Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/9aPrnJMRZOfWZxSP5R9Zl1wXibk.roa
File:                     9aPrnJMRZOfWZxSP5R9Zl1wXibk.roa (raw, json)
Hash identifier:          kqjPdEGFHNb7qwaUAm2oJpj58GZhLvQwveDw5d5mSqg=
Subject key identifier:   F5:A3:EB:9C:93:11:64:E7:D6:67:14:8F:E5:1F:59:97:5C:17:89:B9
Certificate issuer:       /CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Certificate serial:       0187B417A5EBC0088D1B750C93041E18D7E4
Authority key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/9aPrnJMRZOfWZxSP5R9Zl1wXibk.roa
Signing time:             Mon 24 Apr 2023 16:27:41 +0000
ROA not before:           Mon 24 Apr 2023 16:27:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3257
IP address blocks:        185.135.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 24 Apr 2023 17:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b4:17:a5:eb:c0:08:8d:1b:75:0c:93:04:1e:18:d7:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e644e2983c5c504d800f2d0582b182ebabf2487
        Validity
            Not Before: Apr 24 16:27:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f5a3eb9c931164e7d667148fe51f59975c1789b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1a:21:98:98:e2:3a:a4:97:f4:c8:c8:47:8b:
                    e1:9f:98:cc:bf:10:be:89:5f:2f:79:88:ee:b1:66:
                    9a:49:ca:6f:39:ab:17:d8:3f:0e:72:ff:ad:f6:ca:
                    b3:84:fd:4c:1d:e9:f7:22:8b:f5:e2:fd:aa:77:3f:
                    bb:01:6b:bd:f7:0d:5d:19:53:98:d4:dc:8b:df:96:
                    dc:4e:ed:f0:e6:ee:ad:8f:b9:ff:7f:ce:34:66:de:
                    d7:f9:d7:48:05:c5:fb:79:20:75:c5:2e:34:f1:67:
                    7d:05:e3:f9:bf:5f:65:b5:69:3e:1c:3d:27:5b:34:
                    80:9d:c3:13:e7:24:16:22:b6:53:23:02:51:df:2c:
                    9a:3a:08:bd:dc:53:7c:cb:b5:0c:44:08:f6:31:e8:
                    eb:a4:7f:3a:5d:f1:09:c4:4c:e7:04:6f:69:0a:6e:
                    a8:df:74:54:6f:3c:ac:0a:e1:3f:3d:dc:aa:fb:1b:
                    cd:6b:fc:e6:68:e4:d5:ff:ae:2f:57:57:c3:6f:87:
                    83:8a:60:a0:74:8c:67:85:32:63:4d:92:dd:99:17:
                    ff:4b:47:53:ff:cb:35:0d:f2:eb:4e:1e:cd:9d:3b:
                    51:38:62:d4:d4:20:ea:90:26:9a:26:30:cb:ad:00:
                    d4:ab:b0:a0:18:2e:b0:16:77:55:19:78:6d:4d:cf:
                    1a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A3:EB:9C:93:11:64:E7:D6:67:14:8F:E5:1F:59:97:5C:17:89:B9
            X509v3 Authority Key Identifier:
                keyid:4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/9aPrnJMRZOfWZxSP5R9Zl1wXibk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:d8:62:6e:64:3c:00:7e:58:91:9d:4a:67:d0:91:13:43:4e:
         e8:1a:67:75:a7:80:72:e0:c0:cb:ed:81:a1:fc:85:3e:76:79:
         08:c1:c9:d0:34:06:2e:96:45:05:2a:6f:49:f2:76:38:f7:77:
         6f:70:cf:1a:6a:b3:6a:f8:0c:12:eb:86:49:17:1a:bf:49:e6:
         5b:2e:c7:d0:d3:3f:8c:a7:cd:70:34:4f:35:d6:f4:17:2f:17:
         f3:7c:29:b2:80:af:b8:51:06:59:04:69:b0:ff:7f:66:0b:a0:
         97:ca:d9:1b:21:85:41:bd:b5:8c:6b:e0:1b:05:f7:0b:c1:09:
         f8:e2:6c:f7:63:50:d9:01:f8:1e:92:3d:ff:dc:3a:06:23:08:
         07:2f:25:43:88:9e:72:12:37:e9:b4:af:89:24:38:d1:d7:8c:
         eb:eb:a7:7e:50:23:20:c5:46:ff:90:7c:a4:7f:01:36:4f:00:
         b9:f5:e6:d4:35:c6:11:65:67:76:ff:8c:c9:3e:27:51:6b:07:
         ab:9a:17:3a:af:bf:14:51:28:1a:18:c0:28:be:e1:f2:5d:aa:
         b5:b6:50:aa:54:66:8d:fb:d9:48:90:b6:fc:51:46:c6:96:2b:
         3f:8d:6e:05:bf:cd:1e:e3:49:7a:44:61:a8:d2:bb:d7:98:44:
         99:d9:eb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:05 2024 by rpki-client on console-ams.rpki-client.org