Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/swSpstiYWysXFP99Day2PSpH-Gk.roa
File:                     swSpstiYWysXFP99Day2PSpH-Gk.roa (raw, json)
Hash identifier:          KlB+32HBl8KzaUNEyFepIzVQy+NxaKn1mIuFmhgoGIY=
Subject key identifier:   B3:04:A9:B2:D8:98:5B:2B:17:14:FF:7D:0D:AC:B6:3D:2A:47:F8:69
Certificate issuer:       /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial:       0187A5127056F5B3416E569AE105CB01FBC5
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/swSpstiYWysXFP99Day2PSpH-Gk.roa
Signing time:             Fri 21 Apr 2023 18:27:41 +0000
ROA not before:           Fri 21 Apr 2023 18:27:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200019
IP address blocks:        185.255.198.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 Nov 2023 05:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:a5:12:70:56:f5:b3:41:6e:56:9a:e1:05:cb:01:fb:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
        Validity
            Not Before: Apr 21 18:27:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b304a9b2d8985b2b1714ff7d0dacb63d2a47f869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3a:8f:65:d8:80:7b:9a:db:8a:f9:b6:b8:6d:
                    08:7a:af:33:75:4d:ac:b2:56:5f:35:d1:e5:07:1b:
                    1b:05:21:05:69:08:13:1a:c1:2b:04:d3:6e:1f:4b:
                    f5:bb:e2:40:11:e2:79:c0:f8:bf:d2:b7:47:53:c9:
                    6e:9f:f6:47:ec:8c:c1:cb:31:e4:29:05:5f:a2:21:
                    05:02:bd:dc:8e:c9:d6:d0:79:90:de:53:c3:81:3d:
                    5a:a5:a0:d7:f7:ff:3e:db:b1:1b:15:b0:58:6b:cf:
                    a4:a5:42:a1:6d:d5:70:00:ee:bc:e9:46:4b:24:00:
                    c6:99:6c:05:85:05:06:a0:fd:3e:b0:8d:df:35:6c:
                    0d:20:cf:31:fe:b0:7c:c6:35:ae:f4:98:1c:1b:5c:
                    34:61:29:0d:95:62:e7:77:97:b1:01:c0:87:3e:2a:
                    88:ce:c4:b8:47:aa:f0:cb:b6:52:53:bb:5d:d3:54:
                    b9:2f:8c:a1:27:81:b1:6c:2a:d6:e9:fd:78:33:93:
                    1a:81:bb:34:0a:95:42:a8:89:7b:ef:09:4f:62:8f:
                    43:66:45:f6:59:20:71:f7:a5:2b:27:cf:8b:3f:1b:
                    02:9d:86:e0:22:20:5a:ff:37:aa:49:ae:dd:21:f5:
                    7b:2e:57:0e:11:32:0e:1d:73:58:37:63:03:db:70:
                    0b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:04:A9:B2:D8:98:5B:2B:17:14:FF:7D:0D:AC:B6:3D:2A:47:F8:69
            X509v3 Authority Key Identifier:
                keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/swSpstiYWysXFP99Day2PSpH-Gk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.255.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:46:1b:45:c9:6b:81:88:7a:9f:76:81:d7:59:fe:ce:c9:be:
         dd:71:c5:f4:eb:ec:a7:89:8c:00:7f:3f:df:ed:d9:e3:d3:44:
         29:80:23:4e:c2:ed:20:fb:69:81:45:0f:75:a7:fe:62:54:92:
         d1:10:ec:bf:d5:cb:d3:1c:d0:38:f5:62:e5:7c:24:ae:92:0f:
         b6:27:3a:92:84:fc:12:0e:bd:c8:4f:ef:9b:fd:2d:90:89:83:
         cb:d5:a5:89:9b:b9:42:cb:a5:ea:26:83:15:f7:a4:10:50:8f:
         f6:8f:cc:17:0b:90:1a:9c:da:eb:6e:6d:60:45:55:4e:a0:a9:
         97:d4:70:d5:14:2f:13:e5:2a:78:c8:6e:f2:23:95:35:14:54:
         5b:16:b4:11:e5:ab:6d:d2:1f:3b:4c:3f:10:9b:91:6f:8b:46:
         dc:50:d7:95:a5:a6:8a:40:d2:38:cd:69:48:f1:cd:d8:29:e1:
         6f:46:c6:6d:0e:ec:29:8a:98:73:36:e8:19:0b:7f:7d:d7:97:
         c5:76:9b:6e:1e:d9:05:e2:1c:b0:52:a3:be:c9:a6:56:d9:5e:
         25:90:62:78:13:1a:20:b9:85:c9:bd:cb:2b:a2:5a:00:dd:2d:
         14:9b:5a:4e:fb:e0:9e:84:da:e0:7f:9e:7b:76:2d:d1:b7:93:
         6c:d1:ff:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:56 2024 by rpki-client on console-fra.rpki-client.org