Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/9ELx0IIT4D4Th_Fy9Mt5OpavZpM.roa
File:                     9ELx0IIT4D4Th_Fy9Mt5OpavZpM.roa (raw, json)
Hash identifier:          Fb26wvgwKfbYg+7sr75swndAl0IHyx2Y3rrFO65fX38=
Subject key identifier:   F4:42:F1:D0:82:13:E0:3E:13:87:F1:72:F4:CB:79:3A:96:AF:66:93
Certificate issuer:       /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial:       0185DF4E6DE1B3E1302DA07573575CBA7277
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/9ELx0IIT4D4Th_Fy9Mt5OpavZpM.roa
Signing time:             Mon 23 Jan 2023 15:45:37 +0000
ROA not before:           Mon 23 Jan 2023 15:45:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212669
IP address blocks:        185.189.34.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 03 May 2023 14:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:df:4e:6d:e1:b3:e1:30:2d:a0:75:73:57:5c:ba:72:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
        Validity
            Not Before: Jan 23 15:45:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f442f1d08213e03e1387f172f4cb793a96af6693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fc:a6:32:4a:34:e7:e7:bb:81:70:b5:30:ba:
                    d8:f5:a5:8a:99:b8:53:5a:ee:39:21:ec:5d:2c:e8:
                    e0:b3:85:f3:1e:45:15:82:28:dc:ec:a8:e9:82:fa:
                    91:ea:34:07:ef:02:c5:a3:fe:2e:68:f2:6c:e5:b0:
                    27:b4:ce:89:f7:79:bd:13:fe:e0:0f:f4:3e:e6:32:
                    31:df:81:51:e5:cf:b4:57:3a:8d:4e:bf:5d:e0:79:
                    78:2c:d2:61:c8:bf:ff:aa:06:ea:60:a3:76:81:1f:
                    fe:60:b5:a3:71:43:b5:b4:4b:66:24:46:bf:d6:79:
                    1c:e6:4f:b9:a2:f4:75:e9:ef:f6:d1:57:d6:0c:8a:
                    0c:71:d8:42:63:57:6c:da:8a:bb:c0:72:72:1b:e1:
                    70:0a:f7:b4:f9:4a:ab:fc:2b:18:a3:d0:09:ef:74:
                    46:f1:8c:4c:10:e5:ad:59:0d:bb:66:27:2e:d6:8c:
                    14:62:3f:dc:ce:37:6a:06:14:ca:8f:2e:b8:9e:ff:
                    d5:13:33:2e:cf:3e:6c:9a:c7:9f:cb:23:bf:72:73:
                    f5:0e:0e:22:36:33:79:e2:cf:bf:93:33:5c:75:01:
                    54:34:60:86:e0:26:94:43:c2:ed:20:11:65:2d:da:
                    05:69:15:3a:35:c6:0f:96:40:86:4d:2f:3e:2c:93:
                    c4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:42:F1:D0:82:13:E0:3E:13:87:F1:72:F4:CB:79:3A:96:AF:66:93
            X509v3 Authority Key Identifier:
                keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/9ELx0IIT4D4Th_Fy9Mt5OpavZpM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.189.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:47:1b:dd:23:c0:08:94:47:d1:19:6b:91:1d:50:d6:2f:a7:
         c2:55:57:1b:54:0e:51:1f:57:79:37:44:d5:f1:16:b3:2a:c5:
         a4:90:e0:da:dd:65:20:39:7a:e3:f6:ff:13:a7:b8:3b:c4:f1:
         1d:d1:71:ba:ad:9a:27:01:63:9b:17:27:02:5f:19:2a:45:1b:
         61:d2:c2:b6:09:9a:e3:ac:61:5e:a1:36:b0:3b:93:c5:14:2c:
         c0:7a:93:0c:93:2b:bc:ec:4c:56:15:0c:5a:1d:1e:2c:b6:eb:
         e4:83:58:f7:ee:d6:73:af:3d:f7:fe:57:93:b2:5d:e5:50:3b:
         cc:aa:3f:39:a2:90:26:b0:75:00:de:9b:c2:d5:66:98:5b:c5:
         29:0a:73:1a:2e:60:9c:f9:ea:16:42:ca:aa:29:15:07:33:81:
         d2:35:bf:29:b6:5c:4f:c1:d7:f8:d0:9c:5d:9f:a7:b0:b8:e4:
         56:9a:08:50:1f:e6:c0:12:e9:e2:3e:85:41:fd:8b:d2:c6:ca:
         b1:97:b8:7f:2a:c6:b9:a9:f8:43:86:c2:10:81:09:9e:01:5c:
         2f:2e:c6:2f:42:14:47:40:2e:09:80:01:2c:b7:95:ec:e8:12:
         42:65:06:dd:44:a3:2a:09:82:87:8e:66:fe:33:80:c6:c2:ef:
         2d:7c:31:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:20 2024 by rpki-client on console-fra.rpki-client.org