Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/uAvkKd-JNcqZ86o0cIUwrsNYDkE.roa
File:                     uAvkKd-JNcqZ86o0cIUwrsNYDkE.roa (raw, json)
Hash identifier:          HK84HRVntcqsS3D7jnOKnJ/Kdbr4S3Wzt/+/XD+Tstw=
Subject key identifier:   B8:0B:E4:29:DF:89:35:CA:99:F3:AA:34:70:85:30:AE:C3:58:0E:41
Certificate issuer:       /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial:       0185B0621DC6D19753828550D81804289538
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/uAvkKd-JNcqZ86o0cIUwrsNYDkE.roa
Signing time:             Sat 14 Jan 2023 13:04:58 +0000
ROA not before:           Sat 14 Jan 2023 13:04:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34918
IP address blocks:        185.126.8.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Wed 14 Jun 2023 05:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:b0:62:1d:c6:d1:97:53:82:85:50:d8:18:04:28:95:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
        Validity
            Not Before: Jan 14 13:04:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b80be429df8935ca99f3aa34708530aec3580e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:51:91:5a:1c:d4:df:2b:63:fb:cc:27:81:f5:
                    2d:cc:2f:70:a5:92:76:40:be:cd:73:68:7f:45:f9:
                    15:66:b3:de:53:50:6a:d6:ca:df:47:b2:97:09:09:
                    4e:5a:a9:14:23:42:b4:05:5d:ee:f7:10:87:83:d5:
                    ac:8f:a4:38:3c:48:0e:2f:72:02:03:d6:76:ab:16:
                    fb:fc:37:2d:ae:bc:95:d0:52:21:ba:da:ce:64:1a:
                    85:62:e0:cc:0e:8c:9d:2e:75:15:72:84:2f:91:bb:
                    5c:7b:38:74:1a:68:de:a1:05:6f:b1:f2:4b:d8:e4:
                    6c:a1:f0:0a:ee:2f:7e:cf:d8:e7:71:73:7f:2f:38:
                    dd:ba:bb:b5:00:c8:b8:33:ff:a8:e0:a5:07:c2:51:
                    da:c3:46:1a:08:68:54:62:92:11:ed:43:c8:7d:58:
                    ad:11:ca:39:8c:ad:da:29:0a:d9:16:de:ad:4c:86:
                    25:f1:97:96:c0:a5:c1:74:59:a7:35:95:34:cd:67:
                    2d:24:d3:61:d4:c2:9b:5d:3c:16:dd:62:03:fc:4c:
                    ac:ac:71:76:e9:cc:b2:e1:e2:70:f2:64:67:8f:1d:
                    dd:c7:2c:fb:f1:67:73:fb:88:84:ea:19:fe:38:8a:
                    12:8d:1d:f2:ad:80:35:96:b9:e7:55:f4:0f:b3:0c:
                    fa:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0B:E4:29:DF:89:35:CA:99:F3:AA:34:70:85:30:AE:C3:58:0E:41
            X509v3 Authority Key Identifier:
                keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/uAvkKd-JNcqZ86o0cIUwrsNYDkE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.126.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2a:4f:08:75:b0:b7:1c:61:fe:bc:3d:44:a5:82:06:a1:94:fb:
         1c:9d:30:d9:64:b0:87:65:a0:66:72:c1:2a:08:b7:2d:5e:96:
         a0:22:86:3b:22:73:f0:f9:fc:03:d4:54:a4:ea:6b:3c:4c:97:
         15:31:91:68:81:66:ef:01:7a:e7:d1:43:c9:8e:7e:eb:1a:7d:
         a8:a6:9d:fc:4f:8e:c9:92:69:90:73:6e:bc:2f:2d:0d:a2:47:
         76:c1:e6:9a:ce:ac:81:5b:15:d8:df:06:34:30:7a:0c:74:1d:
         06:94:3d:ee:fc:1c:a6:12:c4:00:e4:60:e0:5c:93:e7:6e:45:
         35:fd:ec:a6:19:d2:40:30:36:25:85:ee:d7:7b:99:59:b6:a2:
         71:c7:6f:6b:5b:0c:61:54:dd:cb:4b:d6:18:2f:9e:0c:77:fb:
         23:fb:6e:ae:15:90:61:e0:1f:67:6d:a8:ad:c5:b4:f8:68:21:
         c9:53:08:b0:46:4e:ff:cd:b2:ee:79:57:b5:f1:e0:60:28:18:
         0e:9d:d2:bb:1a:4b:86:b6:08:3b:c6:52:d9:ef:1a:d7:68:a4:
         f2:6f:19:d0:5b:06:a9:1a:96:30:b4:76:fc:87:7f:69:3a:da:
         f8:e1:ee:ee:cc:9a:b0:9d:6c:9b:c2:7e:88:48:22:af:5c:14:
         b9:f0:28:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:34 2024 by rpki-client on console-ams.rpki-client.org