Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/83Uv0VSTBb9rYeUyPX56RSJVdcY.roa
File:                     83Uv0VSTBb9rYeUyPX56RSJVdcY.roa (raw, json)
Hash identifier:          q8hcEwNaikegZztOY/df+jwr9o52DJN8qiOFjwVYgIQ=
Subject key identifier:   F3:75:2F:D1:54:93:05:BF:6B:61:E5:32:3D:7E:7A:45:22:55:75:C6
Certificate issuer:       /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial:       01856FCBB1E7E5353D9AA5CAB08C4D83AA4F
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/83Uv0VSTBb9rYeUyPX56RSJVdcY.roa
Signing time:             Mon 02 Jan 2023 00:04:58 +0000
ROA not before:           Mon 02 Jan 2023 00:04:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49581
IP address blocks:        185.200.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:cb:b1:e7:e5:35:3d:9a:a5:ca:b0:8c:4d:83:aa:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
        Validity
            Not Before: Jan  2 00:04:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f3752fd1549305bf6b61e5323d7e7a45225575c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c3:ca:f3:67:42:57:23:45:ce:1f:31:ed:d2:
                    ed:75:9e:dc:e3:89:35:f5:d1:cb:60:6f:d8:99:e7:
                    4e:89:be:32:a4:f1:ea:7f:eb:a1:87:c2:40:1a:98:
                    b8:20:22:56:00:87:4f:52:45:33:d1:68:43:c6:f3:
                    cc:87:b4:c5:68:96:59:ca:ed:ae:58:18:ee:e5:dc:
                    33:db:a0:4c:ab:9f:39:9b:fd:b3:48:fb:50:d1:4d:
                    a6:62:7b:3f:5a:02:e6:49:3f:26:d2:c2:b2:3d:f1:
                    c0:75:c6:ac:e9:17:c4:fa:f0:04:b6:14:5b:27:c9:
                    de:80:f2:a5:a6:ea:70:aa:a2:82:6b:db:22:6a:15:
                    44:1f:12:e1:7e:11:6c:f9:9e:f6:13:37:6a:b1:39:
                    d6:8e:4f:e3:49:90:d6:07:e7:d1:c1:91:bd:a5:8c:
                    ea:10:71:19:64:cf:ea:a8:f4:3c:69:24:3b:21:0c:
                    d5:88:db:11:b9:2d:0f:a2:20:f2:87:57:0d:5d:22:
                    8d:e3:91:17:84:5c:f3:e1:2b:ba:d0:bc:b7:7e:ee:
                    e8:56:b2:1c:8f:2e:c2:2f:29:ad:70:1c:85:4b:3e:
                    b7:02:74:d8:a6:34:ed:8c:74:83:56:0a:07:e8:05:
                    67:79:f9:de:d5:0a:b6:42:12:07:25:dc:99:60:9b:
                    aa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:75:2F:D1:54:93:05:BF:6B:61:E5:32:3D:7E:7A:45:22:55:75:C6
            X509v3 Authority Key Identifier:
                keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/83Uv0VSTBb9rYeUyPX56RSJVdcY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.200.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:ec:95:ba:68:b1:de:fd:ec:47:db:59:3f:fd:ff:0f:15:c7:
         d1:f2:9f:76:67:2d:e9:56:b5:b9:e8:79:3e:a8:0f:03:7c:15:
         2a:c4:3e:64:fb:93:1f:5f:82:db:ef:f4:96:b1:12:6b:b5:3d:
         6e:56:f8:cb:bc:63:7c:bc:a0:70:da:e0:51:96:5b:f0:e7:bc:
         37:49:3c:29:4e:84:f5:59:19:ba:ed:d8:14:74:6a:1c:ee:97:
         da:72:22:01:b9:0a:6b:be:3f:36:f1:49:a3:3e:e5:ac:92:b2:
         04:9e:d9:97:3a:32:ae:e5:be:d0:bf:5d:a9:e2:b5:a5:30:d3:
         21:8f:23:ab:99:3f:0f:5d:09:7e:10:3e:dd:6d:07:5f:47:f9:
         ec:79:75:05:40:b5:be:18:34:fa:01:d6:da:cc:ac:53:cc:4a:
         9a:14:8b:60:ce:ef:61:56:ed:6b:40:21:ff:57:27:35:5b:94:
         0e:9f:59:94:02:51:45:56:dc:97:cb:9d:cd:30:40:68:f6:87:
         78:d7:c8:91:84:74:e0:54:2d:50:24:89:62:84:99:7b:2f:ae:
         df:cc:b0:29:94:e4:d8:94:04:8b:45:d4:89:71:27:00:e7:af:
         46:f6:78:ce:db:8c:5e:52:4e:7d:16:df:62:85:9b:e8:6d:a4:
         0c:88:16:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-fra.rpki-client.org