Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pzpjZQrLF2eKaf4GEvYgLsaptLY.roa
File:                     pzpjZQrLF2eKaf4GEvYgLsaptLY.roa (raw, json)
Hash identifier:          rVkrwyQTy8WFmtM119CAzZd8TMVfs1snqhmXGx7XQEs=
Subject key identifier:   A7:3A:63:65:0A:CB:17:67:8A:69:FE:06:12:F6:20:2E:C6:A9:B4:B6
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       018B37C913E997BA2942D23D5BE705719BB7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pzpjZQrLF2eKaf4GEvYgLsaptLY.roa
Signing time:             Mon 16 Oct 2023 09:20:06 +0000
ROA not before:           Mon 16 Oct 2023 09:20:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        185.222.30.0/24 maxlen: 24
                          185.206.249.0/24 maxlen: 24
                          185.206.248.0/24 maxlen: 24
                          185.209.38.0/24 maxlen: 24
                          45.90.19.0/24 maxlen: 24
                          185.240.120.0/23 maxlen: 24
                          185.246.115.0/24 maxlen: 24
                          185.36.204.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 19 Nov 2023 16:53:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:37:c9:13:e9:97:ba:29:42:d2:3d:5b:e7:05:71:9b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Oct 16 09:20:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a73a63650acb17678a69fe0612f6202ec6a9b4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d1:35:0d:d3:3f:a1:85:d2:43:1b:6a:b8:de:
                    35:17:db:6f:da:c7:93:60:df:ce:9d:a9:a0:1a:d4:
                    53:2e:04:e3:00:e5:72:5a:06:24:2f:86:6f:ee:fc:
                    5b:71:63:ec:12:3e:5e:fe:55:a8:e5:44:e6:22:df:
                    fa:be:18:91:63:ed:b2:dc:8f:ca:f8:8b:51:ff:48:
                    53:b4:89:34:ed:bb:73:b8:d3:b7:05:f3:77:5c:7a:
                    68:37:45:91:28:04:a9:bf:ae:33:13:5f:2f:35:85:
                    00:f3:08:60:f4:4c:3a:d9:7b:45:26:36:7f:3d:30:
                    19:f6:79:8e:cc:f4:8d:38:6c:81:c1:99:b5:0e:ce:
                    b3:23:4c:d9:55:29:ff:c2:38:34:78:30:fe:6d:2d:
                    c4:dd:9f:0c:68:18:36:aa:b4:69:67:36:b7:85:b2:
                    f8:86:1a:d3:f4:4d:a3:bd:07:29:19:a7:09:e9:6a:
                    ec:53:94:ac:a8:3a:e5:ed:2c:2f:79:6c:f2:8e:a8:
                    c6:47:39:00:43:cd:c7:a5:da:66:57:e8:1e:26:10:
                    2f:f1:9c:dd:c5:6b:eb:06:1b:ed:aa:d1:e1:8f:6e:
                    22:d1:d5:33:36:38:0f:09:e0:20:82:94:9c:db:f5:
                    a7:11:d1:b2:33:04:7c:38:4b:39:57:3d:16:07:78:
                    e3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3A:63:65:0A:CB:17:67:8A:69:FE:06:12:F6:20:2E:C6:A9:B4:B6
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pzpjZQrLF2eKaf4GEvYgLsaptLY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.19.0/24
                  185.36.204.0/24
                  185.206.248.0/23
                  185.209.38.0/24
                  185.222.30.0/24
                  185.240.120.0/23
                  185.246.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:f1:fe:3b:b6:a7:d8:82:c3:bc:f5:37:e7:df:3e:1c:b1:c1:
         08:e5:91:0b:00:3f:0e:42:99:82:eb:83:35:18:94:43:3f:4a:
         69:14:c9:24:ad:87:d2:73:1a:03:a2:23:63:26:c0:23:29:b3:
         a3:77:57:7b:59:31:19:2f:bc:cd:39:46:14:c0:ee:0b:5a:dc:
         8c:4a:6e:f7:5a:01:60:3c:ed:11:e8:3f:7a:af:a0:30:6a:33:
         35:05:44:cd:5b:e3:48:bf:aa:51:9a:61:0d:dd:a2:34:66:c8:
         04:91:1e:ff:2d:1b:a6:21:db:7f:5a:9b:fd:88:a7:19:10:2b:
         ec:7a:68:cc:44:53:0c:91:f3:7e:af:27:70:9e:96:aa:eb:11:
         ba:86:35:d2:06:43:43:3b:74:7c:db:e0:18:0c:d6:5c:42:f5:
         cf:82:4f:4c:71:dd:2b:c1:1d:3b:3a:0b:f6:8f:a6:c4:1c:7e:
         50:12:4e:d2:e6:31:0f:9f:76:cc:d3:73:fb:64:e8:fa:d1:b4:
         fc:28:1d:0e:dc:ec:cb:d4:aa:d2:ac:1b:ce:88:56:57:0a:83:
         ad:45:9f:c3:f2:1f:39:b7:6f:6b:af:2b:bb:5b:10:cd:e4:6b:
         fb:5c:a8:b5:2a:d2:c4:07:67:b4:36:ac:44:7c:05:30:8a:5d:
         fd:e1:c2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org