Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/UEGU6-8O5I10o9fJ-ydlJdV2_ho.roa
File:                     UEGU6-8O5I10o9fJ-ydlJdV2_ho.roa (raw, json)
Hash identifier:          oC1985Hql6Hnlw9d4BwSTKrkbLxOL/6+qvQNoFaNiqM=
Subject key identifier:   50:41:94:EB:EF:0E:E4:8D:74:A3:D7:C9:FB:27:65:25:D5:76:FE:1A
Certificate issuer:       /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial:       018571BA317A0C920EB09F41007982DD200C
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/UEGU6-8O5I10o9fJ-ydlJdV2_ho.roa
Signing time:             Mon 02 Jan 2023 09:05:05 +0000
ROA not before:           Mon 02 Jan 2023 09:05:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60721
IP address blocks:        185.22.58.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Jun 2023 16:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:ba:31:7a:0c:92:0e:b0:9f:41:00:79:82:dd:20:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
        Validity
            Not Before: Jan  2 09:05:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=504194ebef0ee48d74a3d7c9fb276525d576fe1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9c:4a:71:cd:d2:88:57:9f:c6:80:3e:59:d4:
                    13:a0:9c:4a:a7:a3:75:43:94:9b:80:15:90:55:f7:
                    20:c6:49:b1:f9:69:ac:59:4c:19:2c:06:c1:93:21:
                    e9:0d:51:0b:b6:31:38:fd:14:85:4e:56:7f:15:92:
                    34:5c:1d:60:89:ac:26:5f:7f:fb:ab:05:bc:8d:e4:
                    aa:6f:a5:ff:d5:04:84:5a:36:91:e2:7a:01:cc:42:
                    8c:97:2a:e9:0f:27:09:cf:d0:3f:58:d4:c4:1c:80:
                    c4:1c:fd:27:fa:c2:ba:a4:6b:fd:7c:1f:0f:c2:40:
                    d5:bb:7b:63:39:ba:2e:71:9a:d3:02:d2:f4:cb:b3:
                    6f:bd:42:ab:0d:16:a9:d6:c3:86:54:2f:1e:2c:fc:
                    56:ea:7b:77:04:b0:34:8c:36:5d:87:f8:50:b0:f2:
                    e1:a0:a3:66:48:75:35:64:b1:0d:dd:9f:32:8a:00:
                    1a:7b:9d:7b:63:85:c3:91:dd:14:1c:d5:55:c8:03:
                    df:e7:50:64:8a:4b:9e:27:18:8e:f1:0b:e6:14:f4:
                    aa:07:3a:3e:d4:8c:d5:e6:57:d9:71:03:53:b4:72:
                    f4:13:c9:de:6c:73:a1:2a:d9:41:42:90:aa:b5:44:
                    cc:e5:31:b3:bd:07:28:f3:1d:0a:7b:8d:20:91:8f:
                    1a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:41:94:EB:EF:0E:E4:8D:74:A3:D7:C9:FB:27:65:25:D5:76:FE:1A
            X509v3 Authority Key Identifier:
                keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/UEGU6-8O5I10o9fJ-ydlJdV2_ho.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.22.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:d9:be:37:8d:cc:40:37:fe:5c:a8:01:ab:42:17:3c:77:3a:
         56:36:fc:d4:cd:37:e6:ef:68:68:69:0c:97:7b:a2:00:c8:69:
         3d:ad:20:8a:d2:f1:6f:94:0c:d1:72:9f:0f:e2:23:28:8a:13:
         04:c2:fd:dc:6e:c0:69:24:38:ad:a2:fb:57:f1:e6:61:9e:29:
         dc:6f:9b:d8:e8:35:11:20:6e:ce:cc:f6:68:fc:7e:00:bf:77:
         fe:01:e0:70:09:58:8e:49:6f:7f:7e:b3:5d:2c:61:3e:35:f3:
         ce:ac:96:b4:30:19:22:90:6e:d1:49:ee:f6:ab:21:31:ef:6d:
         ab:80:25:d6:15:95:09:85:ce:ff:9e:73:b2:89:f5:56:86:a8:
         69:52:bb:70:d4:be:16:b7:6b:d6:4f:d5:9e:ca:df:fc:eb:31:
         dc:6b:17:2d:51:56:46:e3:6e:30:5d:45:8c:fa:7a:6e:2d:ae:
         50:5b:1c:e8:22:9a:0f:52:ca:68:55:ec:6b:10:bb:cd:15:7d:
         4e:53:f3:34:80:c1:d2:a0:22:e5:37:a5:97:df:cd:f7:b7:d7:
         b5:12:ab:47:f6:69:c8:53:bc:94:de:c4:b9:6d:57:57:60:f6:
         13:40:b0:2b:b4:cc:d3:71:d7:ea:8b:b8:fa:40:22:08:3a:01:
         2f:a2:36:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:48 2024 by rpki-client on console-ams.rpki-client.org