Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/goi2gtr7MGgzJ8B6iSbuFMoZjSY.roa
File:                     goi2gtr7MGgzJ8B6iSbuFMoZjSY.roa (raw, json)
Hash identifier:          tJLM30dKoQ+3Z54R23GgQQ1xOp6gTWGaigq0q6GCBdk=
Subject key identifier:   82:88:B6:82:DA:FB:30:68:33:27:C0:7A:89:26:EE:14:CA:19:8D:26
Certificate issuer:       /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial:       018703B1F71A18BED07996E9AAA43D268A04
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/goi2gtr7MGgzJ8B6iSbuFMoZjSY.roa
Signing time:             Tue 21 Mar 2023 10:23:27 +0000
ROA not before:           Tue 21 Mar 2023 10:23:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     396998
IP address blocks:        185.228.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 23 Apr 2023 15:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:03:b1:f7:1a:18:be:d0:79:96:e9:aa:a4:3d:26:8a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
        Validity
            Not Before: Mar 21 10:23:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8288b682dafb30683327c07a8926ee14ca198d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9e:57:6b:11:58:e4:be:04:f3:a7:3b:6b:44:
                    f4:8c:8c:38:2c:98:fa:1f:db:cf:3a:5e:b9:4f:f2:
                    44:f7:8a:a0:4e:9d:dc:79:65:04:74:ff:96:74:9c:
                    9a:03:86:6c:07:5c:5a:d2:52:e1:9d:36:06:d4:ef:
                    ba:42:ae:74:90:4b:df:ef:09:88:71:7f:a9:f9:59:
                    f2:56:35:2e:a6:00:05:7d:35:8f:50:55:39:6c:ec:
                    1f:b2:60:5b:63:51:8a:88:42:82:e8:58:30:71:88:
                    22:20:e1:8e:a9:5e:88:cd:c0:00:6b:c9:9b:2f:5d:
                    0c:73:0c:eb:ac:e9:1e:c9:27:ab:fe:50:a0:8c:4c:
                    2f:69:a4:53:8a:31:a8:e9:e6:b7:7a:18:f2:f8:12:
                    7f:4a:d4:6d:2b:79:25:6f:4a:28:5d:8c:89:d8:20:
                    53:30:84:3c:a7:32:b9:f1:dc:dd:c8:e7:57:42:fd:
                    ad:c4:79:e6:80:34:9a:2b:92:98:cb:63:ce:9e:85:
                    0f:13:bd:75:65:5f:c7:d6:f8:c9:b1:bc:c7:f6:a6:
                    ce:49:e8:c5:d3:89:1c:0b:ba:03:3e:9a:2b:55:9c:
                    b8:ab:c3:1a:a3:e5:d5:0b:2b:69:46:d1:04:83:08:
                    89:4e:00:1b:ef:79:70:dd:e8:06:08:b4:08:d7:bd:
                    72:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:88:B6:82:DA:FB:30:68:33:27:C0:7A:89:26:EE:14:CA:19:8D:26
            X509v3 Authority Key Identifier:
                keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/goi2gtr7MGgzJ8B6iSbuFMoZjSY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.228.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:30:57:95:bf:75:20:ed:d6:67:83:5b:31:23:9d:ed:fc:72:
         89:7d:85:a4:49:dc:56:06:b0:42:85:ec:c2:95:b2:68:3f:32:
         7c:b2:4b:bf:ea:2d:4a:97:8e:ec:17:04:c0:fa:3a:6c:a1:52:
         c5:0d:2f:15:0e:7e:ae:c1:c7:10:50:09:dd:5a:bc:82:17:5f:
         9b:c5:22:e6:89:f1:ec:b4:5d:5b:ed:fb:b7:c2:e8:35:c4:30:
         1c:59:19:20:82:4d:69:8a:89:94:a5:fb:f8:48:b0:d7:63:c2:
         c8:ac:be:d8:7b:34:6e:34:4b:a7:7a:60:a3:70:23:f5:71:2f:
         5f:5f:19:32:2c:53:0f:15:84:d5:2a:86:59:14:99:b3:95:a9:
         44:cf:bb:24:e3:d2:6b:a5:64:6a:a6:0e:5a:6f:52:a0:dd:cb:
         da:0d:1d:40:6c:6e:1c:89:11:eb:f6:8e:b5:88:59:29:a8:25:
         dd:dc:5f:50:13:77:0d:7d:38:9b:78:ee:e1:11:13:fb:73:39:
         99:53:45:c8:85:fb:21:7b:e0:d8:d2:22:ec:8d:0a:81:94:3e:
         8e:0e:fb:1b:d2:8b:4f:59:3b:d4:66:37:93:ff:66:82:b3:55:
         36:de:55:a8:4a:42:d7:f8:2b:2b:1e:f1:1b:7c:b0:92:0b:13:
         af:7e:47:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org