Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/dpJELhZa11Fr15aJKCnlBybXO6k.roa
File:                     dpJELhZa11Fr15aJKCnlBybXO6k.roa (raw, json)
Hash identifier:          fvouWtq0oJ1K6Q0VZF3yT7Ulzfnl7wTkXxuwPPXkqDM=
Subject key identifier:   76:92:44:2E:16:5A:D7:51:6B:D7:96:89:28:29:E5:07:26:D7:3B:A9
Certificate issuer:       /CN=4df92658601094ed64985c64c6952be3416301ce
Certificate serial:       0188423932EBA15CC7D170BA11D7E05EF017
Authority key identifier: 4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/dpJELhZa11Fr15aJKCnlBybXO6k.roa
Signing time:             Mon 22 May 2023 06:50:24 +0000
ROA not before:           Mon 22 May 2023 06:50:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56376
IP address blocks:        185.139.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:42:39:32:eb:a1:5c:c7:d1:70:ba:11:d7:e0:5e:f0:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4df92658601094ed64985c64c6952be3416301ce
        Validity
            Not Before: May 22 06:50:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7692442e165ad7516bd796892829e50726d73ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3c:c5:73:9b:fb:dd:8e:67:5f:44:9e:41:17:
                    4c:18:09:1b:da:b9:9a:60:3f:54:07:8c:6a:67:b4:
                    20:66:56:eb:c4:d8:e8:7b:03:a6:0c:c2:e2:5e:b2:
                    66:35:06:7c:31:9b:4a:9f:48:fd:91:0d:64:bb:9e:
                    46:76:75:fe:51:33:3f:cb:e0:fe:2b:8a:c1:1a:71:
                    af:74:8b:c5:80:b0:4f:a8:c1:46:79:8d:a4:3d:ea:
                    6c:b4:fd:37:3e:e6:ed:a1:ca:a8:8e:82:fd:75:10:
                    f9:dd:9b:cb:7c:da:fe:37:ca:7c:86:20:bb:d0:3b:
                    ca:3f:f4:4b:26:e9:dc:4a:84:1e:3f:ba:46:c1:81:
                    5a:51:9c:93:c9:8c:2e:3f:96:41:d8:56:47:ea:d9:
                    50:dc:77:b9:6e:17:d6:9d:f2:05:11:00:c5:ce:e7:
                    90:17:8a:57:85:16:4d:2d:39:87:62:37:fd:9e:f1:
                    11:7f:d5:f4:15:e6:61:f6:a1:15:25:56:14:77:99:
                    b9:ee:7b:2e:a5:37:e6:4e:4e:fc:6c:c3:19:3e:6b:
                    78:ba:72:32:14:33:c4:9e:57:f6:3e:6f:09:03:72:
                    c6:b2:33:6c:54:c7:d4:3a:c7:63:2e:7e:eb:43:f9:
                    79:2c:3d:8f:ac:33:64:cd:92:f6:f9:3a:dd:1d:dc:
                    21:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:92:44:2E:16:5A:D7:51:6B:D7:96:89:28:29:E5:07:26:D7:3B:A9
            X509v3 Authority Key Identifier:
                keyid:4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/dpJELhZa11Fr15aJKCnlBybXO6k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:6f:ff:98:22:18:6a:3b:ca:6f:1e:b9:5c:fc:09:72:90:a4:
         78:9b:4f:3b:e9:52:a2:b0:e4:8d:96:0f:f5:a4:0c:e8:c9:ca:
         9a:87:f1:b9:f3:e7:6b:81:e9:7f:d3:8b:03:3d:57:60:2e:dc:
         e0:e8:9a:af:60:53:0b:dd:31:e7:6e:ec:4a:77:ba:a2:31:38:
         70:0e:f7:81:aa:66:fa:0c:65:3e:51:49:ca:8d:f8:f3:e4:27:
         8f:3e:ae:d7:6c:db:5e:17:8f:2f:03:35:bc:7b:d9:07:f4:61:
         e9:ff:7d:fc:7b:9d:d6:f7:39:e3:df:47:f1:02:ad:2b:dd:0b:
         dc:4d:77:ac:d0:53:4a:68:c1:09:b8:fa:0d:b7:25:38:67:a1:
         93:2e:86:20:a3:83:43:c8:f2:4a:ab:fa:0f:ad:78:2d:4b:52:
         c8:ec:fb:e4:78:29:51:22:82:23:32:86:da:72:c4:dc:75:83:
         ea:a4:c9:6a:b7:70:3e:20:54:09:6b:00:0e:24:04:f3:54:99:
         60:74:15:8c:4e:83:1d:30:33:33:ee:e7:e3:1e:b6:bd:71:d7:
         9e:08:8b:7c:0c:28:e8:98:91:c5:8e:5b:50:c3:a5:7b:2d:68:
         ea:08:5d:c3:68:0a:00:ff:cf:4c:d6:a0:34:f7:c5:74:9f:e9:
         b1:df:e6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:02 2024 by rpki-client on console-ams.rpki-client.org