Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/JvCEXNjQKav05Gkl9didjqrUk60.roa
File:                     JvCEXNjQKav05Gkl9didjqrUk60.roa (raw, json)
Hash identifier:          lHIWqHvB5AQADIcVkCHWmsnI7VMplvGBNs1zBxc27/s=
Subject key identifier:   26:F0:84:5C:D8:D0:29:AB:F4:E4:69:25:F5:D8:9D:8E:AA:D4:93:AD
Certificate issuer:       /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial:       01856D0AA64D8F0013C9C2015E677312FD85
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/JvCEXNjQKav05Gkl9didjqrUk60.roa
Signing time:             Sun 01 Jan 2023 11:14:52 +0000
ROA not before:           Sun 01 Jan 2023 11:14:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205782
IP address blocks:        194.27.222.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:0a:a6:4d:8f:00:13:c9:c2:01:5e:67:73:12:fd:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
        Validity
            Not Before: Jan  1 11:14:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26f0845cd8d029abf4e46925f5d89d8eaad493ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:00:be:69:88:47:ef:e4:f3:26:29:ce:ab:5a:
                    89:2c:ff:a0:44:2a:69:47:6f:84:73:14:7d:5d:fb:
                    d2:49:34:5b:fc:14:f1:a3:fd:2f:14:0a:76:b5:56:
                    6b:dc:27:fb:ee:11:f8:f0:04:36:0b:ac:13:91:89:
                    6b:3d:da:b3:cd:0f:d7:68:71:fa:d1:81:67:a9:73:
                    c1:1e:e0:ef:ca:34:52:65:03:b7:e3:4f:00:a6:68:
                    55:39:c3:f5:b4:2c:45:64:19:18:9b:52:45:ee:47:
                    37:83:06:02:d2:31:55:ca:63:8b:51:d0:3f:03:0b:
                    f4:72:11:11:8d:55:3e:23:36:3f:05:48:0b:d6:48:
                    68:24:5d:0e:6f:cd:ed:63:01:13:6f:25:97:fe:32:
                    a1:d5:52:71:6d:91:78:9d:d9:5a:06:84:40:3f:16:
                    58:8b:f0:19:3f:f6:f5:17:75:65:3d:5e:0c:20:fe:
                    5f:11:65:91:d6:54:40:8b:8b:8e:85:a7:e3:f6:29:
                    d2:fd:b3:f0:84:d2:de:eb:72:22:66:af:99:0f:f7:
                    b0:c5:d6:9c:cc:40:08:a9:f7:e7:32:94:d7:fd:d7:
                    ac:96:0e:7a:61:71:5f:4f:15:c7:fd:d4:f8:32:81:
                    a6:40:d5:55:82:b3:0b:fd:bc:b4:33:7a:71:da:1b:
                    db:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F0:84:5C:D8:D0:29:AB:F4:E4:69:25:F5:D8:9D:8E:AA:D4:93:AD
            X509v3 Authority Key Identifier:
                keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/JvCEXNjQKav05Gkl9didjqrUk60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.27.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:ad:9a:7f:7b:28:1f:d2:ae:9e:4a:9d:50:b6:d6:c8:39:0a:
         45:69:30:19:e8:61:9a:90:e7:5e:16:d8:f7:d3:1c:d8:34:d5:
         d5:7f:f3:a6:5b:1a:85:84:dd:b3:5f:66:b0:0f:67:26:98:65:
         d8:af:77:c0:83:1c:ca:af:df:9e:66:14:fc:13:b3:85:f6:30:
         6d:07:84:5a:f1:c5:56:c6:86:2b:4b:3c:ae:aa:3b:eb:ee:a4:
         5c:8c:98:19:d3:10:6e:72:19:6c:a2:ea:59:55:79:63:c1:df:
         af:b3:16:58:c4:aa:8f:6d:78:36:54:69:b7:66:e6:f3:36:a2:
         9f:99:d7:36:c7:6e:4c:28:9f:71:ba:9b:bf:8b:6f:92:44:4e:
         45:9a:59:86:89:11:22:fd:92:39:dc:eb:7d:70:91:41:39:26:
         24:b9:6b:27:83:13:15:f7:e9:85:31:57:f0:8c:ee:78:6a:73:
         bd:eb:48:04:e2:8a:a6:07:fe:03:4c:76:5c:06:de:eb:32:de:
         7e:7e:81:57:c2:18:30:49:6f:5b:7e:ad:9c:92:69:3c:a6:dc:
         58:63:fa:e8:aa:65:a8:73:1a:8e:45:73:2e:90:4b:6a:e0:67:
         4e:19:58:c1:cc:17:48:08:90:f9:39:1a:9e:69:3b:f3:b9:13:
         8a:88:99:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:39 2024 by rpki-client on console-fra.rpki-client.org