Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Yv-38_CpO2cng7U6VPF5Z4mAOJI.roa
File:                     Yv-38_CpO2cng7U6VPF5Z4mAOJI.roa (raw, json)
Hash identifier:          SVFpV4/fBuw81C6WNQKnpd54TIFc0Pcc7CyxJqBHpPc=
Subject key identifier:   62:FF:B7:F3:F0:A9:3B:67:27:83:B5:3A:54:F1:79:67:89:80:38:92
Certificate issuer:       /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial:       018CC6B9392BAE4DA10DCAF2518945593851
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Yv-38_CpO2cng7U6VPF5Z4mAOJI.roa
Signing time:             Mon 01 Jan 2024 20:31:16 +0000
ROA not before:           Mon 01 Jan 2024 20:31:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     50338
IP address blocks:        185.240.132.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 07 May 2024 06:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b9:39:2b:ae:4d:a1:0d:ca:f2:51:89:45:59:38:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
        Validity
            Not Before: Jan  1 20:31:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=62ffb7f3f0a93b672783b53a54f1796789803892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:88:b6:ab:76:a5:67:68:91:9e:39:64:f1:79:
                    2c:fd:ca:8c:5c:6f:3e:9d:cf:b9:81:28:0c:11:93:
                    75:b2:68:d9:10:a4:43:92:b8:d0:fe:7c:8e:d2:46:
                    e0:01:67:00:0b:26:73:9c:4f:54:0d:37:db:bc:76:
                    92:d1:32:8a:df:7f:98:09:a2:ee:c3:2f:f5:18:b3:
                    20:70:e2:95:68:0a:d5:64:0f:a5:61:54:a4:de:83:
                    cb:84:91:ca:35:47:05:60:de:c2:74:5c:32:d1:39:
                    30:df:0c:a1:35:45:69:9d:eb:5a:6b:88:4b:71:eb:
                    50:b0:b4:15:68:5d:f7:90:c6:ca:a5:b2:02:c2:bd:
                    91:24:94:b0:8a:0f:5e:27:ac:25:37:7e:32:72:79:
                    e5:e8:5d:c5:39:b8:f3:69:47:78:7e:b3:71:ba:38:
                    3e:b9:37:fa:6a:e5:61:cc:ca:84:17:c9:9b:ab:61:
                    d3:a7:8c:ac:42:c4:75:58:22:cb:c1:39:ca:ac:1f:
                    b2:56:2b:6b:95:70:32:9a:70:b7:72:72:60:74:f5:
                    5c:fc:c0:f9:26:a8:1f:6c:60:d0:37:52:c0:7a:b9:
                    79:b0:4e:dd:55:39:d5:42:8d:fe:05:fa:cd:14:be:
                    84:8e:57:e0:0d:55:0a:0e:4d:53:0e:aa:83:3b:75:
                    bb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FF:B7:F3:F0:A9:3B:67:27:83:B5:3A:54:F1:79:67:89:80:38:92
            X509v3 Authority Key Identifier:
                keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Yv-38_CpO2cng7U6VPF5Z4mAOJI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.240.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:82:b2:86:24:19:73:f6:62:bd:f0:46:c9:65:80:3f:14:36:
         cc:95:9a:7a:4c:56:dc:a8:01:d8:70:7e:4d:f3:d2:22:a6:72:
         7d:af:be:2c:4f:60:37:18:0b:1e:69:f3:81:44:a7:b1:c8:f9:
         68:13:ea:25:e1:e4:9c:69:5a:d9:aa:7a:4f:83:12:da:1a:3b:
         30:5c:79:6f:12:5b:8a:f2:af:78:fa:cb:9a:fd:0f:a2:3a:aa:
         f7:c6:bf:62:68:0f:11:22:3b:25:37:93:d5:12:ec:8b:1b:f2:
         eb:c3:d4:38:08:ff:71:c7:fe:ea:2b:50:e0:41:55:a7:d7:2c:
         7a:1b:e7:24:8d:d6:84:91:b9:34:3a:61:b8:fb:f1:78:5c:77:
         0e:fe:5d:f5:11:e5:dd:b7:e0:63:aa:fc:ce:a6:35:22:ee:b0:
         50:4e:c5:c7:94:4d:72:27:02:68:8b:48:a2:75:20:96:69:0c:
         cf:b8:38:1a:28:d4:1e:44:a0:19:88:9b:5a:ec:1c:5e:6a:13:
         61:d8:09:9a:14:63:05:7e:85:c1:1f:32:0b:24:54:d8:62:91:
         29:1f:e8:b5:3d:ae:8d:c3:03:d3:2e:c6:93:aa:5b:c1:46:5a:
         a3:94:95:42:a1:2d:29:b4:2a:20:1c:30:53:3a:09:dd:76:e9:
         6a:bc:03:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org