Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/gfpBHMIJ7TPEWGi9oFKEiSgXwX4.roa
File:                     gfpBHMIJ7TPEWGi9oFKEiSgXwX4.roa (raw, json)
Hash identifier:          zdPq9hp6tNjtwQE4Xf9WGOBhZb2WwA35QfBa1FvXvp4=
Subject key identifier:   81:FA:41:1C:C2:09:ED:33:C4:58:68:BD:A0:52:84:89:28:17:C1:7E
Certificate issuer:       /CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Certificate serial:       0185719E7BA1BC2D56087EA2CDB52B61AF1E
Authority key identifier: C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/gfpBHMIJ7TPEWGi9oFKEiSgXwX4.roa
Signing time:             Mon 02 Jan 2023 08:34:49 +0000
ROA not before:           Mon 02 Jan 2023 08:34:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197494
IP address blocks:        178.218.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:9e:7b:a1:bc:2d:56:08:7e:a2:cd:b5:2b:61:af:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ce0814167eaa8189fd84d390270eadf29482cb
        Validity
            Not Before: Jan  2 08:34:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=81fa411cc209ed33c45868bda05284892817c17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6a:cd:a4:28:22:c4:57:aa:7a:c3:bf:bd:3f:
                    01:10:6d:ab:7e:63:0a:77:51:dd:b1:d4:43:06:a2:
                    a5:e7:13:ec:b2:45:27:0d:13:ad:49:83:93:d1:68:
                    35:7c:d0:6a:f3:58:9d:4c:2f:72:22:2a:94:13:c1:
                    5d:2b:52:4e:b9:91:d4:da:4d:fd:27:a2:8b:61:60:
                    24:23:b8:2a:a4:59:41:e1:cd:20:42:c6:40:c7:5e:
                    86:34:0c:2b:3a:52:a8:b0:a8:43:e7:d8:4c:fa:c4:
                    a9:f5:38:a7:9c:d6:39:9d:4b:40:5a:85:8f:91:3a:
                    ad:ca:a1:ac:78:2d:1d:dc:f9:f4:cc:71:6f:21:89:
                    25:c2:97:a6:c3:fb:4d:ee:c1:95:21:37:40:17:69:
                    6d:07:a3:5c:f2:b1:6e:17:2c:d3:aa:98:be:f9:1c:
                    fb:3e:6c:5e:c3:c9:c8:7b:02:30:8a:52:d7:b3:5f:
                    91:ef:c9:2b:e9:14:ca:76:8f:7b:18:16:f9:31:74:
                    b6:49:09:6a:c7:f6:44:bf:45:fc:46:18:b4:14:64:
                    75:08:fd:d4:31:1b:53:2e:16:39:76:af:84:f6:81:
                    f6:e1:93:a0:66:72:b5:62:12:63:84:b2:c3:d7:c0:
                    38:3d:37:d2:d9:73:e2:fa:1c:7a:1b:b7:de:3f:05:
                    d3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FA:41:1C:C2:09:ED:33:C4:58:68:BD:A0:52:84:89:28:17:C1:7E
            X509v3 Authority Key Identifier:
                keyid:C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/gfpBHMIJ7TPEWGi9oFKEiSgXwX4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.218.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e2:f1:45:62:e9:72:59:f9:58:e4:7a:f1:8e:bc:c9:20:73:57:
         25:45:0a:4b:c0:e9:25:5e:bc:c3:79:2f:78:92:5c:e1:31:1b:
         9d:4b:a4:4a:62:b2:b3:02:65:46:0a:36:4e:98:2c:3a:3d:2a:
         d9:37:70:e1:84:f6:13:bc:49:ff:83:22:c3:20:1f:2d:04:fc:
         74:ac:7f:c2:3d:26:a9:fb:f2:ee:1e:05:89:f5:01:74:00:22:
         d3:0b:ec:3f:69:2e:4d:cf:ca:6e:b2:29:a5:0e:af:67:02:ec:
         47:48:ae:71:7e:15:ce:a0:60:c7:0a:e6:0c:8b:52:01:75:48:
         50:ef:d9:99:b9:47:c2:cf:76:91:99:78:42:53:11:ec:1e:3e:
         30:42:92:69:41:ff:f3:bf:57:df:60:80:26:fc:6e:ed:d1:75:
         5b:ca:24:9c:b0:d7:19:d8:34:28:cd:bf:c8:5a:a5:d6:06:58:
         6f:d6:6e:a1:cb:6e:c3:24:1d:e6:d9:5f:e0:35:59:fc:27:ce:
         96:23:17:a4:4e:df:c7:da:cc:d4:22:10:c8:93:31:7d:f0:a1:
         37:e9:f5:2a:97:0c:68:df:00:86:24:85:16:7e:fe:25:42:84:
         0e:d6:fa:c7:f1:30:b7:56:75:7d:3c:92:23:b6:49:80:5a:62:
         35:f9:63:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:55 2024 by rpki-client on console-ams.rpki-client.org