Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/0HXsgkas5LGCqDZhUUySkwm8lCc.roa
File:                     0HXsgkas5LGCqDZhUUySkwm8lCc.roa (raw, json)
Hash identifier:          mB7HqbCVqhay1Bnhtslgj8SnK44oOjccRDzLMUp0Zkc=
Subject key identifier:   D0:75:EC:82:46:AC:E4:B1:82:A8:36:61:51:4C:92:93:09:BC:94:27
Certificate issuer:       /CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Certificate serial:       0188916C44FB4234C5323DDB1872F1771B8B
Authority key identifier: 8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/0HXsgkas5LGCqDZhUUySkwm8lCc.roa
Signing time:             Tue 06 Jun 2023 15:56:11 +0000
ROA not before:           Tue 06 Jun 2023 15:56:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        185.34.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 06 Jun 2023 16:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:91:6c:44:fb:42:34:c5:32:3d:db:18:72:f1:77:1b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
        Validity
            Not Before: Jun  6 15:56:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d075ec8246ace4b182a83661514c929309bc9427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d5:aa:3a:51:95:35:df:d0:79:9e:5a:c3:72:
                    6d:d9:2f:35:f5:3b:7e:01:34:69:59:1f:5b:ae:4c:
                    42:56:0e:06:19:ca:8c:9e:87:49:b7:d7:97:50:be:
                    81:08:b8:b6:45:10:f6:3c:e2:c2:3d:13:99:cc:fc:
                    3a:e1:3d:8b:97:3f:48:e1:8d:24:bd:f9:2f:68:33:
                    a4:d8:02:96:8f:57:f9:a6:7f:9a:f2:92:78:55:d1:
                    b1:06:e1:1f:15:21:4a:91:5f:61:51:f4:bb:f6:3f:
                    9e:75:ae:a8:23:40:ea:95:eb:bc:bc:a1:63:c5:da:
                    6f:a2:1c:ce:b9:cf:d8:9e:23:e9:7c:29:7d:af:8e:
                    43:b9:c6:de:d6:07:df:e1:f1:c4:16:e9:3d:a0:32:
                    62:30:3b:fa:72:ff:34:11:59:e4:23:64:7e:6c:a8:
                    94:7c:f9:d2:a5:48:31:52:00:4f:6d:71:6e:cb:00:
                    25:ce:f6:65:93:12:b8:fe:40:3f:d2:84:47:46:0d:
                    1f:66:57:ee:31:22:9b:14:9b:a0:22:ba:8d:c6:28:
                    f6:c0:94:86:55:9f:c1:6e:64:83:f4:7e:28:03:63:
                    cb:9a:49:a3:2f:74:6e:82:9a:0e:11:e1:e8:6d:cc:
                    d3:c7:92:2d:5b:42:d0:b6:ff:31:e5:d8:1b:4e:0a:
                    44:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:75:EC:82:46:AC:E4:B1:82:A8:36:61:51:4C:92:93:09:BC:94:27
            X509v3 Authority Key Identifier:
                keyid:8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/0HXsgkas5LGCqDZhUUySkwm8lCc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.34.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:af:62:09:b5:ab:4c:8f:93:ca:76:6a:b9:cd:9a:f9:02:c6:
         63:40:c7:e9:a4:c4:26:cf:80:36:91:e8:1c:28:7d:36:ff:6c:
         81:cd:ef:4c:01:54:36:1c:dd:cd:3d:4f:09:b8:41:45:67:be:
         12:08:7c:2d:25:25:e8:ba:4f:67:48:e5:4a:32:ed:2b:48:11:
         e6:25:36:3e:83:f1:af:ea:81:b2:83:22:3b:43:57:37:0c:e2:
         0a:91:8b:d9:a6:77:6e:b7:6c:49:2d:51:56:5a:fd:11:f7:6a:
         18:69:e9:14:90:3d:14:60:57:ca:21:ef:08:41:a1:8c:17:00:
         0d:5c:26:cd:48:3c:8b:69:c5:2a:97:a4:e1:20:84:c3:27:ae:
         2a:8e:92:5f:1c:3f:8a:52:5d:28:94:c2:ac:58:1f:3e:de:01:
         06:58:ba:9b:a7:21:1a:68:3f:cc:f1:87:0b:36:7e:ff:4d:42:
         f9:d3:26:b8:eb:b7:35:57:87:8c:6e:b3:68:bd:35:1e:57:e7:
         b0:0e:d6:94:4f:7e:99:b5:f5:65:77:84:90:b3:9f:d1:e0:22:
         e2:b0:74:77:ef:dd:81:26:c0:a0:21:de:00:5f:12:d4:19:ac:
         a5:1b:3c:5a:6a:74:99:73:3b:f6:84:d3:cf:b4:94:ea:da:39:
         1d:a1:ac:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:14 2024 by rpki-client on console-ams.rpki-client.org