Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/61blF7T8idCgLBV-utK61DyKVbM.roa
File:                     61blF7T8idCgLBV-utK61DyKVbM.roa (raw, json)
Hash identifier:          sloni6PBuH+3Jgdai4EZApt3wGDyrLKXv9rPY/TwIB8=
Subject key identifier:   EB:56:E5:17:B4:FC:89:D0:A0:2C:15:7E:BA:D2:BA:D4:3C:8A:55:B3
Certificate issuer:       /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial:       0185710BF095F8BC3089297A315808F353EB
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/61blF7T8idCgLBV-utK61DyKVbM.roa
Signing time:             Mon 02 Jan 2023 05:54:45 +0000
ROA not before:           Mon 02 Jan 2023 05:54:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202341
IP address blocks:        185.229.60.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 23 Oct 2023 08:57:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:0b:f0:95:f8:bc:30:89:29:7a:31:58:08:f3:53:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
        Validity
            Not Before: Jan  2 05:54:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb56e517b4fc89d0a02c157ebad2bad43c8a55b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:44:40:60:31:e1:10:26:2a:ea:06:bd:97:
                    05:4a:68:84:5d:11:98:52:6a:84:ea:7a:8a:61:b9:
                    ba:70:03:2e:32:45:60:71:e8:91:d6:d7:6b:73:5a:
                    ba:e1:7e:8c:22:8e:f7:a8:54:81:1e:25:00:a6:8a:
                    45:ef:31:cf:d8:47:e4:99:ef:8e:11:0a:5d:b8:10:
                    62:d0:22:74:ef:f3:b8:04:36:c3:4b:65:c8:82:b5:
                    fd:50:70:8c:5e:b6:6d:17:94:b9:d3:02:a7:66:97:
                    d7:b0:44:1e:6c:7d:65:fe:ce:9b:17:93:82:7d:3d:
                    8d:b4:4f:b0:b0:3d:8f:cf:c0:b1:af:cd:7c:0b:7d:
                    1f:4b:ac:19:02:be:b8:30:4c:93:da:cf:01:83:5d:
                    2d:70:5a:98:75:7c:9d:87:a3:a4:31:b2:c5:85:de:
                    70:7f:5d:30:f5:a9:ea:98:b7:56:56:0e:a6:a8:3a:
                    92:f4:43:2a:1a:f6:54:4d:db:59:83:b5:15:97:68:
                    2b:42:61:85:37:94:03:5b:0a:08:9e:3d:73:a7:77:
                    c7:ab:9d:19:7f:11:65:63:82:e3:7c:c1:7f:b6:15:
                    a6:16:49:d8:d3:b3:a2:fa:08:99:a3:30:f1:24:54:
                    76:72:c9:93:c6:c8:59:b1:c4:80:82:eb:ea:05:90:
                    98:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:56:E5:17:B4:FC:89:D0:A0:2C:15:7E:BA:D2:BA:D4:3C:8A:55:B3
            X509v3 Authority Key Identifier:
                keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/61blF7T8idCgLBV-utK61DyKVbM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:f1:e6:f4:83:c4:ab:79:3f:c3:4f:17:9b:97:a2:f2:99:79:
         9f:51:0e:70:14:ed:21:f8:fa:b5:09:b9:9a:78:39:71:de:e1:
         08:6c:54:37:74:88:d6:4d:e6:1c:ab:4d:6c:a3:51:68:21:a2:
         7e:38:e0:40:c7:e0:69:08:6a:38:14:81:b5:66:57:2b:07:d9:
         d5:9e:c9:28:97:d1:97:b2:09:07:e1:ae:c9:83:48:77:2f:6a:
         eb:a3:bb:ba:bb:ef:0b:92:8d:d2:a9:0d:d6:19:45:da:d1:d0:
         0c:58:22:30:f3:dc:e8:65:a3:c4:a7:1c:43:e0:00:82:5c:9b:
         56:e1:9b:46:bc:67:0d:ef:97:86:51:cd:47:1b:0f:07:ef:aa:
         55:ca:d5:52:2c:a6:ab:71:9f:75:61:ba:a8:ed:4f:c0:0c:32:
         1d:29:e0:e7:d2:2c:be:41:2d:3a:64:fb:d1:a8:c7:6f:cd:55:
         43:6e:0f:ef:2f:53:01:4b:86:1a:0d:dd:17:01:25:83:03:2a:
         cc:3c:d0:69:3a:b5:9e:cc:fb:0e:5a:bd:5d:0d:77:a0:83:d2:
         6a:83:05:19:4d:d5:4a:bd:f9:5c:a8:75:0b:50:1d:ba:d2:6f:
         5a:75:5d:dc:99:c2:1d:d7:7e:06:46:83:90:73:7b:85:73:03:
         e3:d0:13:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:37 2024 by rpki-client on console-fra.rpki-client.org