Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/egWKviM3Z58nkOw47XnrB5q_qoo.roa
File:                     egWKviM3Z58nkOw47XnrB5q_qoo.roa (raw, json)
Hash identifier:          1UdULgIYIHUnoRDZFjSXm/vHk39SzfFrq9hK9moNm0E=
Subject key identifier:   7A:05:8A:BE:23:37:67:9F:27:90:EC:38:ED:79:EB:07:9A:BF:AA:8A
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       018571B643F8A93CA48BFE38F423C63B48C1
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/egWKviM3Z58nkOw47XnrB5q_qoo.roa
Signing time:             Mon 02 Jan 2023 09:00:48 +0000
ROA not before:           Mon 02 Jan 2023 09:00:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208528
IP address blocks:        185.232.11.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:b6:43:f8:a9:3c:a4:8b:fe:38:f4:23:c6:3b:48:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Jan  2 09:00:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7a058abe2337679f2790ec38ed79eb079abfaa8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:64:14:47:e4:ea:e0:86:a3:cd:b1:f3:e4:75:
                    b6:60:b5:2e:a9:c0:b3:7a:f7:09:60:00:d9:f2:2e:
                    18:b5:49:59:ba:47:a1:c0:77:59:00:b3:a8:c8:f3:
                    d2:46:b3:71:6a:fc:a5:ab:f9:ca:c3:21:0d:a5:16:
                    5f:51:d0:10:68:dc:99:81:53:5b:80:06:ac:d3:9d:
                    c4:78:66:03:a9:d4:7a:ca:f8:c0:02:a4:85:fd:56:
                    02:45:f2:53:41:b4:b2:70:12:dc:73:75:d5:0f:e9:
                    97:39:7f:f9:6e:0e:68:0d:f5:aa:2a:9e:4c:fa:0b:
                    36:ee:78:05:95:37:3b:44:f2:1f:59:4e:13:e9:b0:
                    61:d5:24:49:31:bd:01:10:02:cc:09:bb:ab:ad:78:
                    92:bc:bc:87:8c:8c:42:d2:d0:81:da:d0:e4:77:16:
                    cb:d7:78:a8:4f:5f:d7:bf:8c:7d:c8:51:59:d1:0d:
                    b7:bc:17:9b:4e:94:4a:d9:9b:32:7a:77:ef:d6:90:
                    ba:bf:47:80:56:12:34:fd:3e:35:f7:f1:a3:c1:54:
                    b2:ac:81:b9:91:bb:f0:bc:e4:3d:ab:4f:0b:ba:bb:
                    ff:85:33:13:1e:16:16:e3:44:a9:97:5b:27:45:26:
                    82:9d:ee:d2:64:7b:df:4b:6f:36:ed:21:33:2c:6b:
                    df:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:05:8A:BE:23:37:67:9F:27:90:EC:38:ED:79:EB:07:9A:BF:AA:8A
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/egWKviM3Z58nkOw47XnrB5q_qoo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.232.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:8e:2b:e8:b7:63:5a:e1:d3:be:a0:9d:03:76:81:83:84:1a:
         31:1a:5d:2a:34:66:d0:84:22:81:d7:d5:36:8d:a8:e4:22:5c:
         5c:61:e3:f2:07:ab:bc:a1:74:f7:93:c8:ea:9d:f8:27:48:9b:
         32:5a:33:d6:ef:51:9e:5f:e0:72:6a:2a:c5:11:54:42:53:8e:
         bb:4b:f0:59:25:28:69:ce:58:2e:97:cd:d1:b7:d4:3e:3c:99:
         c3:60:39:dd:ec:5e:97:df:ef:b8:f7:c1:a4:8c:92:55:68:a2:
         97:e9:22:b6:a1:e2:39:cb:6e:f8:80:df:83:10:63:71:bc:20:
         ef:97:cc:fd:5c:0a:d7:f3:da:e3:9a:ae:a6:f6:9b:31:ee:98:
         81:40:4d:cc:1f:3c:18:55:1e:31:87:e6:85:79:0a:d7:7b:b3:
         3e:e0:96:10:6b:ce:12:18:8e:2d:5a:54:78:b6:60:a0:3d:42:
         41:05:68:50:4f:22:d8:d1:71:47:34:95:ca:ab:d8:4b:be:66:
         0b:75:06:b5:69:70:e2:06:5f:54:53:7b:61:fd:e0:de:3d:c5:
         5f:eb:8e:d3:fe:83:8d:bf:36:4c:da:0d:0e:a8:a9:fd:94:af:
         55:e7:7c:1a:51:10:32:79:0e:93:da:e9:24:31:34:0e:11:b8:
         3a:a4:88:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org