Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/5Hu1Vy6OhS5FqIZ6z1_d3F_jJEw.roa
File:                     5Hu1Vy6OhS5FqIZ6z1_d3F_jJEw.roa (raw, json)
Hash identifier:          ZQQl79u1YvlNAKz19Kp5mnVzmmLi6zUZ5rR6sL+iyb8=
Subject key identifier:   E4:7B:B5:57:2E:8E:85:2E:45:A8:86:7A:CF:5F:DD:DC:5F:E3:24:4C
Certificate issuer:       /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial:       0185710C37021B0E09323E01B4947002BE51
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/5Hu1Vy6OhS5FqIZ6z1_d3F_jJEw.roa
Signing time:             Mon 02 Jan 2023 05:55:03 +0000
ROA not before:           Mon 02 Jan 2023 05:55:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206044
IP address blocks:        185.212.150.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:0c:37:02:1b:0e:09:32:3e:01:b4:94:70:02:be:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
        Validity
            Not Before: Jan  2 05:55:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e47bb5572e8e852e45a8867acf5fdddc5fe3244c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:79:55:75:ed:07:7f:ff:32:e1:ac:2a:1b:e8:
                    68:2d:f6:1e:87:5f:0a:64:9b:24:55:3e:2f:41:2c:
                    98:1b:37:f3:e2:c9:62:b4:09:f7:6a:cc:81:34:3a:
                    b6:e2:3b:04:be:29:b5:f7:b1:42:30:98:e3:69:af:
                    a9:81:09:5a:92:99:7b:bc:25:2b:4b:72:74:71:b0:
                    de:9d:e7:c0:ab:c4:7f:f9:10:01:f0:3f:6e:9c:7b:
                    54:bd:1e:7e:02:75:79:ea:fd:d9:b3:ad:fb:2b:0d:
                    f8:b6:88:4a:b6:82:12:8a:13:76:06:99:65:2d:5b:
                    ab:16:99:3e:35:49:d3:cf:8b:e4:2f:68:6a:8f:ce:
                    5b:78:ba:e3:03:3a:70:f9:ab:99:21:5d:d5:3d:da:
                    b1:4d:cf:17:b3:82:8e:d2:9e:24:84:df:d3:3e:04:
                    dd:15:94:61:fb:bf:01:2b:48:bb:59:eb:7b:fd:a8:
                    fb:49:4d:2b:e5:d5:f6:72:8d:7d:d2:7b:59:12:bf:
                    13:8a:b0:a8:c2:5e:e8:31:3a:bc:3d:5d:52:9f:42:
                    87:59:88:79:ab:b2:f1:ce:3b:28:8b:62:ac:67:fe:
                    54:2f:43:7e:76:c9:8f:d5:41:e0:57:99:25:04:08:
                    ef:e6:ce:d1:1c:87:da:63:99:bd:a5:b4:79:60:54:
                    60:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7B:B5:57:2E:8E:85:2E:45:A8:86:7A:CF:5F:DD:DC:5F:E3:24:4C
            X509v3 Authority Key Identifier:
                keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/5Hu1Vy6OhS5FqIZ6z1_d3F_jJEw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:24:d1:02:fe:40:4e:a7:aa:2a:a1:88:ef:38:8f:1c:ed:75:
         92:a5:0b:6b:b7:56:00:e1:95:ca:22:d7:7a:c8:cb:dc:a0:f3:
         44:90:fa:aa:e9:e8:79:7e:3d:fb:f4:35:27:9a:44:3a:e9:85:
         58:cb:76:dc:2d:71:95:00:48:aa:6b:93:b1:c5:c4:8e:e9:e9:
         da:00:a7:78:9f:74:79:e4:ee:36:2a:da:c0:eb:ed:82:5f:d5:
         58:70:f4:bd:d7:83:30:0f:81:01:67:af:94:6c:d5:e9:fb:8c:
         4e:9f:b4:da:b4:04:88:34:18:77:60:e2:f1:84:d4:f8:5c:63:
         74:33:bd:92:db:9e:0b:2a:ad:30:c3:a0:32:f8:64:a4:35:09:
         6c:3e:aa:b6:d9:2b:c1:52:2f:ad:50:56:2e:22:24:bd:66:f8:
         7b:8e:36:d8:47:72:dc:71:0a:09:60:2f:ac:3b:b6:05:14:87:
         c6:8c:06:2c:17:35:fb:97:39:4c:5e:0b:36:de:70:ad:2b:e2:
         15:7d:b8:de:ad:57:ef:48:43:ef:a2:99:8c:47:27:93:77:3e:
         de:af:3f:c9:d7:29:5e:6c:c2:8a:ec:7e:31:cc:25:64:d7:40:
         91:64:8b:43:92:35:16:a7:31:e7:3d:7b:8a:3c:38:78:48:52:
         fd:a1:e4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org