Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/42gRjalZXicU9zmsc8gT5hiWne4.roa
File:                     42gRjalZXicU9zmsc8gT5hiWne4.roa (raw, json)
Hash identifier:          aiZ+PwPqh3ypg6oLo2wL5cjxVfU5kcvWGcCYRQN4HS8=
Subject key identifier:   E3:68:11:8D:A9:59:5E:27:14:F7:39:AC:73:C8:13:E6:18:96:9D:EE
Certificate issuer:       /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial:       0185A055DAFE62C155F67560558AB168176F
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/42gRjalZXicU9zmsc8gT5hiWne4.roa
Signing time:             Wed 11 Jan 2023 10:17:39 +0000
ROA not before:           Wed 11 Jan 2023 10:17:39 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39486
IP address blocks:        185.184.228.0/24 maxlen: 32

Validation:               Failed, certificate revoked on Mon 06 Feb 2023 12:05:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a0:55:da:fe:62:c1:55:f6:75:60:55:8a:b1:68:17:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
        Validity
            Not Before: Jan 11 10:17:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e368118da9595e2714f739ac73c813e618969dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c3:b9:ae:2b:30:ba:e9:5a:71:e9:d7:ab:3c:
                    4f:ca:84:29:a4:d4:8c:d1:74:ef:d8:5d:fd:ed:08:
                    66:1f:5e:53:03:8e:52:49:54:ce:dd:c1:d7:b1:a4:
                    c0:6e:7f:31:dc:a2:2d:04:d8:58:43:24:ef:7e:95:
                    1c:36:a2:d5:e0:e3:47:5d:d0:eb:11:27:90:05:b6:
                    67:bb:34:7d:a0:21:41:8c:60:c8:c2:21:5b:29:6a:
                    50:67:5e:a3:cc:05:9e:23:da:52:ba:fb:72:54:01:
                    23:65:f8:70:25:57:ee:4f:db:0e:34:14:79:eb:ba:
                    e0:2b:3a:d1:3b:93:dd:d9:35:9f:a8:4d:dd:c2:e0:
                    62:12:c5:a4:0f:bd:37:40:86:94:fc:48:cc:2c:ed:
                    3a:26:57:8b:72:d4:22:25:c5:f8:dc:d0:1d:30:b5:
                    4d:42:5b:2c:64:fd:e3:61:ee:5c:5f:cb:4c:29:18:
                    8b:20:98:ee:72:2d:a3:ba:bd:60:89:c0:71:b3:86:
                    0f:98:73:66:af:4b:b4:c4:c0:69:eb:85:ad:7e:cd:
                    41:7a:b0:04:40:19:28:79:6c:22:40:aa:8c:aa:82:
                    3d:b0:83:c4:43:5a:0b:9a:95:1d:8c:8b:62:f0:21:
                    10:f0:7a:8a:e7:f5:91:51:f1:8d:e3:87:d0:f0:24:
                    bb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:68:11:8D:A9:59:5E:27:14:F7:39:AC:73:C8:13:E6:18:96:9D:EE
            X509v3 Authority Key Identifier:
                keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/42gRjalZXicU9zmsc8gT5hiWne4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.184.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:53:c0:a3:d1:1c:b8:84:69:ad:6f:a9:8f:f9:8c:cc:f2:2a:
         94:1b:21:e4:28:8b:51:28:41:e3:84:5d:49:6d:4f:d6:78:bf:
         6d:30:1f:8f:58:9b:53:84:a0:d8:c9:93:5a:2a:6a:f9:c4:f4:
         77:b6:11:5b:be:c6:70:5a:d6:1b:e4:77:25:aa:f5:a1:c0:c1:
         58:3d:18:a3:b3:99:d8:91:1f:14:ae:c9:d8:0d:82:e3:b1:98:
         25:d7:99:f4:3a:ad:26:50:50:79:d2:eb:7d:76:dc:1f:bb:a6:
         84:80:4d:68:6d:2e:0a:94:29:97:0f:9f:43:8d:d6:eb:0f:ec:
         d4:c5:73:f6:95:56:d9:b2:a4:8e:12:1c:1e:e1:88:22:3b:a7:
         33:d4:2c:0f:9c:1e:ee:ae:fc:9c:50:2d:d3:02:0d:61:24:dd:
         63:3f:c5:69:7d:74:89:7a:8e:7e:c7:d1:42:9e:e2:5b:75:a0:
         92:80:48:57:fe:1a:68:dc:4f:52:bb:6e:55:66:8c:98:59:9a:
         1c:7a:eb:c6:b3:26:eb:3f:69:5a:05:54:60:e9:2e:e6:3c:c8:
         98:02:13:b9:46:83:21:2c:c4:e8:fb:6d:07:5c:7f:23:c6:a0:
         8c:72:c8:46:99:47:2e:33:5c:dd:f8:f0:2f:fd:ca:b7:19:b9:
         1c:ae:d2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:46 2024 by rpki-client on console-fra.rpki-client.org