Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/eN3xhMu_NJmy2IeXjUCI1OUMPBk.roa
File:                     eN3xhMu_NJmy2IeXjUCI1OUMPBk.roa (raw, json)
Hash identifier:          HVx0pO+4Gfkpgn2uObaK90mj5iNmXAIzNKJNeoSw3ts=
Subject key identifier:   78:DD:F1:84:CB:BF:34:99:B2:D8:87:97:8D:40:88:D4:E5:0C:3C:19
Certificate issuer:       /CN=60c44dff71879863ea71442023b7f354dc3dad7c
Certificate serial:       018BFB6D3AD401FE08B401229D76B03906F0
Authority key identifier: 60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/eN3xhMu_NJmy2IeXjUCI1OUMPBk.roa
Signing time:             Thu 23 Nov 2023 09:05:21 +0000
ROA not before:           Thu 23 Nov 2023 09:05:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        185.88.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 23 Nov 2023 09:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:fb:6d:3a:d4:01:fe:08:b4:01:22:9d:76:b0:39:06:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c44dff71879863ea71442023b7f354dc3dad7c
        Validity
            Not Before: Nov 23 09:05:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78ddf184cbbf3499b2d887978d4088d4e50c3c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:24:53:6c:63:3d:9f:68:e9:08:65:df:08:ae:
                    e4:47:cf:ab:d7:ec:4b:1f:1b:e7:38:9e:2f:44:88:
                    8b:fe:f2:4a:c6:5a:df:a0:02:ac:8e:ab:d4:c0:3c:
                    6f:33:17:cf:3e:41:97:fc:6d:c9:4f:5e:32:5d:ed:
                    8c:5e:7f:d7:c5:17:97:48:ca:49:e5:80:b4:e9:81:
                    cd:34:16:41:d0:44:45:81:1f:85:7f:3d:78:45:17:
                    45:74:a8:b8:3a:88:5c:2b:ae:9f:b4:4e:6a:47:59:
                    fa:ae:69:3c:a0:ad:9d:ea:66:81:a6:02:86:5c:a8:
                    72:8c:73:c6:d6:f6:7d:45:12:14:07:6b:e4:23:78:
                    6e:16:97:a6:b6:0c:af:a4:42:ba:6f:31:06:7b:22:
                    d9:5b:5f:9e:41:e6:b4:34:1b:36:72:a6:2d:c9:0b:
                    ee:bf:c5:0f:dd:1d:22:4b:7b:69:ce:2c:e8:e9:9d:
                    24:a0:c8:6a:b6:91:8e:a1:0a:dc:b4:f5:1b:f8:b2:
                    b1:a7:e0:cb:9c:4a:3f:e1:c5:4d:ee:c3:e8:25:d2:
                    a1:4a:f6:14:07:98:eb:a6:5b:cd:5d:71:b7:04:72:
                    48:2d:d8:78:e6:8b:bf:4a:46:05:98:28:9f:7c:3a:
                    80:61:dd:df:74:3c:cd:42:68:d4:d7:46:0c:e1:87:
                    e4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DD:F1:84:CB:BF:34:99:B2:D8:87:97:8D:40:88:D4:E5:0C:3C:19
            X509v3 Authority Key Identifier:
                keyid:60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/eN3xhMu_NJmy2IeXjUCI1OUMPBk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.88.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:db:b6:5e:ad:29:3e:86:e9:90:f5:0c:e3:ee:05:10:d9:f6:
         17:3e:13:76:07:b7:82:db:4e:16:08:3d:db:60:7c:f9:88:4e:
         06:ec:1d:72:1a:dd:13:c4:82:3b:47:50:dc:29:8d:02:47:db:
         45:23:77:ef:78:2b:32:34:c9:a3:ff:8d:d6:dc:6b:c5:73:2c:
         0f:16:62:14:82:cb:f7:f9:09:25:5c:43:bc:04:2a:a2:b0:07:
         07:c2:3a:67:65:51:ce:55:75:36:9b:08:6a:e4:f7:2a:d0:c9:
         a0:1a:68:6d:ef:d1:c6:af:d8:54:75:b2:6f:7d:7f:13:c9:da:
         7c:d9:e3:8b:c6:1b:8d:55:eb:42:7c:99:87:eb:b4:43:79:03:
         5f:34:2f:b1:e8:2b:59:5e:80:49:01:ed:e8:53:32:30:1c:b6:
         7f:5c:60:00:64:b2:fd:f7:6d:94:d0:d1:67:ac:75:0b:e9:ec:
         1b:c0:83:23:3c:e8:07:35:69:88:dc:fc:fe:4a:22:2c:60:15:
         6b:94:7f:69:49:26:a7:aa:80:55:f5:0c:b2:01:96:9e:6f:29:
         3b:7a:b0:5f:ce:12:3b:2f:25:d2:f8:dd:4a:c7:de:f1:cb:46:
         ce:9f:4c:88:57:eb:4a:eb:34:49:10:72:0a:88:e2:ba:e9:8d:
         00:c0:6e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:40 2024 by rpki-client on console-ams.rpki-client.org