Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d11b44-beeb-45e5-b6a3-82d490a33aa6/1/DL5VpWvm_fEfVKp8dxS2oP2-JfM.roa
File:                     DL5VpWvm_fEfVKp8dxS2oP2-JfM.roa (raw, json)
Hash identifier:          pn6lPum2ncO9+wHg0T3/SDHHxj40tSgb0PLZHxZCgL0=
Subject key identifier:   0C:BE:55:A5:6B:E6:FD:F1:1F:54:AA:7C:77:14:B6:A0:FD:BE:25:F3
Certificate issuer:       /CN=2334daba8118cb41ab76cd421104fcc674c381b1
Certificate serial:       018D174414C96F6598230235BAD3D4FB36C6
Authority key identifier: 23:34:DA:BA:81:18:CB:41:AB:76:CD:42:11:04:FC:C6:74:C3:81:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IzTauoEYy0Grds1CEQT8xnTDgbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/d11b44-beeb-45e5-b6a3-82d490a33aa6/1/DL5VpWvm_fEfVKp8dxS2oP2-JfM.roa
Signing time:             Wed 17 Jan 2024 11:52:34 +0000
ROA not before:           Wed 17 Jan 2024 11:52:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        185.102.84.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Jan 2024 14:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:17:44:14:c9:6f:65:98:23:02:35:ba:d3:d4:fb:36:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2334daba8118cb41ab76cd421104fcc674c381b1
        Validity
            Not Before: Jan 17 11:52:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0cbe55a56be6fdf11f54aa7c7714b6a0fdbe25f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b3:c4:e2:23:80:25:91:9c:6d:bc:c7:94:af:
                    1b:de:1c:73:4c:39:22:1b:f7:aa:e1:0f:53:08:99:
                    ac:9e:d4:64:2d:5c:5a:0b:0e:2d:dc:8c:97:6f:65:
                    ea:69:87:98:0e:81:69:a2:c3:aa:28:db:d7:23:05:
                    c0:66:96:a6:8c:31:58:9b:91:ca:dd:41:3f:5d:f8:
                    f2:e0:cc:43:72:2f:d0:22:ca:cb:32:9f:8d:05:1b:
                    89:12:f0:40:33:3d:07:5f:bc:04:45:80:23:d3:5f:
                    90:f0:42:63:5f:49:9b:8f:17:d2:f0:59:cb:10:86:
                    6d:f5:b0:8f:4b:b1:5b:13:d2:f5:f5:ac:39:8d:4f:
                    6c:07:8c:02:37:de:7f:05:cc:33:c2:cf:43:02:89:
                    10:e2:8a:fc:74:ec:d4:fe:93:de:70:f8:91:95:03:
                    b7:67:84:c7:16:3c:fd:0e:d6:06:08:b6:96:d5:1e:
                    1a:1a:57:d2:ed:78:21:8f:b0:93:62:ea:7b:75:d2:
                    09:60:dc:97:0a:f0:b6:ae:4f:05:83:72:88:e1:0b:
                    06:cf:eb:f1:5d:8f:ab:46:24:b9:2f:d8:d4:61:31:
                    88:97:69:c8:51:22:02:35:16:4b:91:f7:e9:fa:e3:
                    14:e8:b7:be:13:50:3b:53:58:64:1b:08:d1:de:d2:
                    8f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BE:55:A5:6B:E6:FD:F1:1F:54:AA:7C:77:14:B6:A0:FD:BE:25:F3
            X509v3 Authority Key Identifier:
                keyid:23:34:DA:BA:81:18:CB:41:AB:76:CD:42:11:04:FC:C6:74:C3:81:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzTauoEYy0Grds1CEQT8xnTDgbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d11b44-beeb-45e5-b6a3-82d490a33aa6/1/DL5VpWvm_fEfVKp8dxS2oP2-JfM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d11b44-beeb-45e5-b6a3-82d490a33aa6/1/IzTauoEYy0Grds1CEQT8xnTDgbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.102.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:e3:ba:28:af:30:69:f9:20:8f:e4:fa:71:51:36:c9:5d:bf:
         7a:83:1f:b5:86:f4:be:fe:ae:b2:86:26:ec:e7:70:0a:0d:c8:
         47:1f:3d:d8:80:fc:f8:07:df:14:80:97:0d:fd:56:1e:7d:a5:
         67:e5:a3:fe:87:bc:b4:b7:ae:4d:fb:a5:fa:89:3f:06:8d:fd:
         ae:41:76:e1:b5:69:24:94:6c:65:b7:47:f2:34:28:b9:90:db:
         a7:00:7e:04:d3:a0:f1:17:db:8d:b4:84:78:15:86:21:6b:63:
         49:53:69:89:5b:f0:a6:14:57:4e:69:f8:22:1b:0d:22:71:b2:
         1a:8e:86:8c:7d:0f:5c:68:6a:6d:cf:4b:7e:58:1c:da:51:b6:
         3b:19:15:7a:25:ce:ef:21:b2:20:f2:57:d3:a4:19:55:e8:01:
         a7:73:bc:08:ea:85:4e:0a:27:b3:39:71:55:eb:bb:6f:6f:ce:
         11:99:7d:67:3e:a4:1a:c0:38:a3:5a:64:91:32:f2:df:06:b4:
         b0:0d:e4:77:13:77:82:1f:1c:0c:c1:6a:c7:f3:af:20:87:fd:
         d7:d2:76:0a:20:db:32:24:6a:3a:86:f0:c2:90:f2:07:23:6f:
         e6:bd:07:90:a7:7c:e0:88:46:42:8f:ac:8c:09:33:1e:49:ab:
         bc:b8:ed:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:27 2024 by rpki-client on console-ams.rpki-client.org