Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/SeWKKV_d8_BelTgIAzGtQ0MizzM.roa
File:                     SeWKKV_d8_BelTgIAzGtQ0MizzM.roa (raw, json)
Hash identifier:          +fTlLyLUV5fgolzkc6Axi/2Eb2re2RToj4/bp/zFxNI=
Subject key identifier:   49:E5:8A:29:5F:DD:F3:F0:5E:95:38:08:03:31:AD:43:43:22:CF:33
Certificate issuer:       /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial:       0185711E35973242A72A2B4D7EF4E3C793EA
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/SeWKKV_d8_BelTgIAzGtQ0MizzM.roa
Signing time:             Mon 02 Jan 2023 06:14:43 +0000
ROA not before:           Mon 02 Jan 2023 06:14:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16633
IP address blocks:        185.201.18.0/24 maxlen: 24
                          185.201.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 22 May 2023 16:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:1e:35:97:32:42:a7:2a:2b:4d:7e:f4:e3:c7:93:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
        Validity
            Not Before: Jan  2 06:14:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=49e58a295fddf3f05e9538080331ad434322cf33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b5:6b:0d:a4:eb:bf:67:eb:13:4d:16:63:c6:
                    0e:3f:6c:72:8f:63:ef:04:6b:1e:58:0b:fd:2d:1f:
                    73:30:6d:1f:cb:ad:cf:9f:d3:5f:d6:c0:38:90:f7:
                    03:4b:7e:15:0c:ba:03:df:c4:c9:cb:29:62:b9:95:
                    48:72:ea:75:b2:a3:ff:4a:45:e8:1b:c0:83:70:12:
                    ad:c3:b4:d6:7e:4a:09:44:91:b8:89:8f:96:c6:56:
                    bd:97:18:52:e2:84:ff:7c:bb:25:73:99:c8:51:02:
                    79:c1:47:71:60:66:09:09:38:53:53:a6:46:8b:86:
                    73:0c:4e:f9:fa:1f:2b:3c:01:77:e6:b7:ae:2d:9e:
                    c9:c1:ff:1a:b1:17:cf:0d:da:32:44:b2:3d:01:d4:
                    1b:25:52:c9:fa:f8:6c:8b:4c:c2:81:ce:6f:69:74:
                    10:52:0a:b8:d5:73:72:fc:2b:5a:5a:b2:fb:a7:9b:
                    f9:7b:70:23:bb:5c:d5:65:d7:d8:7c:2b:8c:43:27:
                    cc:1b:5d:b7:a9:3f:8c:db:5d:7f:90:10:16:d8:48:
                    e7:4c:db:e1:3a:16:9a:2f:1a:b6:1f:1e:b0:d8:d2:
                    f3:be:20:85:50:e8:28:07:77:90:6e:57:dc:eb:d0:
                    d3:f9:de:7e:92:4a:af:f9:47:cc:a0:8d:53:fa:16:
                    d5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E5:8A:29:5F:DD:F3:F0:5E:95:38:08:03:31:AD:43:43:22:CF:33
            X509v3 Authority Key Identifier:
                keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/SeWKKV_d8_BelTgIAzGtQ0MizzM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.201.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:6f:4c:50:2f:fd:f4:e6:24:99:2f:20:29:9a:2a:3d:49:21:
         82:5d:ba:e5:94:5e:53:4f:a7:52:11:65:0f:31:3f:7b:bb:6b:
         ee:c3:a4:a0:a8:03:6b:96:c6:6f:0d:b6:71:7c:76:04:eb:de:
         71:dd:58:89:8f:06:c8:fc:cb:e0:ba:d6:94:14:46:5d:2c:5d:
         fb:be:60:fa:b5:88:93:81:46:14:f0:40:58:fa:cd:95:b9:fd:
         d6:9e:01:38:c9:e3:78:12:4b:29:ea:d9:bf:d5:cc:01:fb:69:
         64:56:fd:cf:0a:d5:fe:ee:d9:04:3b:d9:60:66:95:86:13:f2:
         5f:4b:8a:d0:70:56:20:71:45:57:9d:87:dd:bc:a2:09:20:b3:
         4f:66:53:08:46:73:2c:f7:8b:18:86:61:fe:9b:06:7a:d2:90:
         f2:85:41:76:10:81:d2:ba:a5:84:ba:cd:23:5a:01:b4:37:36:
         5d:7b:36:52:0d:d5:2a:e7:9a:7f:66:5b:b9:d6:a6:40:0b:fa:
         23:d6:f5:65:2c:b1:24:d3:51:2d:b5:60:ce:cb:e0:e0:53:30:
         a9:89:f9:ae:74:6a:dd:9e:10:d2:42:75:2d:b8:36:a8:57:5b:
         f0:1c:36:2b:f0:e0:82:56:0c:9b:2c:42:e9:2e:16:6f:04:1c:
         2f:f4:ec:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:18 2024 by rpki-client on console-fra.rpki-client.org