Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/JiVU_RM9VFBSdgA22FJkECmqHMM.roa
File:                     JiVU_RM9VFBSdgA22FJkECmqHMM.roa (raw, json)
Hash identifier:          RM0p19d611pBSBhAbiDYd6kgmalFoI6N+67V780YXN8=
Subject key identifier:   26:25:54:FD:13:3D:54:50:52:76:00:36:D8:52:64:10:29:AA:1C:C3
Certificate issuer:       /CN=93a229e266b2558899f3547ee63d84ed6594768b
Certificate serial:       01856ECB7F955C8952BE3C83418D8360F1E9
Authority key identifier: 93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/JiVU_RM9VFBSdgA22FJkECmqHMM.roa
Signing time:             Sun 01 Jan 2023 19:25:08 +0000
ROA not before:           Sun 01 Jan 2023 19:25:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208042
IP address blocks:        185.243.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:cb:7f:95:5c:89:52:be:3c:83:41:8d:83:60:f1:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a229e266b2558899f3547ee63d84ed6594768b
        Validity
            Not Before: Jan  1 19:25:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=262554fd133d545052760036d852641029aa1cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:60:77:c1:70:3d:8e:d1:6b:6a:45:a1:e0:e2:
                    e9:86:82:8c:ba:d1:3d:90:58:f0:d8:65:76:18:56:
                    ea:3d:25:35:0a:b9:93:1a:34:16:be:23:f1:fe:5f:
                    41:16:65:44:60:b4:6a:b1:b5:91:48:44:24:1d:0a:
                    8b:ab:2d:73:de:59:fe:d6:a4:00:a6:d0:08:b7:e5:
                    ef:bc:02:a9:bb:b7:cd:9b:25:ee:42:9f:6d:3f:cb:
                    ab:0b:0b:55:94:dc:78:82:06:a2:aa:e5:c0:03:d3:
                    0c:e5:c9:6f:f5:89:01:39:9f:4b:c9:c2:11:1d:78:
                    a3:da:33:cb:56:36:f0:97:30:e5:3d:40:98:dd:74:
                    75:42:14:45:ad:15:fe:e5:48:4c:1c:df:21:7d:9b:
                    b0:13:b3:5c:f7:b6:0d:94:83:59:b1:ec:21:05:50:
                    02:4b:aa:17:5c:37:f0:ed:6b:cb:61:a0:72:73:f9:
                    bd:cd:76:a8:d8:63:84:1a:46:b9:34:a7:03:58:83:
                    4a:bc:7f:e2:1b:89:91:82:b4:40:2f:16:ea:9a:f6:
                    29:b1:52:61:4c:16:7c:54:17:60:50:57:9c:b8:5b:
                    4e:1a:d7:54:db:10:f1:72:d2:7f:93:81:2c:ec:fc:
                    09:48:2c:c3:8f:06:1e:94:a3:2c:fb:bb:69:05:2a:
                    5d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:25:54:FD:13:3D:54:50:52:76:00:36:D8:52:64:10:29:AA:1C:C3
            X509v3 Authority Key Identifier:
                keyid:93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/JiVU_RM9VFBSdgA22FJkECmqHMM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.243.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:25:23:6d:0f:79:6f:b9:90:7f:1f:b7:17:6c:2a:f1:34:c9:
         52:3e:0f:26:9a:b5:93:7e:e0:fb:67:9f:68:24:93:d9:20:27:
         e5:37:4c:a9:d0:8e:f4:05:7a:05:5d:2d:b5:ed:4e:f2:bd:60:
         39:6c:6c:6b:78:4e:69:9c:9e:aa:29:27:54:a3:98:ac:37:cc:
         03:97:55:f0:b7:84:4d:92:ce:09:c7:b1:6f:95:78:3d:e7:19:
         6b:18:e8:04:39:48:4f:ac:17:ba:47:cb:96:23:b2:df:23:ea:
         8d:4c:51:ec:b7:be:c2:73:ea:d8:e2:80:c7:3a:03:51:79:78:
         3e:65:8b:6b:70:36:e7:d4:eb:13:27:c2:a6:2f:ac:c8:f7:54:
         41:1f:dd:9a:08:62:29:f2:69:3f:8a:62:5d:43:59:b9:64:37:
         bb:39:3c:06:e9:d3:15:c1:61:e7:08:82:3e:a7:ed:db:78:3f:
         8a:49:45:54:a5:64:7a:6d:1c:38:9e:90:35:f8:23:48:b0:b8:
         ab:38:3b:c4:18:00:a1:c8:77:09:2d:be:9b:2a:09:58:d4:c0:
         36:6d:22:56:a3:8b:d0:c6:20:95:76:4b:00:55:85:68:0b:f6:
         64:90:0c:cc:79:18:4c:73:cc:f6:55:66:d3:0f:97:1f:ae:6f:
         02:3c:c0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:21 2024 by rpki-client on console-fra.rpki-client.org