Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/n5Og4BmEVuIHLgqc7iDN9_0MRRc.roa
File:                     n5Og4BmEVuIHLgqc7iDN9_0MRRc.roa (raw, json)
Hash identifier:          FFyOtgd4mZRA8xhnO/3UppxQveS5P3okbmUqo8g/65E=
Subject key identifier:   9F:93:A0:E0:19:84:56:E2:07:2E:0A:9C:EE:20:CD:F7:FD:0C:45:17
Certificate issuer:       /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Certificate serial:       018570676A7C57EC184857FDB1C3902429C5
Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/n5Og4BmEVuIHLgqc7iDN9_0MRRc.roa
Signing time:             Mon 02 Jan 2023 02:55:03 +0000
ROA not before:           Mon 02 Jan 2023 02:55:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     19905
IP address blocks:        185.98.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:67:6a:7c:57:ec:18:48:57:fd:b1:c3:90:24:29:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
        Validity
            Not Before: Jan  2 02:55:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9f93a0e0198456e2072e0a9cee20cdf7fd0c4517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:0a:6b:ac:dd:da:a5:a9:dd:ee:52:e9:1e:
                    af:74:bf:89:aa:3c:7f:cd:8b:a8:f8:ed:52:f4:73:
                    05:3e:93:59:d6:a4:c7:4c:c5:c7:7a:ed:3d:fd:92:
                    ae:eb:06:66:31:a8:dd:67:e7:47:45:49:42:f4:ae:
                    45:fd:7c:85:ea:ce:1b:65:8d:31:67:01:bb:ac:96:
                    9b:d6:35:98:74:81:61:ef:7b:b5:fe:c5:53:bc:7d:
                    5a:b6:c6:fe:87:34:1a:17:4f:36:67:65:60:69:0e:
                    db:73:ef:0c:e8:e7:66:68:97:73:64:01:4f:2b:2e:
                    f5:15:2d:87:48:34:49:7d:30:1d:e3:45:ba:47:33:
                    82:b5:97:02:de:6f:72:a7:16:e8:8c:68:ee:63:bf:
                    8b:f3:12:9e:20:ff:46:b9:06:9b:21:1d:ba:bb:e5:
                    15:c0:bb:0c:13:8d:dd:31:f8:de:92:5a:7f:a2:63:
                    f0:c5:13:f7:19:ce:df:bc:13:d9:fd:91:bb:d7:e0:
                    9b:48:49:20:42:0b:c7:c1:fe:11:f6:e1:61:95:fe:
                    10:22:f0:04:5c:e3:dc:b9:4d:0f:29:33:fc:7f:c8:
                    ef:db:b6:7c:e6:11:4e:f5:5b:d3:55:6b:ec:2a:c1:
                    48:a3:62:65:0e:75:1c:bc:34:ec:91:97:8b:51:2c:
                    25:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:93:A0:E0:19:84:56:E2:07:2E:0A:9C:EE:20:CD:F7:FD:0C:45:17
            X509v3 Authority Key Identifier:
                keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/n5Og4BmEVuIHLgqc7iDN9_0MRRc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.98.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:ff:78:9f:08:d8:70:27:f9:7b:23:ca:82:fb:77:56:b5:b6:
         67:c5:39:27:00:76:63:c2:83:89:77:de:85:3e:12:6c:54:de:
         07:f4:36:f2:d2:6a:cd:82:02:bf:05:29:36:ca:da:f9:b4:7b:
         27:d6:db:5a:63:54:7a:71:fe:51:fe:d8:f4:50:31:f6:5b:ab:
         0a:cf:76:0e:87:d2:cd:77:cf:c9:d8:29:ec:f3:a7:fd:24:f0:
         db:87:6f:00:65:b6:83:b2:9c:52:bd:72:b9:52:e0:ed:1d:e0:
         6c:3f:41:0d:f5:19:4a:33:c0:4f:ea:9c:c6:02:26:73:ed:ef:
         4f:32:c2:d3:17:b4:82:bb:24:10:77:63:38:cf:3c:d4:23:39:
         eb:ab:e3:1c:ea:88:f0:81:cf:5f:a4:1e:e8:c5:57:5d:b0:59:
         57:6c:d4:a0:72:a8:27:28:9d:d1:e3:bb:d4:8d:39:8d:72:20:
         67:56:c3:87:fe:69:66:65:4f:80:aa:42:c0:81:31:a1:e4:0e:
         6e:34:34:46:a6:97:06:4c:81:8a:09:37:3f:00:1c:04:d6:f9:
         62:c7:21:c1:6b:43:a4:2e:cc:9a:9c:db:7f:02:58:ab:06:a4:
         71:ba:fb:cb:54:66:68:78:db:e3:47:19:0b:7e:bb:77:4c:b7:
         5e:16:a9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:53 2024 by rpki-client on console-fra.rpki-client.org