Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/51vroS28hP1-srUYYuRdHrIPRzg.roa
File:                     51vroS28hP1-srUYYuRdHrIPRzg.roa (raw, json)
Hash identifier:          MfbJ5S5e1fjInDuVqAMY/2M+j+tdUlWc8Rnrs0kEvQ0=
Subject key identifier:   E7:5B:EB:A1:2D:BC:84:FD:7E:B2:B5:18:62:E4:5D:1E:B2:0F:47:38
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       018DABD111D965D98249E1AD01B4DF3572C2
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/51vroS28hP1-srUYYuRdHrIPRzg.roa
Signing time:             Thu 15 Feb 2024 08:10:21 +0000
ROA not before:           Thu 15 Feb 2024 08:10:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        185.167.233.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 12 Mar 2024 10:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:ab:d1:11:d9:65:d9:82:49:e1:ad:01:b4:df:35:72:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Feb 15 08:10:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e75beba12dbc84fd7eb2b51862e45d1eb20f4738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:39:42:9b:43:76:b2:2a:c9:b7:c6:54:7d:32:
                    03:d8:a1:5f:9d:d5:d7:96:10:36:39:b7:58:e4:96:
                    0e:bf:2e:97:a1:0e:3c:84:8e:b4:a0:03:ac:b1:93:
                    32:0d:51:04:ae:f4:87:b6:4e:18:1a:3b:9e:03:3c:
                    ee:32:8f:6e:17:ed:2f:cd:ac:6a:fb:26:78:43:a6:
                    f2:fe:dd:b7:6e:cb:6f:25:2d:ec:5b:f4:ca:c4:b6:
                    e7:8e:c7:89:ef:eb:a1:4e:3c:34:30:a0:22:98:cd:
                    01:37:db:93:70:3f:fb:99:c0:12:6d:48:a9:75:54:
                    b1:22:20:a7:c6:dd:3d:71:54:b0:7b:df:7d:99:df:
                    49:02:23:20:2d:e0:72:71:d7:8a:44:0d:27:e4:c4:
                    c7:4f:b7:09:aa:44:1f:08:f7:12:fd:6a:41:a8:9b:
                    80:c2:0d:42:d7:8e:db:a4:78:39:a7:e1:fe:a0:c6:
                    c7:b9:44:be:43:c9:65:34:e5:82:a2:9b:b1:f9:38:
                    da:bb:3e:14:e1:7a:0a:64:70:68:d6:8e:b4:d1:00:
                    98:93:1a:35:ed:5e:a2:8b:ba:23:05:78:5d:68:55:
                    1c:49:6d:22:68:53:54:b3:1d:43:6d:ac:71:25:16:
                    9b:36:ae:4e:21:6c:42:98:d1:15:58:a0:10:d5:9b:
                    6f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5B:EB:A1:2D:BC:84:FD:7E:B2:B5:18:62:E4:5D:1E:B2:0F:47:38
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/51vroS28hP1-srUYYuRdHrIPRzg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:0c:8a:03:19:79:ba:cf:2a:8b:72:28:bd:33:8a:a5:68:2b:
         a2:f5:0d:be:5b:92:96:b6:b3:11:04:af:88:25:9a:d3:bd:a3:
         06:b1:04:15:ef:38:90:9f:b8:e5:f3:a5:cf:16:8a:27:ba:b2:
         3c:ec:6a:5f:ca:11:ef:23:53:12:86:ad:34:5f:34:90:60:c6:
         18:56:74:fd:79:27:43:6f:ad:91:fc:22:75:06:70:3a:a0:5d:
         f6:d0:1d:dc:80:2c:44:3a:a6:89:99:96:67:a6:c7:48:3c:6d:
         75:a7:c3:58:2e:3b:14:46:db:fe:42:19:51:59:e4:11:37:ae:
         d9:ef:51:cb:8c:e3:92:60:7c:cb:33:d9:d8:41:25:22:26:da:
         12:5e:f1:c3:bf:0a:f2:a9:5c:7d:cc:a5:52:19:c0:d1:ec:0a:
         1c:52:18:c0:5f:7b:fc:8f:6a:b3:a6:09:e0:e6:99:f8:cf:de:
         19:2a:15:7d:6e:02:8d:a8:ef:91:e7:7b:68:eb:cc:56:6b:bf:
         40:13:89:e5:b5:91:13:8f:1f:7d:40:3c:ed:08:27:61:57:76:
         7b:e6:88:9d:56:f0:a9:69:da:f3:55:c9:c6:01:93:36:79:a3:
         42:82:39:02:7d:f9:4c:a4:31:3e:c9:e9:0a:67:02:de:ad:ec:
         8d:8e:e3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:39 2024 by rpki-client on console-ams.rpki-client.org