Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/Vk-zNZ_X3ooDu68TCGxv7MN2FMA.roa
File:                     Vk-zNZ_X3ooDu68TCGxv7MN2FMA.roa (raw, json)
Hash identifier:          S479Epd4/sqMNjPD1p8LLUhWNdzIn22d2Rd5Z62Ixxo=
Subject key identifier:   56:4F:B3:35:9F:D7:DE:8A:03:BB:AF:13:08:6C:6F:EC:C3:76:14:C0
Certificate issuer:       /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial:       01856F66CBE135BB99F3376B325F2D3F7578
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/Vk-zNZ_X3ooDu68TCGxv7MN2FMA.roa
Signing time:             Sun 01 Jan 2023 22:14:45 +0000
ROA not before:           Sun 01 Jan 2023 22:14:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58119
IP address blocks:        185.220.144.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:66:cb:e1:35:bb:99:f3:37:6b:32:5f:2d:3f:75:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
        Validity
            Not Before: Jan  1 22:14:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=564fb3359fd7de8a03bbaf13086c6fecc37614c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cb:fb:53:30:cc:e5:0c:11:b1:e9:6b:06:03:
                    af:21:59:07:7e:4a:66:d6:7a:cf:0d:f5:67:3f:e7:
                    3d:44:80:b6:01:fe:19:70:0c:2d:69:92:a8:d8:b3:
                    6b:0d:37:8b:7c:86:0c:de:64:9c:76:09:d9:03:d3:
                    78:3f:f4:08:b6:80:f8:33:1e:59:30:ad:62:3f:30:
                    7b:32:c0:d6:e2:ca:7c:0c:ff:46:3e:d5:dd:14:21:
                    31:b2:f2:58:21:e9:10:a6:38:87:90:96:4b:08:49:
                    92:cd:99:c1:ba:0d:64:b0:fc:4b:88:2d:f5:b1:ef:
                    1f:7a:b5:ee:28:18:94:c4:7f:fd:77:b2:96:30:25:
                    4d:2c:b9:f3:cb:db:c1:59:3f:e2:cf:64:d3:d1:20:
                    6b:a1:ed:55:3f:0b:74:cc:ac:a5:33:2b:cb:1d:e7:
                    bf:18:7e:e1:04:56:dd:a4:e9:78:2e:bd:98:19:aa:
                    7c:29:39:1b:c2:b5:d6:f6:49:80:ff:e0:b3:c3:0e:
                    52:95:02:f9:2a:a9:8b:96:75:c0:b4:68:31:c1:61:
                    49:f5:68:3f:53:0d:61:8a:a2:40:12:ca:40:23:0a:
                    38:45:60:9a:23:0e:44:76:71:9e:8f:13:5c:e7:6b:
                    6b:58:ed:58:eb:67:e0:76:e7:fa:1c:09:e2:69:e9:
                    b4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4F:B3:35:9F:D7:DE:8A:03:BB:AF:13:08:6C:6F:EC:C3:76:14:C0
            X509v3 Authority Key Identifier:
                keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/Vk-zNZ_X3ooDu68TCGxv7MN2FMA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.220.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:a7:d6:34:77:bf:7b:1d:83:90:17:83:41:05:c1:fd:9f:d5:
         3f:d1:3b:dc:89:42:85:f1:64:1d:2d:e2:52:33:33:3d:40:63:
         39:35:fb:f0:f1:41:41:bc:18:29:74:ab:e3:a3:57:40:3e:6b:
         78:b4:69:6b:55:16:58:2b:0b:21:a3:d6:12:42:72:fa:4e:c8:
         30:79:aa:31:74:d5:38:e5:40:32:ce:85:a9:c8:47:9a:9a:44:
         ac:ff:82:87:98:77:34:5f:b9:b3:e4:eb:9a:2b:b3:ad:74:64:
         d1:cd:2e:f6:b9:7c:53:99:1c:30:52:cb:a2:03:2c:d9:3e:90:
         0b:b2:7d:f5:02:dd:6c:f7:6f:6d:da:bd:d6:65:fe:db:fc:50:
         f6:89:6a:d8:bb:41:65:1a:a7:50:f3:1f:51:84:a0:ae:c8:a6:
         2e:b4:f2:54:42:9a:9e:68:26:ba:51:99:a4:b0:fa:6d:99:b2:
         67:72:c3:1b:5d:54:16:ba:40:3a:7d:23:50:80:38:89:15:69:
         6b:b5:a2:a0:a2:1c:ba:b5:63:8f:3f:f7:e7:f6:e9:18:dc:6b:
         8c:26:db:f4:f9:46:60:b4:55:61:2d:f0:c8:26:96:7b:20:66:
         00:b4:1c:61:14:fd:68:ab:61:8c:3f:82:fc:40:88:9a:84:cc:
         f4:6a:18:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:58 2024 by rpki-client on console-ams.rpki-client.org