Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/TdPVF16_nWxoQJkvu_BNVyY9jGU.roa
File:                     TdPVF16_nWxoQJkvu_BNVyY9jGU.roa (raw, json)
Hash identifier:          qtH04oWfsFhpIA6wvoKtIL1MEIhA+xe639+E5wJrUz0=
Subject key identifier:   4D:D3:D5:17:5E:BF:9D:6C:68:40:99:2F:BB:F0:4D:57:26:3D:8C:65
Certificate issuer:       /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial:       018570307ABF0E31B4CB6EE2C3F604EA453F
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/TdPVF16_nWxoQJkvu_BNVyY9jGU.roa
Signing time:             Mon 02 Jan 2023 01:55:03 +0000
ROA not before:           Mon 02 Jan 2023 01:55:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62197
IP address blocks:        185.15.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:30:7a:bf:0e:31:b4:cb:6e:e2:c3:f6:04:ea:45:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
        Validity
            Not Before: Jan  2 01:55:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4dd3d5175ebf9d6c6840992fbbf04d57263d8c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:07:b8:4f:2c:6a:d2:b2:dd:9a:1f:3b:c4:38:
                    6e:d6:68:46:0f:ac:49:d1:16:9f:87:7b:f7:5e:b3:
                    51:5e:b7:92:0d:1a:4a:c4:cb:43:01:4c:62:91:d4:
                    d2:05:05:cb:58:8c:82:e2:3f:40:67:91:24:e7:0a:
                    35:e4:70:62:80:fd:16:e8:d6:79:e3:ce:4d:6a:07:
                    55:94:2a:f7:94:a3:6c:4e:96:ca:d7:a5:db:4a:fe:
                    c6:e4:65:a4:b6:ce:b3:7c:e5:5e:e6:1c:b9:34:16:
                    2a:f4:a5:29:0f:46:4f:78:12:cd:61:ee:57:b5:43:
                    29:57:7d:48:ab:d7:57:84:d6:e0:a9:fd:b7:f9:56:
                    e8:1d:88:26:37:e2:ea:b6:a7:a6:4d:c5:09:64:6e:
                    3f:fc:4a:2b:e8:92:12:3b:1a:e5:cc:dc:68:4a:dc:
                    74:2f:75:f7:69:69:82:15:13:c1:e3:12:53:1f:6e:
                    c5:f8:2c:9b:cd:77:0d:52:85:25:2b:25:e9:f6:9b:
                    6a:b4:cf:37:09:59:9e:39:5d:c5:0d:14:b9:a2:9e:
                    b4:a2:c4:8c:f9:43:e5:88:cb:f9:ea:d4:d0:89:f0:
                    27:68:f2:7b:f6:b3:24:44:b9:f1:23:b5:9a:c8:fb:
                    37:1f:94:16:12:c1:fd:7d:99:b2:5a:cf:00:f3:09:
                    5e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D3:D5:17:5E:BF:9D:6C:68:40:99:2F:BB:F0:4D:57:26:3D:8C:65
            X509v3 Authority Key Identifier:
                keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/TdPVF16_nWxoQJkvu_BNVyY9jGU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.15.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:d4:8e:42:c1:56:61:cc:d9:1a:ad:9e:06:67:d3:6c:6e:95:
         78:24:ed:28:07:7c:99:dc:66:f3:a6:ce:c5:32:04:33:0b:73:
         9a:fc:19:2e:45:f7:21:76:56:68:ec:0e:1a:13:dc:34:dd:0f:
         a9:a8:e1:a4:07:e8:75:33:59:68:d6:03:22:05:3f:2e:ce:bf:
         52:62:96:7f:06:ae:4a:fa:16:2e:26:2b:47:dd:2f:1c:bb:d3:
         d0:43:dc:5e:8c:9c:1f:f5:74:1a:5e:75:78:33:57:05:26:ab:
         75:30:44:1a:51:69:99:72:c2:44:a7:84:0d:d4:5a:5c:b1:67:
         cb:f2:46:38:a4:16:34:d6:db:11:38:48:49:2d:b4:cf:ab:bd:
         1c:05:c6:1b:82:ab:29:06:dc:a7:9f:0f:51:ab:88:87:15:3a:
         74:91:97:b9:99:eb:3a:fc:44:d6:7e:04:d3:b4:f3:2e:dc:f0:
         ca:a4:1e:14:17:81:88:64:32:00:19:7f:85:32:c5:90:e8:f1:
         84:2c:0c:75:63:c6:33:0e:df:31:f3:37:2b:92:5b:ae:e2:25:
         1c:c2:5b:48:68:1c:57:3a:4f:d7:89:e3:d3:02:1c:e6:0a:eb:
         ad:f4:02:2a:b8:86:0e:a8:64:5c:4e:58:98:3f:77:0a:0b:5f:
         ff:c9:ca:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:30 2024 by rpki-client on console-fra.rpki-client.org