Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/hGCMi4UIhRkv3ZO5ijz2QuAtrXI.roa
File:                     hGCMi4UIhRkv3ZO5ijz2QuAtrXI.roa (raw, json)
Hash identifier:          fy9g/+14dlFLCqMj7xxC0tcs5i9x0dfVllJaU2vjLgY=
Subject key identifier:   84:60:8C:8B:85:08:85:19:2F:DD:93:B9:8A:3C:F6:42:E0:2D:AD:72
Certificate issuer:       /CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Certificate serial:       0185729EE51C00952CD684DCA8D96414B3D8
Authority key identifier: 8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/hGCMi4UIhRkv3ZO5ijz2QuAtrXI.roa
Signing time:             Mon 02 Jan 2023 13:14:54 +0000
ROA not before:           Mon 02 Jan 2023 13:14:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204955
IP address blocks:        185.234.192.0/22 maxlen: 27

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:9e:e5:1c:00:95:2c:d6:84:dc:a8:d9:64:14:b3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e3088ee71cb6815990dc24867b4a0e31968000f
        Validity
            Not Before: Jan  2 13:14:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=84608c8b850885192fdd93b98a3cf642e02dad72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c1:18:6c:64:3a:27:34:d1:8e:7f:bc:50:24:
                    d1:f0:98:9c:be:60:41:6f:bd:21:61:8b:83:ad:9a:
                    40:29:e6:e3:ed:69:c1:5f:fe:d8:95:91:9a:bd:f9:
                    1c:50:ba:32:16:61:ce:e6:07:ad:bd:62:6d:3c:e7:
                    ee:fd:60:29:34:b5:76:da:7f:b2:ed:44:7b:16:85:
                    43:f0:a4:61:65:a8:29:ff:bf:6d:58:09:14:9c:65:
                    22:01:8f:df:b5:c4:1e:91:e3:0e:24:74:09:e3:f3:
                    8a:7e:49:a5:35:7c:73:71:3d:cb:be:ca:1e:83:00:
                    54:e8:20:0c:af:b2:08:42:e3:cf:75:44:06:90:0e:
                    39:5e:f0:16:8f:a4:d8:1b:b0:c3:80:b0:09:64:2c:
                    52:07:33:7d:19:b1:3d:5e:a7:71:d6:67:ed:dc:b2:
                    de:56:f5:9b:d9:4c:2d:31:6a:f9:8e:92:59:4e:db:
                    9b:48:07:bd:ba:f3:3b:37:84:ef:85:bc:11:8d:ba:
                    63:3b:f1:de:37:9b:dc:6d:a6:25:30:1e:18:10:b8:
                    61:c3:81:ff:cd:bc:ed:02:9e:42:9e:9a:b8:ad:0b:
                    19:31:c1:c7:6c:56:40:cb:e0:df:da:8f:90:53:a7:
                    aa:26:3c:bd:87:39:5f:61:7b:a2:cd:40:fd:bb:95:
                    38:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:60:8C:8B:85:08:85:19:2F:DD:93:B9:8A:3C:F6:42:E0:2D:AD:72
            X509v3 Authority Key Identifier:
                keyid:8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/hGCMi4UIhRkv3ZO5ijz2QuAtrXI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:2f:2c:2a:1d:32:af:23:ad:51:0f:97:5e:b5:15:8f:19:e0:
         6b:02:1a:1f:b4:60:2d:c9:97:47:4e:94:70:82:7f:5c:f1:77:
         7f:b1:24:46:6e:a4:fa:8a:1d:b1:24:ed:ba:2d:dc:5e:70:93:
         b2:5c:fa:0b:b8:88:5b:53:b8:9b:42:85:b7:a2:ee:7c:17:93:
         ab:bd:0b:6b:90:92:19:e8:01:97:68:26:c0:23:f1:28:c3:c7:
         17:cb:88:e7:2a:8e:d6:35:3d:1b:9a:74:a2:27:4d:84:32:d7:
         09:7d:1b:5b:0f:a8:0c:63:a8:7b:e9:32:39:43:f2:b2:92:3d:
         fa:00:23:10:c1:2e:65:b2:0f:8d:b1:05:e9:d2:99:48:72:53:
         e2:df:8c:42:7d:b6:af:46:d9:b8:8b:5f:7f:46:ea:93:f0:07:
         49:7b:08:d2:24:bc:2a:91:b9:a3:f4:e7:3f:db:ac:eb:e4:f2:
         68:b0:46:25:f3:3c:8b:6a:9f:cc:2e:c6:3b:ae:ae:5f:d6:03:
         71:46:51:02:4a:3d:ff:f7:16:68:9c:d6:a0:b7:7d:d0:4c:10:
         7a:4b:54:7a:23:78:ca:8f:87:47:8d:4f:e7:47:3e:90:d0:eb:
         57:87:ca:ba:c9:9e:b5:2a:e7:20:fd:70:fd:49:4c:02:31:91:
         c2:f8:4d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:12 2024 by rpki-client on console-ams.rpki-client.org