Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/THnk_F3WwwYn7-17VDy4VXXOy-4.roa
File:                     THnk_F3WwwYn7-17VDy4VXXOy-4.roa (raw, json)
Hash identifier:          nTCpTKuoZozhttejAjEgI87WPmnfa/2tmLNRAdZYnAI=
Subject key identifier:   4C:79:E4:FC:5D:D6:C3:06:27:EF:ED:7B:54:3C:B8:55:75:CE:CB:EE
Certificate issuer:       /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial:       01896CBC4B8E2729FC91E7CAD8B17C3FA96B
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/THnk_F3WwwYn7-17VDy4VXXOy-4.roa
Signing time:             Wed 19 Jul 2023 06:00:26 +0000
ROA not before:           Wed 19 Jul 2023 06:00:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     46484
IP address blocks:        185.212.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:6c:bc:4b:8e:27:29:fc:91:e7:ca:d8:b1:7c:3f:a9:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
        Validity
            Not Before: Jul 19 06:00:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4c79e4fc5dd6c30627efed7b543cb85575cecbee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:74:88:0e:60:bb:3b:20:3f:ce:9d:50:aa:5d:
                    25:c1:8f:e0:c8:32:0a:fa:0e:72:a3:1c:24:1b:76:
                    fe:6d:11:4a:24:93:81:e3:e0:44:79:63:3e:ea:b6:
                    f1:d6:bc:f9:20:f0:87:c2:a6:bc:b1:84:e3:50:c2:
                    a3:32:fc:35:a8:55:92:81:15:fc:a4:34:39:c6:59:
                    b5:7a:e3:4a:ff:19:0a:3b:fa:b6:86:64:49:3e:38:
                    c9:fa:d2:bb:e5:73:d6:88:12:89:ac:72:36:5a:7e:
                    9f:c3:3b:01:c0:94:8c:b4:8c:10:cc:54:8d:f4:d2:
                    d8:72:9b:af:be:45:ea:c4:e5:dd:62:2c:5f:4a:0f:
                    c1:51:aa:0f:9d:20:16:c8:8e:a4:70:76:55:7d:6c:
                    e3:d0:cd:4a:49:91:be:4d:06:b7:5f:88:74:cf:d5:
                    0f:d2:1f:d2:b3:60:22:f8:14:10:9b:61:83:4d:a7:
                    d3:05:05:06:e4:61:e0:b6:c9:a7:4f:2c:c5:6f:80:
                    d2:bd:8a:06:8b:2d:3e:80:96:b0:55:f6:5e:66:fa:
                    87:25:2e:d5:96:53:e5:c3:61:12:80:c0:aa:b0:3e:
                    cb:45:2f:fe:19:32:ab:2e:b8:b1:98:de:30:fc:0e:
                    1e:0e:57:e0:e4:19:f9:a2:38:21:98:aa:72:fe:b1:
                    00:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:79:E4:FC:5D:D6:C3:06:27:EF:ED:7B:54:3C:B8:55:75:CE:CB:EE
            X509v3 Authority Key Identifier:
                keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/THnk_F3WwwYn7-17VDy4VXXOy-4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:f7:2b:22:ee:1c:8b:b9:79:65:7a:a7:ac:91:12:cb:35:33:
         3a:92:8d:c2:a9:88:a3:aa:5b:30:ba:94:14:93:cb:f9:cc:41:
         5f:30:2c:e4:c3:d2:24:44:3d:12:43:43:29:6a:17:e3:28:44:
         39:11:95:89:21:45:16:96:df:b2:8f:87:19:e1:66:cd:c8:4a:
         64:7c:44:04:a9:8c:d8:9c:7f:e1:ed:f4:82:06:ab:4f:9f:41:
         ae:6f:17:fa:12:97:15:b8:8f:78:4e:91:29:15:d5:64:9d:b6:
         f8:4f:0a:95:5d:66:8e:c1:4a:79:58:19:b8:72:04:ba:33:eb:
         f7:a0:a5:98:42:34:4c:5f:7c:d1:46:be:d5:7c:19:c6:bd:2d:
         38:16:49:bc:42:cb:08:c5:ce:4a:a2:ad:2d:1e:26:26:69:39:
         68:18:93:07:3f:ff:c0:dd:66:54:d3:39:43:fa:1d:e8:1f:47:
         95:0c:f5:41:27:4b:e6:57:dd:d0:9f:9a:4b:dd:03:88:a9:bb:
         2c:19:c1:65:42:f2:39:3f:ea:d2:36:8b:6b:54:c7:82:bb:ab:
         83:b1:30:35:f6:90:75:29:d6:94:68:9d:57:58:fa:7f:d8:b0:
         9a:80:b0:be:77:cb:94:ce:b3:c0:d8:19:c4:8b:54:56:47:dc:
         6f:81:ec:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:45 2024 by rpki-client on console-fra.rpki-client.org