Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/EDMwnWMKJwX11R7l6vZvoodLUhI.roa
File:                     EDMwnWMKJwX11R7l6vZvoodLUhI.roa (raw, json)
Hash identifier:          YVUdZXqa3P3w+RveFWdbzJbXyI2c/c4Os/bGJR0LFzU=
Subject key identifier:   10:33:30:9D:63:0A:27:05:F5:D5:1E:E5:EA:F6:6F:A2:87:4B:52:12
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       018571DE7E8B8E95FE0A8BF06380D89B5B65
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/EDMwnWMKJwX11R7l6vZvoodLUhI.roa
Signing time:             Mon 02 Jan 2023 09:44:44 +0000
ROA not before:           Mon 02 Jan 2023 09:44:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212708
IP address blocks:        185.235.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 10 Apr 2023 18:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:de:7e:8b:8e:95:fe:0a:8b:f0:63:80:d8:9b:5b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Jan  2 09:44:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1033309d630a2705f5d51ee5eaf66fa2874b5212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8c:34:09:42:e9:37:af:75:50:95:80:16:b3:
                    97:ee:2d:f2:c3:03:70:e3:2b:6d:1f:3a:9c:14:8a:
                    a4:9a:29:7d:25:81:d7:b4:8c:10:bf:10:b7:f3:8c:
                    b4:0f:61:6a:de:3e:df:46:c9:51:cf:d1:43:2b:57:
                    d7:be:dd:5f:30:2e:fe:cd:d6:9b:4e:80:f0:28:12:
                    f9:d4:8c:ab:01:14:68:6c:86:f4:48:f1:91:f8:7b:
                    44:be:cc:e5:a7:d8:72:0d:4b:96:9d:60:19:9b:6e:
                    04:f2:40:ef:15:67:62:cd:57:8f:b0:4f:f8:08:87:
                    fc:bf:93:71:aa:7c:91:b5:4a:7d:db:fa:21:1d:09:
                    20:b0:69:d5:61:3f:ae:4c:4c:d1:0b:3e:97:ad:42:
                    af:64:11:c0:67:cd:47:ed:12:93:90:1a:33:16:d4:
                    2d:39:d6:33:05:15:ba:d8:66:5b:d9:af:56:62:3e:
                    d1:68:7b:3b:a3:c4:07:f1:28:dc:da:7a:7a:6f:74:
                    1d:38:df:cb:34:d9:42:f8:eb:37:32:35:87:ac:bb:
                    02:3f:37:dc:0d:32:06:c5:75:38:98:74:43:06:f5:
                    09:58:8c:13:42:cc:7e:b6:e9:64:9c:2b:f7:fc:1f:
                    a3:d4:0d:7d:38:f6:ba:61:f8:1f:08:33:56:73:b7:
                    03:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:33:30:9D:63:0A:27:05:F5:D5:1E:E5:EA:F6:6F:A2:87:4B:52:12
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/EDMwnWMKJwX11R7l6vZvoodLUhI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.235.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:15:b6:0c:c6:bb:90:f0:a6:f1:75:1f:d2:80:2c:c5:5c:56:
         d3:20:81:a4:12:7a:e9:ac:ce:67:51:3e:dc:76:16:52:0f:9e:
         aa:70:81:31:82:2e:9d:bf:c4:19:84:ca:e3:d7:92:76:14:0a:
         9c:85:32:99:4e:03:7f:ac:84:35:85:d3:03:23:95:d2:fb:81:
         58:33:38:92:9d:a1:fe:92:71:69:5b:21:e2:1c:d0:3e:5c:64:
         63:4d:0c:33:7c:5d:b6:fc:2f:22:00:72:57:d0:6f:af:88:e4:
         e8:bf:57:b3:aa:ff:d5:39:ce:8e:eb:c1:80:0c:05:4e:0c:f2:
         9c:e9:b4:1a:b7:ea:23:cd:a5:b9:28:d5:93:02:4d:b0:d1:e3:
         b6:af:73:07:bb:05:6c:3e:03:7f:52:4f:a9:80:ea:f7:d6:87:
         8e:18:a8:ba:c9:9b:70:a4:bb:a2:a8:2e:e7:f0:20:e5:c8:74:
         e4:6e:ff:80:fd:b6:e6:87:d5:87:80:34:94:30:5a:16:63:d2:
         cb:2b:ab:51:ea:08:6b:72:db:0f:2e:6a:2f:b6:2a:02:a1:f6:
         e5:02:94:59:35:82:69:a1:8e:3c:3c:e1:dd:a1:3d:22:84:d0:
         c7:9c:f8:8c:fd:55:0a:a4:b0:5d:7b:78:31:a2:d4:46:7b:64:
         27:71:c1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org