Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/RQRTRSiZFpNo3m6BTDI_aWHMMSY.roa
File:                     RQRTRSiZFpNo3m6BTDI_aWHMMSY.roa (raw, json)
Hash identifier:          JBFaooxR+cSp/C7blLhlalYekuzS+rcFbDC4KFB28Mc=
Subject key identifier:   45:04:53:45:28:99:16:93:68:DE:6E:81:4C:32:3F:69:61:CC:31:26
Certificate issuer:       /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial:       01886D09E41A0DB4C5AF7867E0A3ACAFCDB1
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/RQRTRSiZFpNo3m6BTDI_aWHMMSY.roa
Signing time:             Tue 30 May 2023 14:22:24 +0000
ROA not before:           Tue 30 May 2023 14:22:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199487
IP address blocks:        185.74.54.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 21 Aug 2023 06:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:6d:09:e4:1a:0d:b4:c5:af:78:67:e0:a3:ac:af:cd:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
        Validity
            Not Before: May 30 14:22:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=450453452899169368de6e814c323f6961cc3126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4e:47:d7:f3:cf:f3:aa:3e:19:fa:5c:0e:d9:
                    59:13:4f:87:ef:54:fe:c4:f9:24:47:54:85:f9:dd:
                    a3:d7:89:a4:dc:57:4a:69:e0:34:c4:63:f2:ed:55:
                    d7:11:40:c3:68:02:f6:9c:6f:86:d3:37:e4:bf:d5:
                    ee:3a:cd:7b:94:27:ab:50:aa:88:60:20:75:3f:ab:
                    26:62:fb:33:0a:a6:3d:2f:1e:74:3c:f0:9b:20:28:
                    08:1f:a2:8b:2b:89:7f:12:c2:de:da:dc:1f:76:63:
                    fb:8b:e9:bb:c3:79:67:28:f0:91:88:0f:4b:13:cf:
                    88:de:e4:82:d2:bd:e1:59:7f:b2:e3:9d:c2:1a:73:
                    15:c6:31:cf:2d:e6:2a:c2:10:64:87:c3:a7:7f:f2:
                    33:99:2e:f7:0f:19:bf:84:4e:39:b1:61:5b:72:48:
                    c8:fb:ad:ea:92:29:f0:48:5d:43:c8:28:9a:4b:9d:
                    70:a0:16:41:99:da:eb:19:70:28:ba:48:7f:72:e3:
                    eb:62:34:06:e7:f3:82:e5:66:b9:24:e6:33:6b:10:
                    06:ce:bd:d0:98:29:38:50:08:10:81:22:db:ed:e5:
                    6f:0d:1a:87:21:be:49:65:2f:69:e0:12:23:94:f5:
                    dc:38:62:93:0b:d4:55:11:23:db:d6:3d:ff:c3:14:
                    01:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:04:53:45:28:99:16:93:68:DE:6E:81:4C:32:3F:69:61:CC:31:26
            X509v3 Authority Key Identifier:
                keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/RQRTRSiZFpNo3m6BTDI_aWHMMSY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.74.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:c9:02:8d:6a:32:02:c4:92:d2:86:02:f5:8e:fd:91:71:bc:
         1d:36:37:bc:77:6b:ef:34:77:6b:ba:8a:49:bf:9a:4c:66:3d:
         68:7e:c7:eb:aa:9e:4b:c3:3e:36:d9:2d:61:2f:2c:59:b1:82:
         3e:98:c5:0d:1a:6e:7c:61:a6:a8:ed:a3:96:36:ce:ff:31:49:
         7d:89:3d:ea:2d:43:db:70:db:09:3c:2f:43:8b:3b:e5:c8:1c:
         0f:2f:41:a1:b9:49:b2:94:0e:21:84:c5:00:bf:fa:f1:20:80:
         39:ac:b2:8b:61:48:1f:bc:a6:7b:6a:e7:1b:29:e5:86:f7:7c:
         5a:43:71:34:17:76:62:a9:de:7a:69:99:79:f6:8c:7a:ea:7d:
         cc:78:00:75:09:24:03:fe:72:83:23:6c:30:ce:06:05:39:a9:
         21:d9:a3:1b:bd:40:2d:33:82:42:8d:39:a5:62:81:fd:49:2e:
         15:8b:16:2f:28:0c:f2:2e:4c:9c:8a:9f:eb:b3:83:35:03:46:
         9d:60:b5:df:cb:39:c8:e6:c1:ee:cb:b2:53:33:32:d0:e3:7d:
         3c:20:7e:2d:b0:d8:89:cb:b7:9a:4d:20:06:92:7d:31:98:ae:
         fc:d6:e4:49:96:87:75:28:f4:c1:28:5c:73:1e:42:e0:cf:8e:
         f9:7b:91:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhtCeQaDbTFr3hn4KOsr82xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MmY4OTE5ZTZiYzFlZjU2NjM0ODkwMThmYzg3NWJlMzRj
MGYyNGMwHhcNMjMwNTMwMTQyMjI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTA0NTM0NTI4OTkxNjkzNjhkZTZlODE0YzMyM2Y2OTYxY2MzMTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk05H1/PP86o+GfpcDtlZE0+H71T+
xPkkR1SF+d2j14mk3FdKaeA0xGPy7VXXEUDDaAL2nG+G0zfkv9XuOs17lCerUKqI
YCB1P6smYvszCqY9Lx50PPCbICgIH6KLK4l/EsLe2twfdmP7i+m7w3lnKPCRiA9L
E8+I3uSC0r3hWX+y453CGnMVxjHPLeYqwhBkh8Onf/IzmS73Dxm/hE45sWFbckjI
+63qkinwSF1DyCiaS51woBZBmdrrGXAoukh/cuPrYjQG5/OC5Wa5JOYzaxAGzr3Q
mCk4UAgQgSLb7eVvDRqHIb5JZS9p4BIjlPXcOGKTC9RVESPb1j3/wxQBIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEUEU0UomRaTaN5ugUwyP2lhzDEmMB8GA1UdIwQY
MBaAFDUviRnmvB71ZjSJAY/Idb40wPJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAt
ZTNmY2IyM2UzNDM4LzEvUlFSVFJTaVpGcE5vM202QlRESV9hV0hNTVNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAtZTNmY2IyM2UzNDM4
LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUo2MA0G
CSqGSIb3DQEBCwUAA4IBAQA5yQKNajICxJLShgL1jv2RcbwdNje8d2vvNHdruopJ
v5pMZj1ofsfrqp5Lwz422S1hLyxZsYI+mMUNGm58Yaao7aOWNs7/MUl9iT3qLUPb
cNsJPC9DizvlyBwPL0GhuUmylA4hhMUAv/rxIIA5rLKLYUgfvKZ7aucbKeWG93xa
Q3E0F3Ziqd56aZl59ox66n3MeAB1CSQD/nKDI2wwzgYFOakh2aMbvUAtM4JCjTml
YoH9SS4VixYvKAzyLkycip/rs4M1A0adYLXfyznI5sHuy7JTMzLQ4308IH4tsNiJ
y7eaTSAGkn0xmK781uRJlod1KPTBKFxzHkLgz475e5G8
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:37 2024 by rpki-client on console-fra.rpki-client.org