Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Y6bjI46xD_gQFFO4gCzezTMfOq0.roa
File:                     Y6bjI46xD_gQFFO4gCzezTMfOq0.roa (raw, json)
Hash identifier:          hkVEAl1WopQL8QdGxYZFeHfRQR8jOIEnjNinNbAB7tc=
Subject key identifier:   63:A6:E3:23:8E:B1:0F:F8:10:14:53:B8:80:2C:DE:CD:33:1F:3A:AD
Certificate issuer:       /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial:       018A65979752DC250CEFA261DB54E295A5F0
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Y6bjI46xD_gQFFO4gCzezTMfOq0.roa
Signing time:             Tue 05 Sep 2023 13:45:48 +0000
ROA not before:           Tue 05 Sep 2023 13:45:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44477
IP address blocks:        85.142.243.0/24 maxlen: 24
                          85.142.192.0/20 maxlen: 24
                          85.143.48.0/20 maxlen: 24
                          85.142.216.0/21 maxlen: 24
                          85.142.224.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Tue 12 Sep 2023 15:15:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:65:97:97:52:dc:25:0c:ef:a2:61:db:54:e2:95:a5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
        Validity
            Not Before: Sep  5 13:45:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=63a6e3238eb10ff8101453b8802cdecd331f3aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6e:54:af:de:ba:57:68:d9:aa:c7:8d:33:88:
                    84:93:fe:dd:13:fc:53:f6:08:a7:59:db:a1:a3:1d:
                    ff:6b:06:a2:ac:49:e4:eb:c5:4f:07:a2:62:fe:77:
                    09:91:b0:d6:d7:98:d5:99:0b:73:1f:e6:b1:e1:6d:
                    da:9b:d5:85:dd:9d:07:82:6c:a8:9f:ce:3b:51:f6:
                    e2:c3:35:7a:c9:ca:ed:af:da:87:ca:86:b3:dc:66:
                    4a:1d:19:39:72:08:0c:e2:72:6a:33:f4:c7:0c:81:
                    66:0f:07:da:c3:87:ed:31:51:27:92:f3:30:26:3c:
                    77:39:a4:2e:5c:f8:45:e5:4d:df:67:8c:8f:29:13:
                    f0:07:5c:ce:12:84:a8:93:4f:e3:d2:9a:9c:72:bd:
                    2d:69:d6:98:a1:a6:a6:ed:0c:90:23:d6:3e:77:65:
                    a1:2e:f9:08:5d:38:b9:e8:aa:b7:3b:33:6e:71:93:
                    e7:23:40:dc:ce:21:10:e9:9c:33:66:7f:d4:7d:4d:
                    df:ee:ff:de:28:6b:8e:4d:e6:5f:5e:1c:ff:4f:fb:
                    c6:4f:a0:31:4b:80:f2:82:03:b6:da:fc:c0:74:08:
                    4b:f8:7a:f7:3b:fc:af:0a:c7:a5:89:08:7d:e9:7f:
                    35:90:f9:df:fa:9b:4c:db:f7:de:54:16:9f:eb:07:
                    5c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A6:E3:23:8E:B1:0F:F8:10:14:53:B8:80:2C:DE:CD:33:1F:3A:AD
            X509v3 Authority Key Identifier:
                keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Y6bjI46xD_gQFFO4gCzezTMfOq0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.142.192.0/20
                  85.142.216.0-85.142.239.255
                  85.142.243.0/24
                  85.143.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:92:f6:91:1e:6f:98:02:f6:9c:9a:7e:7c:b7:ee:59:ed:58:
         09:9c:2e:35:97:75:d5:c9:5e:ef:cb:9a:74:03:0d:e8:8d:ed:
         95:d6:db:2c:35:5e:2f:36:77:99:e2:e6:6f:ce:b1:d6:d4:b8:
         fa:99:a6:66:b0:c6:35:4f:b2:5b:42:38:f0:4d:11:af:b6:d3:
         98:dc:71:34:86:c5:c6:44:c2:ae:0c:13:6f:cf:fc:17:4a:d3:
         77:47:5f:6a:00:ea:b8:47:a8:25:5f:9e:d9:df:49:9a:e1:95:
         70:98:3c:8c:f2:79:d1:b7:6d:97:35:8a:2d:a3:75:2c:a3:26:
         63:fe:11:50:42:91:5e:8c:94:7d:20:97:94:cb:81:a4:4d:2a:
         ff:c0:85:dc:fe:18:13:c5:31:e8:59:ad:3f:13:f1:44:44:a9:
         8f:e6:fe:a8:b2:ce:dc:5d:4b:24:37:fe:3d:fc:04:38:87:6b:
         cf:d1:4f:a7:87:66:da:92:d3:24:8f:d7:0d:30:0f:bc:bb:5b:
         48:31:de:4c:2e:de:90:62:72:a9:af:12:6a:a8:5b:14:28:b9:
         78:b0:9f:72:54:4f:16:f2:03:05:9d:e2:69:5c:17:d0:50:fd:
         8c:62:ed:0c:b0:c7:67:1f:f0:cd:51:73:f4:e6:58:aa:19:2a:
         1d:b2:a0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org