Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/dqkoGGzhJu8gGCVspcyh1BLGNhU.roa
File:                     dqkoGGzhJu8gGCVspcyh1BLGNhU.roa (raw, json)
Hash identifier:          +sz1N2DVgflcOh7vsMJy97JJSRss+eNQ2LAiMiWJYw4=
Subject key identifier:   76:A9:28:18:6C:E1:26:EF:20:18:25:6C:A5:CC:A1:D4:12:C6:36:15
Certificate issuer:       /CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Certificate serial:       01856BDC633CB40D1295DEB6567BA42791A8
Authority key identifier: E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/dqkoGGzhJu8gGCVspcyh1BLGNhU.roa
Signing time:             Sun 01 Jan 2023 05:44:43 +0000
ROA not before:           Sun 01 Jan 2023 05:44:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205136
IP address blocks:        185.81.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:33:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:dc:63:3c:b4:0d:12:95:de:b6:56:7b:a4:27:91:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
        Validity
            Not Before: Jan  1 05:44:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=76a928186ce126ef2018256ca5cca1d412c63615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:de:42:89:2b:a9:d2:cd:9a:3e:ef:c6:b6:0c:
                    1f:0d:07:d1:38:40:e3:a5:f9:f7:a4:0e:ea:96:02:
                    59:9c:9e:ab:9e:19:20:5f:72:6c:84:82:a2:c2:dc:
                    03:65:f2:42:be:67:2d:c5:f7:2a:97:d5:3a:86:ef:
                    42:e7:cf:c7:f6:97:c9:67:6a:15:79:fe:53:d6:c8:
                    38:73:f2:60:ae:8c:4d:19:9a:5a:fe:b3:d4:75:5e:
                    aa:41:e7:6c:6c:a2:bc:e2:81:82:28:31:b2:4a:2a:
                    ec:d6:46:89:78:57:42:26:2d:b4:95:85:22:07:38:
                    40:fa:5e:f8:10:34:9a:ba:7d:b4:27:27:3e:95:16:
                    62:80:81:0c:38:a7:cb:7a:86:96:23:c5:5d:90:0f:
                    3e:22:e8:e8:c5:f9:ec:22:83:eb:29:13:c5:f7:8a:
                    fe:77:d0:b3:1b:09:64:4b:7f:e9:a2:88:52:36:1c:
                    9d:af:7e:62:9d:b8:b2:e2:44:0a:f5:89:84:ca:a6:
                    ea:26:a7:99:0c:25:d6:4d:65:43:6a:ae:92:94:1d:
                    8f:32:99:5b:65:5f:de:d3:c0:ee:61:84:ea:10:75:
                    8d:e7:cd:eb:f6:cb:00:1d:86:8e:1b:27:c2:f3:3d:
                    65:f3:f2:2f:90:d2:37:47:61:38:cc:41:29:73:94:
                    24:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A9:28:18:6C:E1:26:EF:20:18:25:6C:A5:CC:A1:D4:12:C6:36:15
            X509v3 Authority Key Identifier:
                keyid:E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/dqkoGGzhJu8gGCVspcyh1BLGNhU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:ec:12:30:c5:fb:a4:3c:6a:ab:f6:87:33:37:b9:15:33:36:
         eb:d0:2c:94:a5:c9:80:50:ef:85:ed:4e:fd:75:76:93:02:f7:
         e4:65:80:9c:55:2e:2d:f3:11:3f:b9:b4:26:3d:f2:00:06:1e:
         b9:49:ce:51:69:93:95:3b:26:9e:83:78:ed:9d:34:db:58:9c:
         ae:3f:51:3b:17:87:c3:fe:a0:63:2d:5f:d9:94:7d:44:46:0f:
         56:4f:00:62:ba:92:e8:a1:d1:98:6e:06:91:63:b9:ea:6e:73:
         a9:5b:15:03:a6:c2:93:9d:3c:a8:4c:2f:c5:f8:a9:c7:92:b3:
         0f:70:76:4d:1a:41:bd:3b:ff:e2:c2:6a:9a:22:6f:4d:63:f2:
         00:2e:91:8f:89:52:b2:c9:c9:6b:10:b8:2b:d1:38:b9:36:6e:
         bb:26:0a:9d:a8:50:d7:2d:24:5e:f9:13:b2:00:af:ed:2e:00:
         55:48:38:00:d4:20:c2:12:44:9a:c5:3f:7d:5d:30:23:22:09:
         d6:ad:0d:77:7e:ac:d9:d4:f6:95:9b:ed:7c:f0:13:08:cd:b2:
         46:38:f2:07:cd:8a:01:27:90:73:59:06:c4:3a:25:23:57:bd:
         78:a8:27:a4:37:87:bb:c0:5a:b1:ec:ee:9d:60:95:49:a1:29:
         31:83:f7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:10 2024 by rpki-client on console-fra.rpki-client.org