Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/wFVHyU4zTTgYFVQVOWrDdK04BRk.roa
File:                     wFVHyU4zTTgYFVQVOWrDdK04BRk.roa (raw, json)
Hash identifier:          Hp8PHIMn3oO7WdH8z70CQQAJ+yZtuhh6NVF58uVx3PE=
Subject key identifier:   C0:55:47:C9:4E:33:4D:38:18:15:54:15:39:6A:C3:74:AD:38:05:19
Certificate issuer:       /CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Certificate serial:       01856BDC63C5FCD3BFAF6FC7A2A3C53956C8
Authority key identifier: E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/wFVHyU4zTTgYFVQVOWrDdK04BRk.roa
Signing time:             Sun 01 Jan 2023 05:44:43 +0000
ROA not before:           Sun 01 Jan 2023 05:44:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205594
IP address blocks:        185.81.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:33:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:dc:63:c5:fc:d3:bf:af:6f:c7:a2:a3:c5:39:56:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
        Validity
            Not Before: Jan  1 05:44:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c05547c94e334d3818155415396ac374ad380519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:89:f6:7c:d8:0e:39:fb:28:a6:8d:70:79:
                    a9:0a:81:81:b1:a1:4c:06:8c:7e:19:7f:ab:b2:5f:
                    85:30:78:7c:07:72:e3:77:6d:fe:35:9e:3c:12:30:
                    7c:ca:a7:59:37:6b:4a:fc:ee:22:44:ac:a8:d1:df:
                    9a:5f:50:f5:df:43:26:a9:6c:b3:87:f4:2b:1c:86:
                    0b:26:c5:57:2d:ed:69:2f:d1:a9:7c:8e:86:c1:fc:
                    67:65:51:c7:a7:95:e0:95:80:33:7a:cd:65:05:7b:
                    32:6f:09:7c:98:7a:0e:e9:2b:6b:f4:28:e3:64:9a:
                    3c:49:96:07:51:0e:b6:c4:f2:7a:78:d8:85:39:c6:
                    18:4c:7f:93:52:dc:26:ad:87:a3:dd:f9:ff:58:d2:
                    2b:97:a3:08:5f:2a:99:b9:e7:ac:35:b2:01:3e:48:
                    2d:97:c1:1d:e6:ac:52:4b:45:b7:f1:5c:f1:84:6c:
                    76:66:52:db:cc:d5:26:4b:74:53:97:65:76:2e:43:
                    41:26:ba:ed:ee:73:6b:0f:07:c8:e0:ee:47:3a:0b:
                    40:62:07:05:0c:47:f2:0d:fb:90:bd:85:aa:92:b1:
                    a2:97:10:2d:22:1f:c0:f1:89:76:35:a1:e3:ae:f7:
                    2b:fc:d7:4f:0b:e7:19:67:34:a8:ca:6b:8c:04:2b:
                    92:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:55:47:C9:4E:33:4D:38:18:15:54:15:39:6A:C3:74:AD:38:05:19
            X509v3 Authority Key Identifier:
                keyid:E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/wFVHyU4zTTgYFVQVOWrDdK04BRk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:a9:99:aa:35:38:9e:7a:0e:3f:c0:ae:6d:75:a6:0b:a9:5e:
         45:ec:b4:ac:7e:df:0c:cb:70:9e:f5:ad:13:9c:ae:3c:d3:70:
         14:aa:d9:10:d6:25:d7:0f:89:13:fa:62:89:c8:a7:c4:a4:8a:
         66:e1:98:69:70:c0:02:5b:4f:c8:a3:3e:de:5d:66:f8:8b:03:
         99:97:4c:c0:9a:56:10:ca:db:5b:6a:80:2e:a5:20:c8:e2:be:
         78:a4:68:cd:51:40:ed:29:45:b6:88:7c:4f:17:fd:b2:0e:d9:
         eb:4e:4d:35:55:28:1c:3f:13:f9:f5:0a:ac:15:d0:c5:e6:0d:
         53:9d:73:da:2a:90:98:68:4f:ea:98:a9:e8:86:fd:ea:95:8e:
         81:55:9b:28:d0:2f:60:88:c4:b0:e9:2d:ac:bf:44:68:63:30:
         61:4c:69:da:9e:13:dc:88:bc:a4:98:f4:8f:57:b7:3b:9d:a9:
         7a:d6:32:88:96:70:5d:d4:de:49:ae:4f:d4:94:3c:e3:d2:8e:
         cb:84:23:3c:99:da:59:9e:3b:c0:43:75:c5:b6:59:ce:ac:aa:
         ed:85:65:ce:26:1d:df:2d:19:74:c2:23:d1:6a:88:06:07:03:
         72:63:16:7f:4e:6f:c6:ac:b8:b9:fa:94:a5:41:5b:88:81:e3:
         57:bc:30:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:16 2024 by rpki-client on console-ams.rpki-client.org