Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/SeG882MvBj-L0N6l9lVBWY09m60.roa
File:                     SeG882MvBj-L0N6l9lVBWY09m60.roa (raw, json)
Hash identifier:          0os9DzWyiyz1JHsoaxRbIMnRyZo9nx7dT8CyYbrWeBc=
Subject key identifier:   49:E1:BC:F3:63:2F:06:3F:8B:D0:DE:A5:F6:55:41:59:8D:3D:9B:AD
Certificate issuer:       /CN=252a182d91f456d850210dbf72da7e475fbf3c08
Certificate serial:       018572D5C26CD11D02C2916BEFA7F8155781
Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/SeG882MvBj-L0N6l9lVBWY09m60.roa
Signing time:             Mon 02 Jan 2023 14:14:49 +0000
ROA not before:           Mon 02 Jan 2023 14:14:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203150
IP address blocks:        185.73.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:d5:c2:6c:d1:1d:02:c2:91:6b:ef:a7:f8:15:57:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08
        Validity
            Not Before: Jan  2 14:14:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=49e1bcf3632f063f8bd0dea5f65541598d3d9bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:af:9c:74:91:1d:4a:07:51:85:c9:41:7a:46:
                    6b:7b:07:83:af:0e:3e:77:c4:b1:b2:35:dc:65:e3:
                    fc:a3:d6:db:f9:03:d8:de:77:34:91:fb:c5:56:46:
                    1d:d3:eb:64:a6:65:63:92:72:06:ca:23:c1:e4:c0:
                    91:e8:b8:65:f7:28:27:96:fc:bc:17:6a:f6:8f:bc:
                    cd:c0:77:c0:9b:18:fd:94:c3:eb:3b:c7:14:5c:a2:
                    98:9f:c9:62:68:a3:cc:a1:0f:47:42:07:59:ed:77:
                    67:61:8b:93:d4:cc:40:3f:5e:8c:21:88:a2:d8:11:
                    d0:e1:27:53:d8:df:2c:ef:51:bd:64:ef:d0:6e:0b:
                    f6:ab:72:87:cf:5f:55:0c:d9:4a:6e:c3:d0:54:90:
                    ea:8a:ba:c0:04:ca:0d:8b:e3:5d:29:33:11:dd:ab:
                    14:29:15:46:88:f7:d9:5b:cb:16:ec:c6:9d:f2:e2:
                    eb:7c:2f:80:08:0e:82:e7:38:50:22:84:ff:87:79:
                    17:9a:7c:b1:9e:ff:2f:b7:2d:04:f6:49:16:70:0f:
                    b8:c8:00:bb:c5:fb:c6:55:52:1c:49:da:d6:91:49:
                    a9:fd:bb:ce:15:4c:ed:62:f5:1e:4c:13:57:70:b8:
                    b3:92:58:cf:df:5e:6a:a2:20:2c:a6:5c:4e:2b:ff:
                    2e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E1:BC:F3:63:2F:06:3F:8B:D0:DE:A5:F6:55:41:59:8D:3D:9B:AD
            X509v3 Authority Key Identifier:
                keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/SeG882MvBj-L0N6l9lVBWY09m60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.73.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:77:15:1e:7e:e5:7f:0b:d9:51:92:f4:ac:d4:72:67:57:4f:
         39:ae:40:ce:ba:19:c5:3b:55:48:41:df:ea:92:14:3e:2d:48:
         d2:22:e0:39:02:2b:aa:e4:b0:3f:a7:41:00:5a:00:e0:ae:7a:
         d1:4e:8a:7d:9e:9d:3e:ed:74:b2:1a:da:51:d4:ee:b9:ef:e0:
         2a:87:67:93:43:22:9b:83:9d:0b:d9:69:fc:36:04:c2:7b:58:
         91:91:72:e0:7d:da:b9:bf:d1:55:ea:71:ec:b7:7d:aa:43:0e:
         c7:41:b0:d4:bb:5a:21:50:10:ea:07:4a:e0:91:99:9a:f0:22:
         50:bb:b3:dd:7a:95:a2:fe:44:1b:3c:d1:61:e4:ba:a1:5b:07:
         88:75:ef:e2:ec:5e:1c:a9:e1:09:0f:8c:42:f7:67:00:84:0b:
         0a:3c:fe:8b:14:dd:98:dc:81:c3:ec:0c:ca:6b:f1:1f:42:8b:
         29:74:6f:ec:44:18:d1:53:4e:82:d5:1d:76:22:11:3b:72:c6:
         71:e9:36:54:70:5f:bd:c4:d8:6e:3e:79:9f:c8:f4:9d:7f:82:
         fa:66:5b:55:6d:0a:9e:21:0d:85:6c:e1:7e:0e:9f:a0:3f:ac:
         12:2e:d9:67:22:fa:5f:09:7f:99:0c:21:2b:fa:ae:eb:e2:04:
         19:1b:d8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:10 2024 by rpki-client on console.sobornost.net