Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mebhELGjDrxW0ZZ1XOMhhVy8mhg.roa
File:                     mebhELGjDrxW0ZZ1XOMhhVy8mhg.roa (raw, json)
Hash identifier:          M9izJtfQajp9H2XR9vOECnIjSgY94pfY/V8/FLowvyQ=
Subject key identifier:   99:E6:E1:10:B1:A3:0E:BC:56:D1:96:75:5C:E3:21:85:5C:BC:9A:18
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       018B492D73747018D0BF1A426BB318936396
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mebhELGjDrxW0ZZ1XOMhhVy8mhg.roa
Signing time:             Thu 19 Oct 2023 18:23:17 +0000
ROA not before:           Thu 19 Oct 2023 18:23:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.209.38.0/24 maxlen: 24
                          185.220.250.0/23 maxlen: 24
                          185.251.229.0/24 maxlen: 24
                          185.225.0.0/23 maxlen: 23
                          185.223.80.0/24 maxlen: 24
                          185.222.30.0/23 maxlen: 24
                          185.226.107.0/24 maxlen: 24
                          193.58.146.0/23 maxlen: 24
                          185.240.122.0/24 maxlen: 24
                          45.147.224.0/24 maxlen: 24
                          45.8.21.0/24 maxlen: 24
                          185.246.114.0/24 maxlen: 24
                          185.238.229.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 23 Oct 2023 09:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:49:2d:73:74:70:18:d0:bf:1a:42:6b:b3:18:93:63:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Oct 19 18:23:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=99e6e110b1a30ebc56d196755ce321855cbc9a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c2:d8:06:9a:6c:5d:37:10:d7:f7:d5:74:71:
                    54:18:8d:71:7a:2e:b4:5c:31:ce:fb:00:f5:8f:2f:
                    a9:e2:72:0d:89:02:50:65:1d:39:36:ba:3c:9c:f0:
                    e0:4a:e2:83:36:41:f3:1e:a2:55:de:8e:ed:c6:21:
                    9a:99:f2:80:ed:a7:48:6d:af:f4:34:7c:e6:d0:bd:
                    92:80:23:5b:5c:5a:49:88:15:79:5b:f4:90:5d:b0:
                    6c:ba:e0:bc:e5:57:01:c8:96:53:34:59:2f:67:f5:
                    8e:dd:55:7a:5d:89:65:f9:31:27:fb:1f:6f:5a:33:
                    55:37:59:18:55:83:89:a6:91:b0:5e:8c:69:21:32:
                    11:96:a7:d5:2b:f6:d9:f8:01:5f:5a:33:6b:bd:bf:
                    ac:ff:9b:4f:24:65:41:a8:cd:8b:6a:42:5c:8c:8b:
                    73:b4:19:05:06:86:fa:14:44:fc:c3:ee:0d:b1:c7:
                    4c:bf:35:dc:47:e3:c2:1b:4f:13:d5:2e:d0:34:74:
                    86:2b:89:4b:bc:6e:2d:a2:17:19:28:e3:cc:64:c9:
                    44:22:4f:ca:15:b8:45:ab:6a:ee:28:9f:50:73:ef:
                    33:f8:a6:55:aa:ed:c5:2f:37:bc:18:b2:a0:36:10:
                    24:14:2f:1d:81:6d:f2:60:f3:82:9e:b7:30:c8:c2:
                    ed:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E6:E1:10:B1:A3:0E:BC:56:D1:96:75:5C:E3:21:85:5C:BC:9A:18
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mebhELGjDrxW0ZZ1XOMhhVy8mhg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.21.0/24
                  45.147.224.0/24
                  185.209.38.0/24
                  185.220.250.0/23
                  185.222.30.0/23
                  185.223.80.0/24
                  185.225.0.0/23
                  185.226.107.0/24
                  185.238.229.0/24
                  185.240.122.0/24
                  185.246.114.0/24
                  185.251.229.0/24
                  193.58.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:7c:b4:ad:e7:5c:f1:51:b9:a8:ab:21:37:16:c1:34:d0:13:
         d2:d1:fe:38:dc:ef:f2:ae:6b:02:8a:7d:41:e1:34:a3:24:24:
         c1:4e:9e:f6:fd:dc:6e:7a:a0:ac:21:49:ce:c0:3d:8a:f7:b2:
         86:48:82:e0:d8:7f:8a:00:98:54:f0:9b:15:ec:e3:11:63:09:
         12:0c:f1:7b:51:7b:7d:b7:07:d2:a4:6e:8a:66:ec:71:2e:53:
         46:66:54:51:57:45:0a:da:a9:56:94:99:32:af:45:70:41:b3:
         09:f7:71:d3:1a:43:f8:3c:9e:79:ea:94:9a:b4:51:8a:38:18:
         2d:31:2f:5c:52:f1:01:0a:df:9c:ed:15:bb:ba:81:74:d3:fa:
         27:a6:77:b7:06:3a:2b:28:2f:64:8a:04:5d:2d:64:e4:6d:19:
         ae:ff:5f:ea:7a:1e:7e:7c:ce:8e:d5:21:f2:27:c1:6a:50:2d:
         c3:fe:d0:24:59:bc:81:f4:37:8a:52:fe:8c:6e:d3:78:72:88:
         a5:84:ad:5f:15:2f:82:76:91:75:09:7c:61:80:c0:00:72:8c:
         51:be:71:d4:4b:c6:89:c5:da:2e:6e:7c:8a:eb:38:4e:37:44:
         cb:89:59:15:06:3d:10:9d:84:68:11:ee:89:99:65:13:8f:15:
         d4:9a:98:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org