Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Yr_7n1Og3-uBwTxsUvUkrLI7SjI.roa
File:                     Yr_7n1Og3-uBwTxsUvUkrLI7SjI.roa (raw, json)
Hash identifier:          AiFeVC8mXZcK3Ny9H/C88UBg7h+cC1oNXhw9FPhJsm4=
Subject key identifier:   62:BF:FB:9F:53:A0:DF:EB:81:C1:3C:6C:52:F5:24:AC:B2:3B:4A:32
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       0187230AA01DACC34896BE8C87F8DE2F00E8
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Yr_7n1Og3-uBwTxsUvUkrLI7SjI.roa
Signing time:             Mon 27 Mar 2023 12:28:31 +0000
ROA not before:           Mon 27 Mar 2023 12:28:31 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211585
IP address blocks:        185.206.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:23:0a:a0:1d:ac:c3:48:96:be:8c:87:f8:de:2f:00:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Mar 27 12:28:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=62bffb9f53a0dfeb81c13c6c52f524acb23b4a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:83:db:58:b6:8c:ce:ba:59:80:e0:83:90:06:
                    75:14:eb:f9:30:6a:a0:6c:e7:b1:b0:52:49:36:2e:
                    2a:36:72:93:16:fa:26:ac:ea:db:3b:63:b3:08:03:
                    51:b6:72:7a:b4:f9:e6:3d:25:12:b6:98:5c:fc:c4:
                    12:83:2f:f6:c2:c8:7d:57:0a:59:df:d6:b9:e1:85:
                    0b:1b:b1:d8:90:5f:66:fb:d3:96:22:63:40:df:1e:
                    4c:39:2f:d0:ea:59:64:51:26:fe:9b:2f:b5:0a:bb:
                    95:50:bf:fd:9e:a7:bf:37:6b:d5:eb:fb:93:6e:ad:
                    f7:a5:cd:c7:b5:cf:8f:3c:aa:46:32:2d:7a:81:c6:
                    2c:bb:23:c2:45:d7:c9:f2:bf:87:1a:29:e2:16:f5:
                    62:e0:66:cd:4b:b4:7c:ef:01:52:9f:ea:c8:99:f5:
                    88:22:92:d6:8d:22:e1:1a:5b:66:c7:f2:d1:8a:a0:
                    bb:82:c9:bb:0e:0d:da:7d:d5:74:28:dd:48:59:7b:
                    e3:31:6f:76:17:b6:8f:d8:67:18:f5:22:05:86:05:
                    e9:76:fe:a0:1c:55:b3:da:b6:80:a9:b1:50:db:1d:
                    f4:a0:b6:43:b2:a6:fe:d1:66:2d:a5:cb:23:9a:99:
                    d7:ea:77:6c:21:70:76:65:ab:5c:11:7e:85:63:5c:
                    2f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BF:FB:9F:53:A0:DF:EB:81:C1:3C:6C:52:F5:24:AC:B2:3B:4A:32
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Yr_7n1Og3-uBwTxsUvUkrLI7SjI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.206.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:5f:24:a9:11:7b:8a:8d:c1:1c:16:0d:1d:ac:a4:08:0e:85:
         7a:64:00:db:8f:be:52:5d:8c:88:bc:de:0e:e2:39:f3:ba:3f:
         98:31:71:48:11:9a:c2:51:b9:ea:81:74:23:05:dc:8c:b1:25:
         9b:98:bc:f1:ca:66:ab:db:89:7c:44:3d:bf:2e:1b:9f:96:4e:
         0f:c7:d8:90:5b:cc:15:2a:eb:b0:3f:3b:ed:34:9b:b2:bf:e8:
         5e:a2:61:4f:51:a1:2f:cc:d6:a8:c5:c4:8d:81:3a:1a:9b:f0:
         a3:a2:b6:07:ae:b0:2b:64:04:76:b9:08:4e:02:d1:5f:fd:60:
         a1:45:b7:49:ea:8f:5a:3e:e1:ef:17:1a:22:16:20:cd:70:1b:
         07:b7:0f:27:76:bd:7d:1c:b2:61:c3:98:50:69:40:d0:0c:d5:
         42:c6:59:a7:99:76:ba:c9:fa:29:74:2e:08:c4:61:71:5d:67:
         2b:2e:08:89:33:a7:56:7c:2f:46:24:df:07:75:2f:36:1d:7f:
         6f:0b:1e:56:34:6a:bf:ae:98:0e:77:27:04:ca:fe:25:a0:7a:
         5a:55:65:14:34:a9:59:c9:c2:df:27:10:5d:59:f8:a8:b9:c1:
         10:f7:cb:98:2a:77:3d:e3:da:d6:71:bd:d8:6b:75:24:0e:88:
         63:53:07:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org