Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32362e302f32342d3234203d3e203631333137.roa
File:                     3138352e3133392e32362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          9SNwA5a+E81SLgtgOd/IJFFgcFsAJhu/AzqubfrdmBI=
Subject key identifier:   65:99:1A:5D:24:FB:56:E8:98:8C:3E:31:79:B1:A9:47:71:C9:0D:B5
Certificate issuer:       /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial:       4E6ACB650573C9E51C19001EC1560FAD73398E15
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32362e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 08 Nov 2023 09:22:19 +0000
ROA not before:           Wed 08 Nov 2023 09:17:19 +0000
ROA not after:            Wed 06 Nov 2024 09:22:19 +0000
asID:                     61317
IP address blocks:        185.139.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 11 Dec 2023 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6a:cb:65:05:73:c9:e5:1c:19:00:1e:c1:56:0f:ad:73:39:8e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
        Validity
            Not Before: Nov  8 09:17:19 2023 GMT
            Not After : Nov  6 09:22:19 2024 GMT
        Subject: CN=65991A5D24FB56E8988C3E3179B1A94771C90DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:76:93:e6:c5:0f:fa:fb:0e:e0:c0:f5:9d:43:
                    57:fa:d0:a0:91:1e:3b:4e:9e:57:d1:cf:84:78:f8:
                    9c:76:ac:43:27:cb:87:c6:96:12:02:64:64:9b:0d:
                    24:a5:56:22:c7:7a:5c:49:e7:b2:02:b1:68:e9:af:
                    94:f2:ff:fa:4e:60:6a:44:25:91:3a:dc:f7:89:bc:
                    0a:17:83:0c:b0:5b:6f:98:96:f6:e4:f4:ed:2a:00:
                    37:37:64:f4:e2:34:fe:b2:d1:f4:05:6d:e8:7e:c0:
                    63:06:c8:9e:08:44:e9:cc:24:2d:72:94:90:c8:f0:
                    c1:76:c0:45:c3:5e:47:a2:15:f0:1b:bc:ad:21:ab:
                    d3:d9:d4:9e:81:1d:88:ef:b8:38:3a:97:6d:61:79:
                    bd:e1:c7:53:4b:84:68:a7:ff:aa:32:dc:38:c1:f7:
                    45:eb:93:72:6a:cd:f6:e6:9e:be:f1:15:b1:ac:54:
                    a7:2b:4b:60:12:3e:22:b0:15:1a:2c:e6:83:1e:27:
                    ab:c3:e8:da:93:ed:da:03:f5:d0:b0:67:a9:77:0a:
                    9c:9b:a6:01:80:c1:c9:53:99:4c:3a:e6:97:94:00:
                    1a:d3:ce:97:2c:e5:33:23:b5:4f:d1:05:92:da:68:
                    a0:07:a4:46:da:c0:37:ba:1a:4d:cd:de:cc:53:ef:
                    4b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:99:1A:5D:24:FB:56:E8:98:8C:3E:31:79:B1:A9:47:71:C9:0D:B5
            X509v3 Authority Key Identifier:
                keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:c4:e7:21:b2:a7:49:66:11:83:92:4d:f2:ce:f5:5b:52:99:
         fa:88:61:75:5b:c8:ef:2c:27:a3:58:d4:8d:ae:0c:bd:43:28:
         16:ec:a1:61:1f:b8:ac:b0:f6:73:0d:ae:da:ab:0b:a6:ba:ea:
         c9:9b:cb:cf:69:53:bb:dd:f6:45:27:d1:90:2b:9a:17:e3:36:
         4e:b0:49:e2:4f:13:0e:fa:25:3d:48:ed:6c:6c:9b:dc:b0:18:
         f8:30:17:3b:28:73:68:ce:ab:52:fd:52:8f:fb:24:26:19:6f:
         53:10:1b:68:7e:dd:ff:d8:88:d2:bd:53:fb:e4:a6:67:5f:57:
         1e:4f:30:66:f1:06:1c:a3:fb:b5:42:73:88:b2:11:9a:31:62:
         15:76:f9:10:52:92:2e:0e:18:e7:ea:80:30:a2:df:99:69:78:
         7e:78:45:b0:e6:11:8a:17:80:82:f7:41:aa:1b:75:58:1e:17:
         68:3e:a1:6a:fc:97:1b:18:ae:3f:0e:96:2e:fc:37:dc:f1:ca:
         38:f0:91:50:dd:ee:cb:f9:61:58:f5:15:7b:0d:72:7b:8c:ad:
         32:fb:bb:12:be:b1:a4:a3:75:85:12:60:90:97:5e:2d:01:ec:
         dd:f2:2f:c9:f3:33:66:8f:b1:89:8d:69:28:a1:22:ce:ad:e2:
         3c:44:f6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org