Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GUhKmK8S_RyYg-fosHs1_0UEe1I.roa
File:                     GUhKmK8S_RyYg-fosHs1_0UEe1I.roa (raw, json)
Hash identifier:          gytKjyZayA5XCcbw3SUjBcKJRFkBbwN3z6oLhnlboaM=
Subject key identifier:   19:48:4A:98:AF:12:FD:1C:98:83:E7:E8:B0:7B:35:FF:45:04:7B:52
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       018A93067D06EDB077091B05EF1251044573
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GUhKmK8S_RyYg-fosHs1_0UEe1I.roa
Signing time:             Thu 14 Sep 2023 09:29:50 +0000
ROA not before:           Thu 14 Sep 2023 09:29:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48296
IP address blocks:        185.226.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 14 Sep 2023 09:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:93:06:7d:06:ed:b0:77:09:1b:05:ef:12:51:04:45:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Sep 14 09:29:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=19484a98af12fd1c9883e7e8b07b35ff45047b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:de:27:9a:f7:a6:fa:6c:a1:72:c0:c9:7b:72:
                    93:3a:2c:7c:62:e9:d4:69:32:9a:7d:a9:98:11:75:
                    07:04:86:e7:03:27:11:f1:f4:0b:e9:8f:a1:4e:57:
                    c6:f8:6c:cd:a8:e7:1c:fa:51:36:bd:14:09:2f:ee:
                    2e:03:51:6f:a5:9f:9c:1e:30:04:bb:d1:41:90:89:
                    7a:51:dd:d8:d3:14:1a:c3:97:5d:a5:48:a2:f9:cd:
                    10:02:b3:9b:4f:19:45:20:f1:ba:22:2f:30:f3:c7:
                    a2:1a:d3:68:31:c3:9f:70:9f:db:db:ce:c7:20:41:
                    fb:76:b5:e8:ec:03:3a:5b:17:13:f1:ff:98:63:e3:
                    b0:96:86:58:a0:e2:e8:85:e5:cd:56:65:81:d5:cc:
                    b4:5d:7f:fc:64:66:1a:99:75:1f:65:43:e6:88:ba:
                    41:79:13:47:3b:e8:93:70:67:70:6a:83:01:c5:bb:
                    37:11:91:fb:cb:fe:b6:d8:8b:c1:3e:dd:6e:4e:7d:
                    4d:07:c9:f8:d5:db:4f:d7:85:34:9a:ae:aa:38:6f:
                    24:89:7c:35:2b:78:37:52:ce:e6:3d:0c:19:eb:5e:
                    dd:4e:08:59:9b:58:88:3e:bf:61:31:01:7e:be:2b:
                    a2:53:cc:80:d4:f0:d8:8c:eb:57:56:a7:5e:99:8f:
                    a4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:48:4A:98:AF:12:FD:1C:98:83:E7:E8:B0:7B:35:FF:45:04:7B:52
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GUhKmK8S_RyYg-fosHs1_0UEe1I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:17:63:98:38:da:e9:21:22:c6:23:84:34:23:74:fc:6b:2a:
         0a:48:11:86:65:e5:b9:63:a7:a1:09:0d:27:30:04:d7:45:24:
         8a:f0:37:85:3a:04:68:54:7d:73:d8:85:76:bd:da:20:57:94:
         4c:20:59:2d:35:c1:2a:ef:c0:b7:fb:c9:57:4f:a7:15:8d:e8:
         60:77:80:36:42:c7:5f:2c:d8:4a:14:74:06:39:d8:8c:5f:65:
         e0:96:f1:9b:60:bc:f8:d3:40:af:b7:7a:12:94:0d:2d:0e:20:
         be:2b:df:2a:d8:d7:6c:27:e2:8b:a4:ee:91:ee:a9:d1:b6:f1:
         4f:d7:70:a5:cf:3c:c0:cc:a6:66:3f:b4:a5:b7:f2:18:f7:cb:
         79:56:3a:51:38:75:bb:09:d8:cf:46:0e:9a:40:dd:eb:98:aa:
         ff:ae:9f:6c:56:9f:d9:29:51:62:cc:b3:29:b2:6f:44:6d:4c:
         8d:6f:55:64:86:fc:d9:fd:d8:a5:aa:46:ef:9f:9c:70:52:90:
         1f:6e:ad:86:b5:bd:c0:ce:ae:d5:fe:a4:46:52:d1:ca:dc:74:
         e3:bd:8f:66:4c:29:c2:cc:b0:2f:e8:69:9b:20:dc:5e:3d:38:
         23:81:20:10:88:49:e3:c8:88:9c:62:a6:cc:9a:f2:a9:a3:2f:
         af:6d:3f:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqTBn0G7bB3CRsF7xJRBEVzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwOTE0MDkyOTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTQ4NGE5OGFmMTJmZDFjOTg4M2U3ZThiMDdiMzVmZjQ1MDQ3YjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN4nmvem+myhcsDJe3KTOix8YunU
aTKafamYEXUHBIbnAycR8fQL6Y+hTlfG+GzNqOcc+lE2vRQJL+4uA1FvpZ+cHjAE
u9FBkIl6Ud3Y0xQaw5ddpUii+c0QArObTxlFIPG6Ii8w88eiGtNoMcOfcJ/b287H
IEH7drXo7AM6WxcT8f+YY+OwloZYoOLoheXNVmWB1cy0XX/8ZGYamXUfZUPmiLpB
eRNHO+iTcGdwaoMBxbs3EZH7y/622IvBPt1uTn1NB8n41dtP14U0mq6qOG8kiXw1
K3g3Us7mPQwZ617dTghZm1iIPr9hMQF+viuiU8yA1PDYjOtXVqdemY+k1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBlISpivEv0cmIPn6LB7Nf9FBHtSMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvR1VoS21LOFNfUnlZZy1mb3NIczFfMFVFZTFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueJqMA0G
CSqGSIb3DQEBCwUAA4IBAQAKF2OYONrpISLGI4Q0I3T8ayoKSBGGZeW5Y6ehCQ0n
MATXRSSK8DeFOgRoVH1z2IV2vdogV5RMIFktNcEq78C3+8lXT6cVjehgd4A2Qsdf
LNhKFHQGOdiMX2XglvGbYLz400Cvt3oSlA0tDiC+K98q2NdsJ+KLpO6R7qnRtvFP
13ClzzzAzKZmP7Slt/IY98t5VjpROHW7CdjPRg6aQN3rmKr/rp9sVp/ZKVFizLMp
sm9EbUyNb1VkhvzZ/dilqkbvn5xwUpAfbq2Gtb3Azq7V/qRGUtHK3HTjvY9mTCnC
zLAv6GmbINxePTgjgSAQiEnjyIicYqbMmvKpoy+vbT8p
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org