Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0VVX0GoKGvZ3QGm-REYOzMt5RWM.roa
File:                     0VVX0GoKGvZ3QGm-REYOzMt5RWM.roa (raw, json)
Hash identifier:          fELHWwGZnGQTl730T+xJ6KT7ilxdES2/WlOWTXzDNA0=
Subject key identifier:   D1:55:57:D0:6A:0A:1A:F6:77:40:69:BE:44:46:0E:CC:CB:79:45:63
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       018A02C0D22741DDB76B326E703E037AF0BC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0VVX0GoKGvZ3QGm-REYOzMt5RWM.roa
Signing time:             Thu 17 Aug 2023 09:08:25 +0000
ROA not before:           Thu 17 Aug 2023 09:08:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49532
IP address blocks:        185.218.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 17 Aug 2023 10:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:02:c0:d2:27:41:dd:b7:6b:32:6e:70:3e:03:7a:f0:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Aug 17 09:08:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d15557d06a0a1af6774069be44460ecccb794563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3a:47:d5:7e:d3:6a:e6:52:02:b1:c5:69:af:
                    dd:dc:e1:c2:fd:d4:b5:62:67:ab:89:08:43:73:96:
                    1c:c8:9f:c0:ed:73:0e:8c:63:a4:2c:1f:48:47:ed:
                    d2:55:37:e9:17:99:19:dc:1d:25:f6:9b:c8:3d:07:
                    ce:d2:54:2c:fa:52:84:3a:aa:90:df:3a:0a:98:8c:
                    1b:eb:3b:0d:8a:ca:d3:0b:7d:93:8a:cb:0f:c6:b4:
                    60:7f:65:7f:59:6f:26:28:b0:19:4f:90:4c:17:fd:
                    6b:eb:73:6f:1c:4a:8f:72:53:7f:fd:83:2c:0d:7c:
                    66:e7:27:e3:58:9f:dc:d7:98:88:7c:c7:cf:69:be:
                    d4:fd:38:05:1c:f8:a5:70:68:6f:99:ce:9b:dd:c8:
                    ef:74:3c:95:e1:d4:1e:1e:be:6d:b8:b4:8a:06:d9:
                    0a:5f:73:8b:0e:e6:44:06:ea:57:85:26:7a:21:2e:
                    d9:c1:8e:5f:8e:e1:ea:3a:34:ce:7b:82:37:f9:42:
                    0c:86:2a:99:ce:2a:d9:8b:cf:4c:2a:90:71:85:73:
                    e5:54:1b:a3:2a:ee:4d:1a:a1:0b:a8:b3:1a:57:cf:
                    87:4b:31:c2:29:40:96:6b:f3:96:1b:c9:20:4e:f5:
                    5a:f8:01:81:04:1a:bc:3d:d4:7c:a1:83:b6:6c:2f:
                    d3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:55:57:D0:6A:0A:1A:F6:77:40:69:BE:44:46:0E:CC:CB:79:45:63
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0VVX0GoKGvZ3QGm-REYOzMt5RWM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:19:ca:bc:97:14:59:c4:73:41:6b:15:2e:d1:b5:e2:80:01:
         0b:ad:76:53:ce:6d:4e:45:a5:d5:73:6b:2c:bf:a5:ff:72:30:
         be:66:91:b9:8d:f8:bc:7e:ed:a7:1f:fd:73:a2:e0:53:58:1a:
         8d:e0:14:5a:6a:3c:7e:c3:9f:c4:c9:d3:f7:55:58:90:34:c4:
         1c:64:5c:76:d6:d2:85:65:24:18:4e:ff:b3:eb:17:7f:cd:7d:
         22:d8:d7:bd:07:fd:3d:b7:82:37:71:bd:47:e3:8d:f2:f2:ac:
         75:a1:ac:ee:30:fe:1a:ef:f1:b7:40:7e:f1:0d:6c:c6:59:f1:
         44:eb:a8:48:f5:83:f9:47:24:0c:4f:ec:d0:43:b0:55:cb:15:
         fa:e9:c9:81:d3:f0:b0:10:40:1b:26:84:da:58:d3:b8:08:9f:
         8c:c2:90:c6:bb:81:41:6f:be:51:9e:b6:65:02:31:4b:0d:3f:
         0b:8b:0f:6b:73:50:0c:4f:f0:8e:69:95:57:1a:9e:c7:5c:57:
         a7:4c:10:7b:c8:4c:8b:c3:b8:1c:8c:7b:57:ae:5a:1d:7a:08:
         f0:bc:d1:9e:cd:e6:3e:c1:c8:78:97:63:94:f0:f3:ab:a5:03:
         c5:78:68:5f:9b:88:e9:07:3c:0b:27:ca:7f:af:27:70:dc:71:
         aa:60:17:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:19 2024 by rpki-client on console-ams.rpki-client.org