Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/G5EwCs7ESQvMJG5r1LWP_Frp160.roa
File:                     G5EwCs7ESQvMJG5r1LWP_Frp160.roa (raw, json)
Hash identifier:          Ctu3Z9t8R5na0KHZlIr75QujE49bLUGNubS6LBFKGO4=
Subject key identifier:   1B:91:30:0A:CE:C4:49:0B:CC:24:6E:6B:D4:B5:8F:FC:5A:E9:D7:AD
Certificate issuer:       /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial:       018D65BF10F37C0A54F4A708ECF59C4B9B42
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/G5EwCs7ESQvMJG5r1LWP_Frp160.roa
Signing time:             Thu 01 Feb 2024 17:37:17 +0000
ROA not before:           Thu 01 Feb 2024 17:37:17 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58061
IP address blocks:        185.218.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 02 Feb 2024 09:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:65:bf:10:f3:7c:0a:54:f4:a7:08:ec:f5:9c:4b:9b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
        Validity
            Not Before: Feb  1 17:37:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1b91300acec4490bcc246e6bd4b58ffc5ae9d7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5b:16:30:c2:0d:86:e5:24:2d:76:ae:4b:47:
                    a1:08:3b:33:da:96:b6:b8:06:de:b6:81:01:6e:99:
                    3e:27:56:ad:ac:18:a4:38:da:4c:b0:35:9e:a3:3e:
                    47:d2:39:73:a8:ae:66:5d:d2:f3:74:1c:c5:77:76:
                    88:27:02:2f:a9:6b:d0:d0:4c:a4:0a:83:29:78:54:
                    45:1e:b2:84:d3:0a:2d:e9:c9:58:07:c8:7d:42:f8:
                    b1:5e:a6:72:c1:1b:5b:60:0b:57:5f:b9:34:1b:b4:
                    50:5c:3c:70:eb:2a:34:17:49:d3:c2:96:67:13:9d:
                    c6:23:12:38:ec:4e:13:7a:4b:9b:ec:56:67:9c:fa:
                    81:ba:93:be:06:40:5a:74:4b:f0:91:b2:ac:2b:be:
                    52:b1:f9:ea:48:57:66:cb:58:ff:66:50:6c:ed:a2:
                    c6:76:1d:e3:af:45:e7:1b:40:d3:d5:2f:2b:27:af:
                    eb:43:f2:dc:43:49:c2:76:74:48:0e:f0:55:a5:a0:
                    d5:33:a1:31:7c:76:d2:af:dc:8d:c8:e2:0f:59:23:
                    f3:2b:92:7a:84:5b:2f:26:d3:c9:57:a1:83:a4:82:
                    a5:d6:ef:0e:d7:5c:0f:f0:87:70:af:48:7c:01:ff:
                    42:c3:87:dc:9a:2e:57:3a:5e:bc:90:63:f2:f9:e8:
                    9b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:91:30:0A:CE:C4:49:0B:CC:24:6E:6B:D4:B5:8F:FC:5A:E9:D7:AD
            X509v3 Authority Key Identifier:
                keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/G5EwCs7ESQvMJG5r1LWP_Frp160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:1c:54:2c:ea:b5:2e:e4:4e:64:15:ed:9b:e6:90:13:a2:99:
         b5:5d:ac:e2:4f:33:05:85:a2:ed:0d:58:b6:b5:1b:ac:ba:5e:
         6c:72:da:46:63:52:e3:a3:9b:09:0a:09:d0:fb:e1:09:2f:60:
         47:75:24:d2:e2:3c:bd:8a:0d:15:de:d3:50:2d:da:b4:b4:ee:
         52:39:80:64:49:61:43:4d:02:c9:96:20:e1:4d:23:78:dd:86:
         34:5f:10:10:fb:02:c6:33:bb:6f:a8:b2:fe:7b:b9:6c:cc:e8:
         c5:da:13:51:1c:6c:f6:7f:00:1e:d5:f1:f5:e2:7c:0d:6a:3e:
         ed:b0:e5:68:8f:b3:90:26:8b:69:6f:41:33:5c:bb:f1:b2:82:
         1f:7a:ca:57:15:63:c4:de:79:fe:8d:ec:f6:9e:7c:2a:3c:3a:
         21:8d:9a:e1:d3:71:fc:d6:5b:38:e7:ef:50:d2:b4:c9:35:fb:
         ec:55:dc:5b:f8:4b:f3:1e:66:e0:10:83:80:49:0c:2e:80:c4:
         f2:e2:64:4f:af:4d:18:33:ed:80:d9:59:e8:a0:dc:bc:b7:a2:
         8c:ac:91:11:21:fd:26:dd:08:22:19:03:74:e9:37:44:23:83:
         aa:2c:77:a5:61:b2:b5:59:77:ea:ed:85:f1:a3:b3:12:97:2f:
         51:34:70:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:22 2024 by rpki-client on console-fra.rpki-client.org