Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/2t7jdNUJgkZLKBNFQ0Yc6RMHrYY.roa
File:                     2t7jdNUJgkZLKBNFQ0Yc6RMHrYY.roa (raw, json)
Hash identifier:          pCnNHW9e9kuM3dQ7Qv/pt49NWN1MgcrjEgMkQqLMVAY=
Subject key identifier:   DA:DE:E3:74:D5:09:82:46:4B:28:13:45:43:46:1C:E9:13:07:AD:86
Certificate issuer:       /CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Certificate serial:       018572B683B997FD6A2EC4442AA4E1249927
Authority key identifier: B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/2t7jdNUJgkZLKBNFQ0Yc6RMHrYY.roa
Signing time:             Mon 02 Jan 2023 13:40:41 +0000
ROA not before:           Mon 02 Jan 2023 13:40:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199188
IP address blocks:        185.187.148.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:b6:83:b9:97:fd:6a:2e:c4:44:2a:a4:e1:24:99:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
        Validity
            Not Before: Jan  2 13:40:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dadee374d50982464b28134543461ce91307ad86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:38:74:fd:31:18:54:11:71:c0:6e:c8:fc:58:
                    92:bd:5b:3c:b1:2e:7e:dd:3b:df:4d:0f:21:28:f7:
                    f5:56:ab:46:51:87:8a:be:d6:dc:c8:85:4d:3f:71:
                    20:6c:69:aa:c2:de:cc:25:d1:0f:a6:9d:8e:43:fe:
                    44:a2:c6:04:97:a6:16:66:10:d1:99:8b:f6:2a:2e:
                    0d:c7:ca:8c:05:03:d5:fd:1d:5e:b6:64:6a:1c:4a:
                    bd:1c:8c:44:ab:ed:e4:ce:8c:59:6b:e2:52:63:e6:
                    91:18:4b:53:be:a0:65:79:47:bd:e5:cf:75:00:ef:
                    85:59:69:dc:04:24:0b:32:a6:52:14:06:63:9d:8e:
                    fa:e7:ed:fd:7b:53:60:eb:b4:20:98:c1:8a:aa:e2:
                    6e:cf:ca:6e:6c:4c:ac:76:43:e6:6c:5f:fe:29:d9:
                    43:c1:6f:f0:28:d2:76:77:6c:21:7e:cc:44:70:93:
                    92:96:2f:72:66:74:11:1c:a2:34:af:16:2e:e7:8d:
                    85:80:b3:5e:66:8d:23:2a:40:72:d8:06:7a:9a:fc:
                    ce:85:75:5b:74:91:e6:84:2c:f9:58:b9:0b:f8:e2:
                    03:2f:d7:6d:94:0f:5c:70:6c:f6:cb:2e:fa:dd:8f:
                    71:bf:dc:bc:4e:eb:87:81:a2:17:1e:40:73:8e:12:
                    6a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DE:E3:74:D5:09:82:46:4B:28:13:45:43:46:1C:E9:13:07:AD:86
            X509v3 Authority Key Identifier:
                keyid:B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/2t7jdNUJgkZLKBNFQ0Yc6RMHrYY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:8e:2d:19:e4:0b:e6:f1:12:1b:7b:64:a0:eb:ad:17:ea:68:
         ec:55:5a:f2:cb:69:e7:13:07:b3:92:aa:8a:fc:33:a0:f0:ac:
         e4:10:de:54:93:bc:bd:1c:07:5e:5b:78:cb:d8:c5:fa:51:30:
         2f:8c:f0:84:26:a5:a5:3d:b0:6b:00:b4:14:b1:b1:85:bb:e5:
         f3:c0:70:e5:d0:42:55:f8:55:8a:89:ac:03:cc:1c:17:a3:3b:
         6d:2e:5a:f6:2e:c7:ed:86:6f:f1:02:4c:dd:5d:d5:05:28:cb:
         13:c7:2c:f5:07:df:26:f7:35:10:f2:29:0e:55:e4:b3:39:48:
         b0:48:b0:ac:1d:b6:48:ec:93:f0:58:66:72:14:52:7c:e0:51:
         00:38:87:c2:bf:01:9e:1f:a9:c2:ed:1e:fd:0d:fd:b6:8b:e1:
         cf:4e:fe:e5:e0:9e:0c:a4:a3:0a:e7:c6:95:05:c5:97:9d:1a:
         9b:3a:65:3e:75:22:b0:63:65:cd:a2:56:22:e6:cd:eb:5a:a3:
         8e:cc:02:71:c0:f9:e6:43:71:75:3e:10:9f:a3:52:a4:87:8c:
         4d:00:67:d1:a4:b6:ec:d0:c6:04:5c:d3:be:64:41:ac:06:b5:
         b1:e0:d2:3d:e2:11:e9:2e:74:cf:9c:09:b7:30:d9:46:7e:75:
         ba:aa:fe:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:38 2024 by rpki-client on console-ams.rpki-client.org