Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uLWOlZj9yyflC8Jl1xjBsbvvyRI.roa
File:                     uLWOlZj9yyflC8Jl1xjBsbvvyRI.roa (raw, json)
Hash identifier:          kghd3tPGOYvlq0clkDWPRGtfKPg4uYx3oPGurHBHYGw=
Subject key identifier:   B8:B5:8E:95:98:FD:CB:27:E5:0B:C2:65:D7:18:C1:B1:BB:EF:C9:12
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       018A930851E56520A03FBF444669EB34A806
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uLWOlZj9yyflC8Jl1xjBsbvvyRI.roa
Signing time:             Thu 14 Sep 2023 09:31:50 +0000
ROA not before:           Thu 14 Sep 2023 09:31:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211975
IP address blocks:        185.227.145.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 25 Oct 2023 10:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:93:08:51:e5:65:20:a0:3f:bf:44:46:69:eb:34:a8:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Sep 14 09:31:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b8b58e9598fdcb27e50bc265d718c1b1bbefc912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:cd:e0:6b:6f:6a:b4:52:4a:4b:a7:b9:2f:
                    23:a8:93:3c:1c:64:95:13:41:c6:29:bc:fe:a3:97:
                    b1:f6:5c:c6:fe:8a:32:1a:5e:cc:a2:a6:6c:6c:5f:
                    97:92:9e:86:a0:2e:cd:84:be:5d:30:27:3a:e1:78:
                    59:5d:27:a1:ee:05:5e:41:32:27:6b:a8:78:58:c6:
                    65:f5:f6:a7:f2:94:b7:ec:53:46:44:7e:77:1f:0d:
                    91:c0:7d:dc:b3:92:e7:76:03:04:4e:9c:54:1c:c5:
                    d2:f5:10:fa:c1:53:49:13:76:0f:b3:d3:65:7c:ec:
                    2e:24:7f:da:6f:fd:0d:13:73:e1:27:19:f4:6a:25:
                    62:ef:ff:81:c0:8d:9c:5f:73:11:84:f8:3c:28:8c:
                    ad:2c:18:d8:8b:e8:b9:a5:52:fe:41:ae:80:35:c9:
                    26:66:e4:6c:61:26:db:fc:53:fa:fe:96:88:d0:19:
                    1d:57:84:58:f0:6d:f5:1d:a0:f6:58:24:14:b2:ec:
                    ad:49:9c:3d:2e:44:a8:ef:ef:ef:ec:74:b1:72:20:
                    43:84:45:a8:69:e0:ce:0d:29:96:ef:77:3f:09:1c:
                    53:43:c2:14:a0:48:93:c6:92:31:d7:ab:39:ac:f6:
                    de:de:1c:4b:0c:48:6e:8f:74:3f:0d:36:9f:ed:64:
                    bf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B5:8E:95:98:FD:CB:27:E5:0B:C2:65:D7:18:C1:B1:BB:EF:C9:12
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uLWOlZj9yyflC8Jl1xjBsbvvyRI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.227.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:bb:ef:06:2c:aa:20:dd:23:36:6a:e8:cb:ce:6d:14:80:41:
         d8:59:bb:41:7a:ee:88:67:95:c1:c9:72:a5:68:8a:fa:6e:fb:
         a3:03:d3:b4:3b:24:af:9f:ef:82:4e:12:03:24:88:3d:86:a7:
         0a:dc:7a:6b:5b:e6:be:47:06:7c:53:3f:58:73:85:15:d1:b5:
         1b:41:af:67:ce:da:d6:56:9a:07:00:9a:d1:e2:cb:a5:9a:ab:
         bb:a8:18:32:4e:a1:55:52:c6:a9:01:e1:83:e7:ae:28:71:34:
         78:e9:ae:99:d9:66:ec:77:1b:a6:ac:8f:f5:17:31:d3:53:a7:
         df:47:13:54:f8:1d:d5:ec:03:41:e1:f0:42:c3:ae:7f:e3:75:
         e1:36:e9:d5:cf:b0:7b:23:2c:f4:e0:06:60:9f:d0:17:00:bb:
         72:d5:3a:7e:7b:9f:df:cb:33:f2:bd:54:63:38:91:ca:ec:00:
         e2:71:81:19:cf:da:30:0d:37:45:5c:0a:2c:bc:3e:8d:0c:43:
         4a:ef:00:90:12:4d:98:e9:b3:cc:b3:25:8b:a7:46:b7:17:4a:
         f7:18:2d:04:17:54:d5:6a:80:41:5d:85:f3:0c:d2:ab:6f:92:
         3d:fb:f3:3d:d5:55:a0:3a:a0:6d:58:7c:5e:b3:e1:01:7f:64:
         21:13:4d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org