Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/n18ETaFaD_-dMHVBcdbIle9f_v4.roa
File:                     n18ETaFaD_-dMHVBcdbIle9f_v4.roa (raw, json)
Hash identifier:          ZSy1nTXQK4A40PDJ/3r3NX4k/oD+gEB6d1rLRY4kZ7g=
Subject key identifier:   9F:5F:04:4D:A1:5A:0F:FF:9D:30:75:41:71:D6:C8:95:EF:5F:FE:FE
Certificate issuer:       /CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Certificate serial:       01856DCAD4931DE4A8A8809A6330A26F61E0
Authority key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/n18ETaFaD_-dMHVBcdbIle9f_v4.roa
Signing time:             Sun 01 Jan 2023 14:44:47 +0000
ROA not before:           Sun 01 Jan 2023 14:44:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     21409
IP address blocks:        185.110.64.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:ca:d4:93:1d:e4:a8:a8:80:9a:63:30:a2:6f:61:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
        Validity
            Not Before: Jan  1 14:44:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9f5f044da15a0fff9d30754171d6c895ef5ffefe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:54:61:40:ca:f0:e9:2f:5a:ea:c2:f5:12:c7:
                    79:b2:5d:6e:cf:bf:a3:0f:29:ec:5e:8c:80:22:19:
                    ec:d0:9a:3b:d9:4c:d0:cd:e7:08:7f:91:ed:e3:fe:
                    09:58:b3:52:0d:49:71:c1:ae:0f:1a:17:8d:77:5e:
                    7a:59:58:1e:c7:89:b9:ee:c9:88:1c:15:73:be:30:
                    f4:53:f2:43:ed:6e:d9:42:f8:98:cd:a4:5b:84:b4:
                    d9:81:8c:80:df:39:8b:4c:93:62:95:88:b7:4e:1e:
                    06:43:d7:9e:da:a8:d3:f6:8e:67:85:94:d2:c1:a1:
                    2f:9d:db:de:73:e4:0d:63:52:9d:a3:54:eb:ae:2c:
                    db:76:2b:52:44:48:9e:8e:05:fa:ec:af:f6:85:97:
                    2b:2e:66:4f:98:93:11:27:a2:f5:61:00:e1:f6:4d:
                    ff:0c:a5:d1:b2:1b:d0:d9:8f:95:90:a2:80:92:c4:
                    3d:32:ba:e6:27:db:a6:72:db:1e:20:28:bd:ed:ff:
                    5f:38:95:0d:30:1c:b7:bd:4d:56:18:a8:ba:82:15:
                    4b:4d:13:7f:d5:29:ac:bc:af:11:da:3f:aa:31:e5:
                    1a:a8:20:a0:82:79:40:c5:3f:ef:49:f9:f7:85:a2:
                    0e:b7:99:f2:6f:b9:43:78:c2:72:ba:88:00:26:1a:
                    49:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5F:04:4D:A1:5A:0F:FF:9D:30:75:41:71:D6:C8:95:EF:5F:FE:FE
            X509v3 Authority Key Identifier:
                keyid:C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/n18ETaFaD_-dMHVBcdbIle9f_v4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.110.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:29:eb:68:77:d9:60:0e:a7:e5:19:da:7b:6a:da:7a:8c:c5:
         5f:a5:84:a3:a0:67:7f:cf:ca:a8:30:42:8e:ab:ef:65:0e:fd:
         ea:cb:be:ac:83:24:6c:76:cf:dc:c4:f6:e1:9b:ff:b3:d5:6f:
         7c:7f:f4:28:c1:6e:56:5c:35:ec:7c:e9:51:9f:ee:e0:f8:08:
         34:30:b0:98:76:5b:f4:f7:9e:14:db:ab:94:5c:4b:67:f3:19:
         b6:31:da:33:cb:e2:3b:b4:a8:4a:ee:3a:53:83:f4:53:65:b2:
         72:0d:8d:63:22:c7:af:71:ea:ac:d4:6e:a1:eb:56:95:b9:eb:
         36:1c:70:6d:2f:e3:80:4e:c0:ed:04:7e:b0:b3:09:1f:98:bf:
         d9:ea:eb:a1:da:9f:5d:51:53:e6:16:c0:ac:85:fd:01:5c:55:
         88:89:c2:41:59:a6:bd:e8:0d:c5:05:56:ae:22:09:40:ba:6c:
         00:12:28:5d:6e:4d:0e:5c:43:ac:49:92:c1:36:e1:46:ee:09:
         eb:8a:77:66:98:d2:96:c8:00:ea:cf:8c:4d:9c:2e:bd:22:52:
         94:6a:19:fd:ec:76:98:5d:d4:b7:d4:bc:63:e8:d6:84:17:7d:
         04:8d:8b:cc:a5:e1:df:ce:df:71:ed:ed:2d:b6:27:a7:a9:2f:
         ed:9d:ee:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:56 2024 by rpki-client on console-fra.rpki-client.org