Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/vRrOACgMHPmFnFbDVnO-znUvIlo.roa
File:                     vRrOACgMHPmFnFbDVnO-znUvIlo.roa (raw, json)
Hash identifier:          C6YvZ41sHu8fBEwljWBfn6yMooEKxNCsN+fPvSTEZHc=
Subject key identifier:   BD:1A:CE:00:28:0C:1C:F9:85:9C:56:C3:56:73:BE:CE:75:2F:22:5A
Certificate issuer:       /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial:       0186E4FB6A3AC97C175683CF8D6E40B8DA68
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/vRrOACgMHPmFnFbDVnO-znUvIlo.roa
Signing time:             Wed 15 Mar 2023 11:15:27 +0000
ROA not before:           Wed 15 Mar 2023 11:15:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     136744
IP address blocks:        185.192.22.0/24 maxlen: 24
                          185.192.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e4:fb:6a:3a:c9:7c:17:56:83:cf:8d:6e:40:b8:da:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
        Validity
            Not Before: Mar 15 11:15:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bd1ace00280c1cf9859c56c35673bece752f225a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b5:73:5b:fb:7d:d7:63:79:bb:e6:e2:85:0c:
                    e7:23:58:9a:34:2f:4e:fd:e7:77:0f:5b:43:15:d5:
                    97:b9:14:6c:27:4d:bb:ea:01:0c:4a:31:5e:a2:43:
                    04:20:de:2f:e3:7c:ab:9b:65:72:5f:3f:96:06:70:
                    03:4d:a9:0c:15:ee:29:6b:27:d9:2c:3a:3e:a9:65:
                    f0:c6:46:0d:08:c8:59:b9:8c:fb:f9:6f:4e:38:30:
                    33:89:a4:0c:ae:3e:cb:13:ac:dc:63:c2:b6:9c:06:
                    6b:52:4d:51:89:03:1a:be:d2:20:ab:af:0e:f3:79:
                    20:35:42:51:e9:f7:68:60:99:7b:8a:4e:2d:f2:3c:
                    e1:94:e7:7d:08:9e:11:2e:dd:38:71:a2:0b:a0:a3:
                    18:37:c5:17:d2:45:bb:35:72:36:e5:c0:b8:1d:80:
                    40:0f:da:8c:79:d5:e6:74:72:a9:98:ab:19:76:51:
                    62:5d:1d:2a:9d:e0:93:7b:58:41:40:a6:6f:67:38:
                    ae:61:0a:8a:a3:20:24:ab:ca:e6:43:71:5a:f8:eb:
                    ec:3e:e3:7c:96:64:72:b8:45:3e:6b:05:3c:ee:bb:
                    51:45:de:0e:33:ea:cf:95:f2:75:af:e5:7b:19:7a:
                    b4:86:26:e5:0d:8d:0f:89:49:a7:9c:7c:4b:4c:77:
                    b2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1A:CE:00:28:0C:1C:F9:85:9C:56:C3:56:73:BE:CE:75:2F:22:5A
            X509v3 Authority Key Identifier:
                keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/vRrOACgMHPmFnFbDVnO-znUvIlo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.192.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:22:5f:08:23:bf:39:1a:a1:0f:b1:eb:4b:46:64:51:1a:6c:
         c7:04:e8:37:0c:cc:87:03:d9:85:f1:7e:a7:90:1b:83:a9:f0:
         9e:58:f0:88:c8:3f:f2:2d:18:45:f6:b0:fe:e0:d0:2f:c4:5a:
         1d:61:e0:d3:2b:28:ae:f3:8c:6b:c8:d7:4d:3a:e0:36:37:51:
         16:12:f1:97:a7:9c:8f:ce:b2:44:0d:ca:69:3d:22:69:c5:a3:
         d6:49:6c:98:91:a9:43:83:87:b5:60:88:1f:60:91:1c:b7:3f:
         84:a1:cb:31:c9:d8:d6:6b:f9:71:00:f6:8a:67:74:34:53:6e:
         a2:bb:33:a7:0b:10:0a:7e:d1:d2:3d:de:e4:e5:8c:06:7e:8a:
         e2:b6:83:e2:92:4a:75:82:e5:30:9b:75:b9:e3:20:40:f8:ec:
         d5:4e:d0:9d:25:8c:3d:a4:fb:05:96:fb:e5:42:fa:85:35:7d:
         53:33:d9:f9:1c:8f:d6:5b:5b:c5:58:f5:13:f3:b7:be:61:49:
         4b:18:2a:11:e1:5d:59:27:08:a6:25:4b:a3:5f:b0:74:8e:53:
         e6:87:8c:73:e5:06:d5:96:1f:97:29:ab:c6:ba:9b:20:a4:0b:
         87:4f:6f:a2:71:d8:da:cd:f0:c5:c3:40:29:df:77:61:08:44:
         9d:23:45:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:11 2024 by rpki-client on console-ams.rpki-client.org