Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/m5LD5aEZOd9u_YHp94iA5ImK0RM.roa
File:                     m5LD5aEZOd9u_YHp94iA5ImK0RM.roa (raw, json)
Hash identifier:          OdEz+Oo7cR9tx74ubLddybDa+FvqIyQotq09qh3KVE4=
Subject key identifier:   9B:92:C3:E5:A1:19:39:DF:6E:FD:81:E9:F7:88:80:E4:89:8A:D1:13
Certificate issuer:       /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial:       0190D6578746117679414E9D70C20F6FCB85
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/m5LD5aEZOd9u_YHp94iA5ImK0RM.roa
Signing time:             Sun 21 Jul 2024 17:29:38 +0000
ROA not before:           Sun 21 Jul 2024 17:29:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        185.183.244.0/23 maxlen: 24
                          185.183.246.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 25 Jul 2024 07:58:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:d6:57:87:46:11:76:79:41:4e:9d:70:c2:0f:6f:cb:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
        Validity
            Not Before: Jul 21 17:29:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9b92c3e5a11939df6efd81e9f78880e4898ad113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:54:23:81:4a:65:7a:5d:5d:c1:35:b8:36:
                    94:fc:2f:89:39:b2:4d:07:b6:e5:d3:6b:78:24:b0:
                    d3:36:42:6c:14:e0:37:63:dd:61:a5:f1:a2:8f:8b:
                    f8:ea:16:12:a1:17:7f:5a:e9:cd:c3:1e:52:95:9b:
                    aa:61:41:c2:b8:28:de:bf:b1:65:4c:a2:d1:ca:66:
                    3d:3e:cd:64:c3:3c:91:4a:24:ec:92:be:bb:04:79:
                    46:70:e6:24:84:08:c6:cb:ad:85:e7:fa:9f:50:48:
                    14:cb:45:de:8a:1e:d1:ab:e6:b8:23:36:65:cd:85:
                    4d:4a:b9:4f:e2:77:ed:4b:2c:95:e1:0a:f9:3c:a0:
                    b3:64:bd:15:bc:0a:58:87:92:e8:25:5a:46:cf:e7:
                    73:af:ee:53:bf:3c:86:a2:14:11:b1:55:0b:1b:cb:
                    42:d6:04:87:11:bb:a2:fa:6d:a7:ed:ac:36:3f:f4:
                    89:a6:c3:ff:bc:0e:20:3f:7a:42:d2:a4:dd:2c:c8:
                    0b:7f:01:41:99:87:71:c8:e0:b3:1c:9a:11:0a:32:
                    ea:c2:71:0f:c2:cb:22:40:a1:b2:fb:71:58:5e:51:
                    1e:7f:99:d2:0c:ea:55:f0:db:b7:7f:79:9e:d8:0e:
                    ea:19:c7:45:34:b4:af:ff:fe:b1:c3:3b:97:70:d5:
                    8a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:92:C3:E5:A1:19:39:DF:6E:FD:81:E9:F7:88:80:E4:89:8A:D1:13
            X509v3 Authority Key Identifier:
                keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/m5LD5aEZOd9u_YHp94iA5ImK0RM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:62:25:c3:09:1d:6c:51:85:4f:65:74:e9:35:2f:d9:f0:4a:
         cf:8e:5a:66:75:10:f9:ae:cd:26:f9:ef:b5:d2:ec:0d:23:88:
         1f:b2:7c:8b:85:ac:bd:94:7e:f2:f7:52:b5:3c:1f:d4:61:54:
         0e:9c:fb:6a:e5:7e:01:5c:86:81:c8:7e:36:9c:5f:3f:cb:25:
         88:b1:55:2a:a2:b2:88:d1:a8:e1:38:77:c6:52:02:7b:7e:c9:
         b4:2b:2f:52:95:1b:c9:3b:97:e9:82:34:e4:7b:25:83:8a:ad:
         53:6c:b3:ee:a6:52:5e:ea:4a:22:90:fd:15:37:06:d5:b7:2f:
         40:ad:24:92:71:ae:a0:bc:8c:92:8d:5e:53:4e:24:43:3f:4d:
         fe:e1:d0:be:87:03:ea:9c:df:e9:a6:9f:b1:12:11:79:ad:47:
         96:58:da:63:f0:21:a7:a0:e7:7f:6f:ca:df:e2:e0:5a:3e:b6:
         70:b2:02:eb:a8:4b:1f:26:ed:35:c9:85:fe:da:9b:84:fd:d4:
         03:d0:05:21:08:c7:14:b0:6f:03:23:1e:8e:4e:c3:9f:42:b9:
         c6:8f:67:fd:1a:7a:0e:03:75:23:d2:85:6a:c8:20:86:9f:ff:
         51:36:a5:78:b1:f4:8b:03:ed:1c:f3:17:75:28:05:84:e8:fd:
         d1:36:b3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 09:27:18 2024 by rpki-client on console-ams.rpki-client.org