Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/oSwQQWMruU-_0GslI_aqDn0-2fk.roa
File:                     oSwQQWMruU-_0GslI_aqDn0-2fk.roa (raw, json)
Hash identifier:          laXajjjGwpJtG0tlbkowwEE6xgTNFJO/Nz2nhw6uAr0=
Subject key identifier:   A1:2C:10:41:63:2B:B9:4F:BF:D0:6B:25:23:F6:AA:0E:7D:3E:D9:F9
Certificate issuer:       /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial:       01856B40FE1EE3B978662234B4BC4E25463E
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/oSwQQWMruU-_0GslI_aqDn0-2fk.roa
Signing time:             Sun 01 Jan 2023 02:54:59 +0000
ROA not before:           Sun 01 Jan 2023 02:54:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207996
IP address blocks:        185.203.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:30:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:40:fe:1e:e3:b9:78:66:22:34:b4:bc:4e:25:46:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
        Validity
            Not Before: Jan  1 02:54:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a12c1041632bb94fbfd06b2523f6aa0e7d3ed9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2c:3f:0c:59:97:bf:1f:50:aa:9d:c0:12:88:
                    b4:d1:f8:b0:e7:82:7c:07:6e:6a:7f:6a:50:fa:ef:
                    e9:fc:f7:e7:81:bf:e2:c7:8b:d2:83:9f:9c:3b:1d:
                    7e:cc:ae:05:ef:02:f2:30:f6:ac:85:1d:e6:d1:c2:
                    96:26:d9:8d:fa:1a:22:72:5b:f4:cf:5e:de:37:cb:
                    c1:bf:16:96:6a:32:db:c9:1f:2a:91:55:7b:b4:55:
                    c8:9e:49:d6:57:e5:33:90:85:01:2a:af:4c:57:1f:
                    e1:06:bb:21:63:8f:02:3e:4b:df:a9:b6:b0:78:2a:
                    12:36:b5:b1:a4:e1:7d:2c:5a:7e:9c:b0:d9:9f:18:
                    00:c1:03:a8:ef:11:d7:ba:5b:89:ae:71:c0:4f:4a:
                    4a:8e:d8:b6:b3:8d:9a:0f:64:33:9c:42:f0:1d:79:
                    71:e6:dc:f5:a6:03:b8:d5:9e:07:40:13:25:6d:64:
                    3d:b0:fa:11:fc:61:c2:4e:9c:47:1e:a0:dc:e3:7f:
                    20:27:e3:6a:cf:b2:99:90:e7:4b:22:36:89:b7:43:
                    6e:8e:74:90:ed:df:96:e0:25:1f:10:29:e5:46:19:
                    fe:2d:b8:ab:21:31:82:b7:53:e3:c7:f7:c4:04:f1:
                    ad:4d:67:4a:3c:fb:d3:e1:bf:69:b2:1c:4a:42:03:
                    71:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2C:10:41:63:2B:B9:4F:BF:D0:6B:25:23:F6:AA:0E:7D:3E:D9:F9
            X509v3 Authority Key Identifier:
                keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/oSwQQWMruU-_0GslI_aqDn0-2fk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.203.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:93:6b:c5:39:de:fa:d6:25:05:d3:31:9d:be:f0:f2:61:0a:
         e2:14:30:80:6f:8f:72:05:b1:85:d1:2d:d1:96:d2:0c:36:1c:
         74:18:71:46:3c:68:89:66:12:97:a5:65:63:af:b9:4d:d8:3c:
         36:3a:51:50:8a:05:83:c5:7d:f6:57:ba:a3:0e:0c:a8:08:d9:
         1b:ac:5f:8e:d3:ff:d2:e1:ea:e6:3d:30:87:bf:bb:3f:47:71:
         93:70:07:62:24:ed:3b:61:63:53:3e:53:d5:d3:b3:fe:17:26:
         69:f1:01:a7:0d:60:0b:48:3e:4d:34:ec:b8:d8:87:a6:7b:4a:
         35:99:4b:ea:50:b1:1d:65:99:72:a6:4d:3a:32:a1:0f:ba:ff:
         e6:02:ac:29:03:09:3e:17:9f:f0:1a:5d:a4:3c:dc:c4:55:52:
         3d:f1:0d:57:84:16:b4:84:98:5d:53:3c:54:96:b7:cc:15:03:
         07:41:c4:b5:fa:78:e5:9d:c7:18:f7:fb:10:7f:68:fe:2d:8d:
         66:18:ea:cb:d4:b2:9a:f7:27:76:46:35:f7:77:da:5e:c5:c9:
         30:39:94:99:1d:31:82:06:ad:e5:46:25:f8:d4:7e:1c:50:b0:
         08:0c:91:96:19:ce:8b:67:f4:7e:66:fb:33:59:95:19:49:b8:
         d1:e1:1e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:47 2024 by rpki-client on console-fra.rpki-client.org