Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/62Uwo-VXvqW7hWDNzLnlqDotcc0.roa
File:                     62Uwo-VXvqW7hWDNzLnlqDotcc0.roa (raw, json)
Hash identifier:          aor87b988iWmEZs3BqVYgnnYprRSS2cZz4IG2AcOwjs=
Subject key identifier:   EB:65:30:A3:E5:57:BE:A5:BB:85:60:CD:CC:B9:E5:A8:3A:2D:71:CD
Certificate issuer:       /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial:       0185710C3664D312AA6F33A2DEC52E11F42C
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/62Uwo-VXvqW7hWDNzLnlqDotcc0.roa
Signing time:             Mon 02 Jan 2023 05:55:03 +0000
ROA not before:           Mon 02 Jan 2023 05:55:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205507
IP address blocks:        185.200.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 12 Jan 2023 15:23:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:0c:36:64:d3:12:aa:6f:33:a2:de:c5:2e:11:f4:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
        Validity
            Not Before: Jan  2 05:55:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb6530a3e557bea5bb8560cdccb9e5a83a2d71cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:3c:cf:52:67:dd:a7:ea:5a:8a:5a:8d:7c:
                    04:7d:19:10:7d:36:6d:fe:0d:3c:27:ba:a5:a0:68:
                    d0:0e:ac:63:6f:69:91:bb:c6:01:34:35:cd:c0:11:
                    69:f8:88:eb:bb:55:57:da:f4:ef:f1:ae:cf:7b:06:
                    28:86:00:f5:16:03:90:67:3b:8a:e9:c2:81:c3:c3:
                    0d:42:45:2b:e2:ad:b6:bf:47:3b:58:5d:93:ad:10:
                    dd:07:57:03:b3:ca:d9:c7:b7:84:bb:95:e1:59:24:
                    61:3b:35:8d:0f:21:e7:07:39:c8:74:35:eb:93:79:
                    b0:9d:98:1a:54:dd:c8:23:f3:43:fa:05:1f:ce:97:
                    d1:90:85:52:ca:c2:0f:ac:40:5e:3e:ad:5b:fd:03:
                    4f:6f:5f:61:c4:10:f3:f7:17:ab:c7:03:da:10:c0:
                    54:77:34:66:b7:a3:8f:19:7c:e4:1b:da:83:3c:e9:
                    1b:80:9b:31:1f:b1:23:6d:72:24:d3:af:1e:d5:6d:
                    24:d6:ce:d2:c8:c0:06:c6:8d:57:38:10:d1:91:4b:
                    b5:aa:01:87:18:d1:fa:fd:ca:64:f5:59:f1:f5:00:
                    ff:6f:1a:d3:90:e4:5e:c2:16:8d:b6:1e:d9:d9:0c:
                    16:ec:24:32:92:39:a5:df:76:e1:11:d1:06:0a:04:
                    b8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:65:30:A3:E5:57:BE:A5:BB:85:60:CD:CC:B9:E5:A8:3A:2D:71:CD
            X509v3 Authority Key Identifier:
                keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/62Uwo-VXvqW7hWDNzLnlqDotcc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.200.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:49:f2:00:43:41:35:35:4e:78:7a:60:1a:ed:84:57:c1:68:
         7f:4e:11:2c:af:75:cd:bb:e6:49:fb:0b:9b:96:89:48:d6:7c:
         6a:2a:7c:df:3a:17:07:b3:59:8a:63:05:a0:18:df:2d:20:a3:
         ae:b0:ff:ea:2f:cd:64:96:28:d2:28:e4:85:c3:e9:58:30:c7:
         ae:5c:06:b2:24:f6:c8:8f:c1:bc:da:33:8b:cf:80:b9:98:85:
         f1:5a:83:8a:ac:88:83:ab:0e:54:b3:c7:60:a1:2b:46:97:4b:
         82:ed:4b:d8:ec:d1:21:f1:18:80:82:b7:5f:50:11:75:87:01:
         6a:e3:11:14:69:fc:73:6c:fb:04:d7:cf:13:2c:78:9f:43:f7:
         7d:47:7b:f2:8b:33:90:5d:c0:5b:3e:aa:a4:db:d8:b8:c1:9a:
         d4:0d:10:f1:4d:a7:14:11:81:d8:bd:40:52:bd:8d:9b:26:07:
         b6:7a:90:00:b3:ea:09:75:d1:49:79:1f:7d:6c:d2:40:6a:d7:
         5b:d0:5a:15:1d:ed:3e:6d:86:77:d6:08:f1:67:67:cb:88:ca:
         8f:5b:97:15:09:2b:fd:96:b7:6d:ea:a2:74:24:b7:09:3b:ec:
         52:1b:67:66:28:56:03:12:94:a3:ce:fe:50:90:d4:ee:af:84:
         b0:55:f4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org