Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/8ybUXwUPv-1jK-macikN-LXAXeE.roa
File:                     8ybUXwUPv-1jK-macikN-LXAXeE.roa (raw, json)
Hash identifier:          +tAMlGEQSg9B0WH3tLUy0s8f4im7xBOqpThSjUXNZ94=
Subject key identifier:   F3:26:D4:5F:05:0F:BF:ED:63:2B:E9:9A:72:29:0D:F8:B5:C0:5D:E1
Certificate issuer:       /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial:       0185735636F8272A3B5DA4C993778D6197B5
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/8ybUXwUPv-1jK-macikN-LXAXeE.roa
Signing time:             Mon 02 Jan 2023 16:35:08 +0000
ROA not before:           Mon 02 Jan 2023 16:35:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     263269
IP address blocks:        185.74.54.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 21 Aug 2023 06:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:56:36:f8:27:2a:3b:5d:a4:c9:93:77:8d:61:97:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
        Validity
            Not Before: Jan  2 16:35:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f326d45f050fbfed632be99a72290df8b5c05de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:28:f9:55:30:86:c4:8f:df:15:06:18:39:57:
                    65:fe:26:e0:93:35:02:08:38:d8:0c:df:a2:0e:d1:
                    4d:b1:d3:d0:91:2b:4f:ab:d7:00:bf:a1:4f:56:34:
                    5f:14:5d:42:60:c1:5f:29:8d:9b:9d:8d:25:8a:71:
                    39:c0:e4:e7:2b:a8:d4:2c:3e:78:f1:1c:29:a6:22:
                    b9:74:4f:3a:cb:2a:68:81:3e:32:af:d6:33:55:f6:
                    9a:a9:83:28:3b:7a:da:fd:2c:38:5f:10:73:08:50:
                    39:8b:0f:8a:40:6d:4f:50:60:a6:67:c7:8f:f8:8d:
                    9d:9a:6d:3d:53:07:52:b5:85:ea:16:ed:ee:1d:cb:
                    89:c8:dd:de:99:ad:d8:bd:7e:48:d9:8a:39:78:50:
                    78:52:47:8c:f5:4a:69:5e:62:48:a2:9c:5b:15:ea:
                    74:0f:02:28:a0:c8:c0:7f:5b:a3:2b:3c:82:a1:af:
                    01:6e:1b:78:1c:7f:0e:2d:bf:cc:8f:b8:f2:dc:4f:
                    1a:69:a9:61:d6:67:49:4e:d0:eb:e2:44:77:37:ac:
                    39:97:59:b7:9f:a8:a5:c9:e3:e6:45:10:ee:06:6a:
                    94:4f:91:68:05:86:70:04:4c:1d:d0:20:11:4f:e8:
                    7d:99:30:2c:52:35:c5:09:1a:71:8d:ef:e2:0f:b5:
                    7e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:26:D4:5F:05:0F:BF:ED:63:2B:E9:9A:72:29:0D:F8:B5:C0:5D:E1
            X509v3 Authority Key Identifier:
                keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/8ybUXwUPv-1jK-macikN-LXAXeE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.74.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:69:4d:b8:d8:22:25:00:05:57:f5:31:ab:2f:df:ba:37:3e:
         3d:67:a2:8c:d8:59:cc:5d:75:66:63:fe:15:18:4b:bb:a9:d9:
         e7:d5:45:04:56:94:26:33:ac:53:1f:1b:62:a4:82:1b:02:fc:
         32:af:b6:38:7a:05:6f:22:ef:32:4a:90:59:d0:20:be:34:da:
         84:4f:a2:e9:6f:4a:3f:5f:13:a4:27:b4:a0:ea:5f:2e:7f:cc:
         29:02:3d:23:43:7f:b1:af:2d:36:4b:00:d2:13:a1:4e:9e:94:
         26:12:98:00:7c:44:72:1c:0c:3a:0f:57:a2:1b:8c:45:64:c0:
         a4:3a:3f:30:08:c7:60:f2:3e:d0:e7:61:7a:fa:8f:f5:76:ea:
         cc:bc:4a:c8:51:46:92:c8:6d:9c:7e:2e:aa:f4:15:7a:6b:3b:
         25:06:cf:c7:5d:03:e0:a3:9b:b7:81:52:fd:e8:08:5c:09:b5:
         28:ee:88:d1:25:10:98:9e:ab:f2:7e:f9:08:27:cc:0d:c5:18:
         13:06:c2:bf:cd:45:07:8b:d3:48:34:8c:6b:0f:b6:43:60:e7:
         5e:08:fe:ce:3c:07:23:ab:8e:1d:b0:9b:82:a3:8e:e5:b6:2e:
         ef:79:78:61:95:fb:fc:24:bb:14:5e:68:bc:cb:c0:8a:e4:fd:
         58:42:0f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:26 2024 by rpki-client on console-ams.rpki-client.org