Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/lxUuZl7RGNJBeeJbX-Hu-3JuS_o.roa
File:                     lxUuZl7RGNJBeeJbX-Hu-3JuS_o.roa (raw, json)
Hash identifier:          9Zg0TOOjv/nMTU8K3SYEqoBqIhsNEYHRS55a5MUc/QY=
Subject key identifier:   97:15:2E:66:5E:D1:18:D2:41:79:E2:5B:5F:E1:EE:FB:72:6E:4B:FA
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       018B01313525FB3523BB082BD1B3CF6F3ED9
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/lxUuZl7RGNJBeeJbX-Hu-3JuS_o.roa
Signing time:             Thu 05 Oct 2023 18:54:43 +0000
ROA not before:           Thu 05 Oct 2023 18:54:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211975
IP address blocks:        185.177.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:01:31:35:25:fb:35:23:bb:08:2b:d1:b3:cf:6f:3e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Oct  5 18:54:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=97152e665ed118d24179e25b5fe1eefb726e4bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:02:9c:1a:b6:4c:cc:31:8d:d9:1f:7b:df:d4:
                    df:6a:a1:9b:a9:ba:34:37:1a:e6:0f:32:15:7a:1e:
                    3f:76:d8:79:89:8c:6a:7c:81:b7:05:90:34:06:a1:
                    7c:3f:8a:fe:eb:7a:68:39:66:ad:b2:3a:76:de:03:
                    26:51:16:17:c4:29:e9:6f:8f:af:f6:ab:31:51:ab:
                    71:14:e6:95:86:9c:b1:39:33:26:05:75:e3:3f:6c:
                    ab:6a:eb:c6:f7:2b:91:9d:d3:85:08:10:c7:ac:4c:
                    11:37:a6:e3:29:d5:32:d0:14:be:a6:19:de:0e:64:
                    4d:f1:09:29:09:94:9c:86:70:c3:73:7e:a4:ed:d1:
                    6e:f7:ad:af:e3:06:e4:2b:7f:e2:90:55:a2:c6:65:
                    5a:a2:51:9b:53:76:0b:52:e5:5a:bf:0f:c6:c5:a2:
                    b9:63:de:17:d0:6c:ce:e0:9d:4e:7c:5f:34:2f:7f:
                    7c:d3:33:02:19:b8:ff:a8:39:ef:61:d5:77:b8:f2:
                    a6:27:20:d2:9c:c0:1a:fb:6b:6c:6f:da:0e:e2:6a:
                    e9:07:01:c0:41:09:4c:12:d0:2f:29:4c:b3:d8:0d:
                    cd:b6:1b:63:7a:c8:1f:63:61:e1:c2:1a:97:25:e5:
                    d1:49:e9:d5:4a:6f:e6:ab:5a:ec:8a:21:84:44:cf:
                    3b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:15:2E:66:5E:D1:18:D2:41:79:E2:5B:5F:E1:EE:FB:72:6E:4B:FA
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/lxUuZl7RGNJBeeJbX-Hu-3JuS_o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:82:6a:e3:06:f5:c0:31:0c:55:7e:e8:32:1f:4b:a8:be:a2:
         2a:d8:c6:eb:8c:5f:e8:50:24:cd:82:c1:dc:b4:82:ad:df:e9:
         ab:5e:da:93:e2:48:dd:b5:19:f9:d6:e8:c2:1f:f9:c4:22:dd:
         5f:ec:49:36:85:97:a9:e4:e2:07:11:f8:4e:01:c0:9a:ff:1a:
         4d:cc:bd:f1:7c:e6:86:2f:42:f8:bd:6f:ea:14:1d:b7:52:b2:
         9d:41:d9:44:e6:f8:71:04:17:6c:41:3a:f5:09:98:74:71:2b:
         3c:c6:2d:03:5c:96:2d:47:8e:99:b3:92:1a:46:bb:6f:52:6f:
         9c:21:a5:a9:89:41:52:6e:f1:43:9f:2e:d9:c9:e0:13:07:00:
         25:92:91:c9:4c:88:84:8c:e2:c8:02:3f:73:04:74:10:b5:23:
         68:9b:2d:35:a0:70:e5:c9:e3:41:25:a0:60:d8:22:92:71:60:
         00:6a:f4:1a:24:65:a6:20:7d:15:ff:b5:de:88:10:54:df:7e:
         e0:38:8f:96:57:5c:e7:cf:6b:76:f0:45:0b:d0:ef:cf:dd:62:
         6c:0b:3e:05:ca:e9:ba:ac:87:4e:ea:f0:58:ed:07:5d:ed:df:
         e8:ec:4e:4d:13:a0:73:02:2c:8c:65:58:33:4c:5c:95:2f:e4:
         33:85:40:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org