Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/7Rau56dsl4geyoE4bnWLImvyK1E.roa
File:                     7Rau56dsl4geyoE4bnWLImvyK1E.roa (raw, json)
Hash identifier:          NDrak/Lc2j2JrOAf3ZCp03MBpDiPptyzpLBTY6bMMSk=
Subject key identifier:   ED:16:AE:E7:A7:6C:97:88:1E:CA:81:38:6E:75:8B:22:6B:F2:2B:51
Certificate issuer:       /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial:       0188009E87A3664DE88CA29AF31C5092D6A8
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/7Rau56dsl4geyoE4bnWLImvyK1E.roa
Signing time:             Tue 09 May 2023 13:06:09 +0000
ROA not before:           Tue 09 May 2023 13:06:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206119
IP address blocks:        185.202.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 09 Jun 2023 13:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:00:9e:87:a3:66:4d:e8:8c:a2:9a:f3:1c:50:92:d6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
        Validity
            Not Before: May  9 13:06:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ed16aee7a76c97881eca81386e758b226bf22b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:06:1e:fb:54:2a:1e:7f:26:b8:bf:f3:e5:f8:
                    35:64:4e:67:e8:96:53:46:23:24:10:a0:49:c9:18:
                    d0:13:5b:eb:13:33:d2:0c:be:57:d6:2c:44:6f:cf:
                    38:8b:55:df:71:22:06:19:18:43:00:33:9d:44:e4:
                    f0:57:46:8e:b3:e9:24:4f:a8:f2:b8:73:b1:15:e2:
                    0f:aa:72:48:20:29:54:af:7c:fd:b7:db:c4:5b:c8:
                    9a:3b:0d:d6:bd:7f:ab:69:f2:43:10:b7:c0:25:7f:
                    dd:4a:d7:0c:8d:80:02:fb:76:dd:7c:ea:24:09:e9:
                    c8:dd:da:95:85:0d:11:5a:55:17:46:27:a1:a5:fe:
                    ff:a9:b8:3c:a7:0e:8e:c3:97:31:2a:c1:17:b8:87:
                    72:bd:82:c3:79:6d:11:d5:64:8e:31:e0:9c:4c:1a:
                    d7:28:cb:24:33:1d:12:3f:1b:aa:ac:f9:9a:a2:33:
                    9a:f3:85:d5:37:ea:d2:c7:d9:8d:74:1e:9b:f7:d1:
                    3f:d5:80:b2:52:f7:20:b6:1c:f8:ed:e4:ff:a5:ed:
                    cc:a5:c0:b3:10:3f:c6:22:f5:3c:89:a5:d8:9a:8d:
                    3d:1e:51:4c:ba:52:31:58:08:9d:c5:db:14:16:72:
                    8d:b3:c4:e6:54:3d:d7:0b:71:30:6f:5c:a0:33:2a:
                    58:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:16:AE:E7:A7:6C:97:88:1E:CA:81:38:6E:75:8B:22:6B:F2:2B:51
            X509v3 Authority Key Identifier:
                keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/7Rau56dsl4geyoE4bnWLImvyK1E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:49:51:97:ba:d3:b4:ce:67:29:ad:43:37:a6:87:22:7d:16:
         9a:79:81:a1:32:7e:f1:c8:fa:d6:59:19:b9:db:0e:a9:e0:8c:
         a3:24:bf:66:e6:e6:aa:85:f2:0f:85:c3:9c:a1:1e:be:8c:fb:
         bd:fd:c7:7a:03:8d:cd:a6:ec:fa:be:f1:2f:3b:95:f8:13:52:
         f9:41:3f:7b:e2:b4:61:dc:0d:94:b3:4c:fb:2e:d0:2c:25:dd:
         84:09:71:5a:fa:3e:28:49:a6:25:e3:d9:c8:e2:e8:14:a2:dd:
         74:e0:b7:08:00:18:0b:c3:36:d5:f1:f2:85:03:c2:90:ce:fa:
         a5:60:d3:33:bc:42:00:6a:93:93:4a:15:a2:8a:82:3d:87:df:
         a0:b2:25:ee:fa:e7:3d:fa:38:e1:85:b0:a2:cd:bf:8e:68:19:
         fd:c3:a7:93:89:3d:c1:94:f2:e2:1f:e0:fb:7b:0a:8e:70:49:
         9a:00:57:c2:f8:4e:70:ff:55:70:2e:d6:4e:58:f1:e4:66:c4:
         df:d1:de:f4:d0:57:0e:c8:f9:32:1d:23:8a:d8:89:c6:dd:ac:
         e3:d9:27:23:cf:75:24:ba:08:2f:e5:92:80:8f:bc:47:51:04:
         ad:a9:ac:a5:c0:2f:dd:15:01:85:33:e2:81:60:97:45:25:e6:
         e2:e1:18:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:14 2024 by rpki-client on console-ams.rpki-client.org