Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/HyHwXE_4guCaeRz_3TbBn3DFfuo.roa
File:                     HyHwXE_4guCaeRz_3TbBn3DFfuo.roa (raw, json)
Hash identifier:          H5SttQm40irmopYruN2gioGmp/67Mv4USh5h2fS1s7Y=
Subject key identifier:   1F:21:F0:5C:4F:F8:82:E0:9A:79:1C:FF:DD:36:C1:9F:70:C5:7E:EA
Certificate issuer:       /CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
Certificate serial:       018571C312C97950722569DC097CC0F2B6D4
Authority key identifier: 5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/HyHwXE_4guCaeRz_3TbBn3DFfuo.roa
Signing time:             Mon 02 Jan 2023 09:14:47 +0000
ROA not before:           Mon 02 Jan 2023 09:14:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61064
IP address blocks:        185.183.224.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:c3:12:c9:79:50:72:25:69:dc:09:7c:c0:f2:b6:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
        Validity
            Not Before: Jan  2 09:14:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1f21f05c4ff882e09a791cffdd36c19f70c57eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f2:ab:ce:f6:27:94:0f:b7:02:2e:92:e7:40:
                    22:5e:54:a2:18:99:1c:01:29:bf:2e:e7:dd:36:01:
                    05:3d:94:df:2e:31:bc:03:06:93:16:2a:a8:e8:d2:
                    2c:a1:13:5a:22:ef:b4:af:a6:4e:1f:18:b5:88:f0:
                    82:5d:5f:5f:ea:16:f2:3c:2e:0d:e1:5e:7d:c4:5a:
                    c9:05:64:1e:39:36:8d:b4:15:8a:c6:b4:4b:40:23:
                    73:b6:53:35:23:38:69:43:66:26:67:3a:bd:c0:4e:
                    93:78:e3:71:b5:e7:42:5c:65:f1:4a:33:fa:0f:7c:
                    28:b7:65:6c:02:87:b6:c0:29:30:b4:46:45:0c:49:
                    6b:d4:b6:fa:08:72:62:5c:58:aa:60:fd:58:0b:2a:
                    2e:0f:16:a3:bc:3d:42:5b:11:02:10:9d:87:4a:2d:
                    a3:d8:03:e5:fb:4c:62:80:d9:2e:c0:54:19:c1:5c:
                    5c:3c:0e:f2:4b:1f:23:f5:b1:16:e2:90:b4:7e:42:
                    17:0e:24:76:48:b4:c1:a9:54:b6:30:2b:9f:32:79:
                    f7:88:f8:15:4e:cf:07:af:e3:ec:d7:e6:a2:e2:b7:
                    87:f6:8b:ca:68:5b:00:e7:bb:4d:c0:d9:27:ac:29:
                    81:50:3d:a7:e2:f6:95:cb:da:cd:5f:54:36:81:7f:
                    1a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:21:F0:5C:4F:F8:82:E0:9A:79:1C:FF:DD:36:C1:9F:70:C5:7E:EA
            X509v3 Authority Key Identifier:
                keyid:5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/HyHwXE_4guCaeRz_3TbBn3DFfuo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:01:de:fb:b7:4e:e6:bb:93:77:ae:fd:3e:e3:2b:e0:bf:a1:
         97:34:ff:31:a1:dd:df:ba:e4:99:da:6a:dc:18:d3:98:19:16:
         8a:75:b8:1b:f1:ae:86:63:a0:72:8b:d8:a0:72:19:9b:f4:42:
         e9:39:64:a1:a3:d6:78:2b:46:80:57:79:6c:3b:c1:b4:fa:b4:
         ca:64:cb:b7:b4:d1:95:88:28:40:a4:bc:04:1c:ad:88:51:98:
         e4:4c:93:ef:94:5a:94:02:c8:e7:73:a6:79:54:b1:8f:d9:0b:
         bc:66:ee:4a:fd:36:d8:1e:68:01:5e:bd:75:fe:93:c0:6b:f3:
         72:40:7a:8f:63:42:cb:d3:f3:c5:44:5d:b5:22:fa:9a:e8:af:
         37:9b:a7:43:68:4a:94:ed:bd:6e:49:62:61:d3:65:cf:4d:3d:
         1e:70:6c:3c:7e:3f:4c:23:4b:8b:32:74:fd:af:aa:f6:ef:ea:
         5e:26:50:d6:21:21:a1:39:94:f1:55:d4:9a:ff:ca:bf:07:0c:
         06:6c:46:4b:96:ee:75:68:5c:40:cf:37:d4:a5:11:8d:fe:af:
         d8:b0:b8:f6:f7:5d:51:dc:76:1d:32:3c:0b:0b:5e:57:8c:4a:
         1d:cd:bc:bc:f7:a9:f5:01:2a:3a:92:14:ec:87:76:8f:0e:b1:
         29:83:5e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:34 2024 by rpki-client on console-ams.rpki-client.org