Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/vS-RkIbKKLBr27MGFssvqJAZ8hA.roa
File:                     vS-RkIbKKLBr27MGFssvqJAZ8hA.roa (raw, json)
Hash identifier:          /Q5Mf/560YIf4Qd4kuQTMmnFeb1EcUh0eDkxyHiQyIQ=
Subject key identifier:   BD:2F:91:90:86:CA:28:B0:6B:DB:B3:06:16:CB:2F:A8:90:19:F2:10
Certificate issuer:       /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial:       0189B60C2C16A8F401E2CDC6667132B53FE4
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/vS-RkIbKKLBr27MGFssvqJAZ8hA.roa
Signing time:             Wed 02 Aug 2023 11:39:58 +0000
ROA not before:           Wed 02 Aug 2023 11:39:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     262287
IP address blocks:        185.192.124.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:b6:0c:2c:16:a8:f4:01:e2:cd:c6:66:71:32:b5:3f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
        Validity
            Not Before: Aug  2 11:39:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bd2f919086ca28b06bdbb30616cb2fa89019f210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9c:6d:89:25:01:47:1e:e7:e7:b7:62:f2:52:
                    a1:07:73:f4:60:35:e7:6e:70:a2:d3:57:f9:c5:7f:
                    00:23:1e:23:b9:c4:1e:43:1a:e3:d1:a1:c8:20:be:
                    79:eb:81:33:9e:d9:64:3d:bc:9b:cd:34:c1:a0:e0:
                    5a:c1:8f:68:f5:76:ad:a0:86:4e:8c:a7:86:fc:5d:
                    d0:57:7c:34:77:93:b4:bd:48:aa:0a:fb:17:cc:13:
                    22:24:fd:61:61:c7:d3:17:21:7a:46:88:ac:03:d7:
                    47:e5:64:2e:53:ae:c0:6e:2d:a7:aa:b0:9c:7b:de:
                    ae:de:75:0d:ef:9b:aa:ff:7c:36:e1:3f:f3:4c:3b:
                    a4:05:09:3a:7c:90:16:3a:92:6e:7c:d8:52:0e:5c:
                    ff:80:0e:f6:68:09:5a:32:9b:32:23:75:3e:98:14:
                    0d:47:10:6e:b8:f6:f8:9d:47:7f:21:39:60:a8:05:
                    3f:2b:2a:21:e3:87:c3:cf:b3:c4:c8:04:4b:95:5c:
                    ed:b6:d7:11:c7:b1:e0:a0:dc:5e:ba:fc:bc:08:2e:
                    67:a9:44:73:50:78:0c:77:aa:f0:4e:f5:93:6c:ae:
                    ca:d1:67:0c:64:9f:79:c8:da:cf:02:8e:7b:b2:bd:
                    37:82:fb:5e:84:ce:69:85:65:79:69:f3:1b:ea:71:
                    b8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2F:91:90:86:CA:28:B0:6B:DB:B3:06:16:CB:2F:A8:90:19:F2:10
            X509v3 Authority Key Identifier:
                keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/vS-RkIbKKLBr27MGFssvqJAZ8hA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.192.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:d4:8a:f5:88:40:b2:38:d3:d4:72:a0:d1:35:cb:d3:fd:1c:
         01:f0:77:52:c3:7a:22:3b:6e:d6:a9:a9:74:06:30:d5:fe:f1:
         ca:7a:4b:41:a8:bc:48:83:b2:75:86:ae:79:b5:7a:72:15:8b:
         74:ea:cd:47:21:bc:e5:d2:58:6e:83:9e:8a:41:da:1a:10:cd:
         c7:4d:56:68:92:5f:46:1a:e9:d8:63:c5:59:e7:96:c8:05:63:
         76:ac:a9:08:74:1c:a6:3f:5b:c0:ec:6e:e3:0e:1c:29:4c:cd:
         2b:4a:40:4d:cb:cf:f6:33:b5:f3:37:8a:05:eb:4c:05:a0:ed:
         0f:e6:8c:88:a1:ba:d3:b7:1c:7a:84:a2:2d:14:77:2e:e2:02:
         60:ba:fa:db:bb:16:09:6d:86:d1:3d:db:f2:b4:ef:fe:f0:e6:
         62:f1:56:07:0a:1f:56:cb:9d:4d:a3:55:d7:82:6c:8b:31:51:
         d8:ac:89:2e:c5:1e:4d:92:fc:42:64:a1:ae:de:1b:a7:2c:d8:
         23:4c:85:07:68:5a:1c:cb:ec:0f:82:38:b6:02:e9:eb:45:28:
         cb:fa:ae:f3:18:a7:c4:1b:63:66:59:89:86:4f:52:3e:d4:bd:
         ac:f9:5e:b1:ee:9a:39:c4:94:78:8e:bb:a1:72:69:60:61:4b:
         d7:08:da:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:37 2024 by rpki-client on console-ams.rpki-client.org