Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/pySPsEQQL326WUPJt4dENS7JoEA.roa
File:                     pySPsEQQL326WUPJt4dENS7JoEA.roa (raw, json)
Hash identifier:          QGz9opEefv7m/O9UyDuF2GgRpFmqT0rqiixWZDxQwLg=
Subject key identifier:   A7:24:8F:B0:44:10:2F:7D:BA:59:43:C9:B7:87:44:35:2E:C9:A0:40
Certificate issuer:       /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial:       018C6393965D5A6F402DD9129C631561648B
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/pySPsEQQL326WUPJt4dENS7JoEA.roa
Signing time:             Wed 13 Dec 2023 14:27:45 +0000
ROA not before:           Wed 13 Dec 2023 14:27:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42216
IP address blocks:        185.195.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:63:93:96:5d:5a:6f:40:2d:d9:12:9c:63:15:61:64:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
        Validity
            Not Before: Dec 13 14:27:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a7248fb044102f7dba5943c9b78744352ec9a040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ad:02:2b:0d:9b:82:08:ca:d2:7a:22:fa:08:
                    7b:03:ab:44:e6:eb:3d:27:82:5d:47:38:f8:01:6f:
                    25:ee:03:85:de:31:67:a0:81:47:ef:bb:ec:7f:bb:
                    99:e0:cb:72:37:01:32:fe:01:42:dd:5e:27:32:17:
                    d8:67:30:75:bf:9d:23:11:1b:bb:74:e1:1a:f3:f9:
                    50:f8:e8:68:a4:1c:17:41:99:07:f5:f0:64:c4:d6:
                    4d:e7:7f:d4:27:dd:b7:81:13:95:53:28:0a:d3:6d:
                    25:11:97:81:54:7d:d8:4d:19:f4:11:f6:8e:c6:95:
                    aa:39:10:8a:22:2a:3e:82:8a:2d:50:88:2f:8d:b7:
                    67:a9:9a:b2:2b:3b:ab:15:19:d1:c3:87:65:29:d7:
                    ea:35:43:cb:4f:5c:39:fc:38:72:b2:95:11:53:d5:
                    f2:5a:18:b9:0f:86:95:02:95:75:5e:d0:68:70:7e:
                    00:76:d1:12:84:c6:95:fa:4a:25:ac:bd:93:1d:3a:
                    74:c0:6d:31:00:a1:36:8f:75:32:e8:13:71:04:b2:
                    77:68:46:c6:11:e4:66:db:74:10:47:09:10:e4:e4:
                    2b:f9:28:f9:94:16:95:9b:0c:d5:87:ac:61:1f:e0:
                    52:54:00:cb:78:96:ee:c8:77:60:69:fa:32:67:16:
                    ad:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:24:8F:B0:44:10:2F:7D:BA:59:43:C9:B7:87:44:35:2E:C9:A0:40
            X509v3 Authority Key Identifier:
                keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/pySPsEQQL326WUPJt4dENS7JoEA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.195.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:99:df:53:af:9d:26:08:9a:e3:95:6d:72:63:03:94:db:52:
         26:10:fd:b9:50:57:5f:bb:29:27:29:38:d0:c1:72:f5:0d:dd:
         8c:58:39:b5:f8:f3:c4:19:5e:94:3c:d3:1b:f0:d6:0c:64:98:
         b2:23:85:e8:7f:9b:cd:de:12:ee:05:bb:cd:3a:37:2f:37:3f:
         4b:3a:4f:28:fd:55:10:b3:4d:00:d7:c0:2e:24:f7:1a:a0:80:
         a9:08:d4:ec:93:93:ed:a6:fb:8e:53:63:64:c8:c8:f3:90:ff:
         b7:7b:bc:82:84:45:27:e1:a2:ff:92:d4:1b:da:bd:d8:95:33:
         dd:de:ab:05:6b:6c:45:27:d9:c6:1b:cf:0f:24:5e:78:e4:b5:
         4a:2b:01:af:b4:3d:a7:9c:39:fd:0d:eb:7e:58:ba:0d:27:90:
         b8:54:2f:bc:b7:b6:d4:4e:b4:22:10:95:7a:27:74:fb:b5:5b:
         8d:34:78:4a:68:54:1f:58:77:f0:b4:f4:44:73:44:a1:eb:a2:
         81:26:b5:4e:aa:71:c3:b0:e5:e2:5f:bd:44:51:b3:2d:ec:a9:
         8d:8a:c8:d5:83:95:0b:2e:aa:5d:77:15:60:bb:9a:ab:b6:05:
         16:4d:b8:c7:96:57:14:45:44:ce:6d:7c:db:1a:e3:26:1c:36:
         95:59:c0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:48 2024 by rpki-client on console-fra.rpki-client.org