29:60:a5:91:44:53:93:4e:91:0d:50:6a:
                    95:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B8:6A:C7:AE:D8:33:20:C2:9E:CE:87:18:3F:CB:BF:46:6C:E3:E6
            X509v3 Authority Key Identifier:
                keyid:7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/SLhqx67YMyDCns6HGD_Lv0Zs4-Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.67.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:6f:91:e6:27:9c:cb:61:32:15:7f:36:ff:b7:4b:f9:d0:0d:
         c3:76:ca:2b:e1:84:b9:51:d4:8b:9b:42:7a:b5:6e:00:c3:d8:
         0f:44:17:e3:ea:67:99:76:b8:cb:9e:a6:f3:70:12:01:73:e2:
         46:cf:c2:2b:f1:b1:df:a5:d0:da:3e:22:29:7e:ad:9c:5d:10:
         2c:0e:ae:89:b4:8b:0e:b0:27:8b:1a:72:cc:a4:e3:92:61:f5:
         f3:54:33:20:3b:25:2a:fb:d6:d7:3f:fe:c7:5c:74:48:b3:0a:
         10:9d:07:18:57:c0:d1:f8:10:de:69:68:75:d2:86:91:eb:56:
         5b:2f:51:3b:8c:4d:66:60:8c:a8:dd:4f:66:f6:8c:9a:8b:2c:
         f4:42:96:ab:41:d4:12:41:5c:a5:a6:5e:57:2d:e4:58:e2:88:
         1f:80:ad:5c:ed:52:29:df:df:ce:87:77:9f:27:7d:32:40:48:
         76:7e:e3:75:77:51:cb:32:4a:5d:f4:42:75:d8:3b:f9:eb:a6:
         fb:5c:b3:02:cf:fd:31:63:c8:e3:13:78:af:c9:38:74:f5:d4:
         9f:bc:ad:a2:63:89:1c:23:37:95:d5:6a:49:cd:dc:3c:19:25:
         4f:9f:98:62:ef:97:a9:27:6c:a9:a2:7b:c7:ea:6a:fa:df:97:
         f8:82:83:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:13 2024 by rpki-client on console-fra.rpki-client.org