Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/33G3BtB05UlqMPiChzT2P7Lpy_c.roa
File:                     33G3BtB05UlqMPiChzT2P7Lpy_c.roa (raw, json)
Hash identifier:          wLIyxn92zpxhp5ygVRQxE97eyGm9b4FULq70atxgC2o=
Subject key identifier:   DF:71:B7:06:D0:74:E5:49:6A:30:F8:82:87:34:F6:3F:B2:E9:CB:F7
Certificate issuer:       /CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Certificate serial:       018572FA5BC02858F403298FB2636DC8D926
Authority key identifier: EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/33G3BtB05UlqMPiChzT2P7Lpy_c.roa
Signing time:             Mon 02 Jan 2023 14:54:48 +0000
ROA not before:           Mon 02 Jan 2023 14:54:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        185.192.36.0/22 maxlen: 23

Validation:               Failed, certificate revoked on Mon 18 Dec 2023 08:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:fa:5b:c0:28:58:f4:03:29:8f:b2:63:6d:c8:d9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
        Validity
            Not Before: Jan  2 14:54:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=df71b706d074e5496a30f8828734f63fb2e9cbf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:d8:6f:98:77:49:6a:39:95:09:d8:54:81:
                    74:47:d9:33:7a:fb:d3:b1:9f:c3:a4:05:db:1a:a2:
                    35:92:14:f4:fb:cf:2c:6f:c0:7f:98:47:88:74:36:
                    e7:f0:21:a9:3e:1b:44:bb:df:9e:90:9f:5e:67:f9:
                    0c:e4:9f:7b:f6:f7:6a:69:c1:72:c3:ff:51:f3:3b:
                    f6:02:a3:63:5f:2a:b3:94:de:bb:95:4a:7b:1f:61:
                    37:4b:32:d9:c3:a9:53:63:44:76:56:4d:74:65:0d:
                    37:15:d9:c6:44:23:5e:2f:da:6d:1f:01:4e:6e:78:
                    14:d0:9c:f1:5b:33:cd:76:c6:7b:7b:1a:7c:86:9e:
                    49:33:c3:00:90:4a:ef:9a:ab:2a:ab:a1:7a:0f:36:
                    ac:68:94:39:55:5b:86:a3:a7:df:fd:ed:54:c6:84:
                    63:b0:4d:34:9f:ca:ee:36:ca:62:b2:0c:04:88:fb:
                    5e:3d:60:fc:27:29:2a:81:4c:db:f2:54:47:b9:57:
                    2a:b4:96:a7:7d:b7:e0:63:14:93:a4:bd:76:7f:aa:
                    42:84:ad:dd:06:6f:94:a0:03:69:01:2d:96:c5:a9:
                    62:ee:91:05:93:a4:ba:f1:0c:d7:cf:48:a6:2a:54:
                    1c:53:32:f1:04:0b:8e:fa:4e:04:19:c5:a9:7b:7d:
                    b6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:71:B7:06:D0:74:E5:49:6A:30:F8:82:87:34:F6:3F:B2:E9:CB:F7
            X509v3 Authority Key Identifier:
                keyid:EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/33G3BtB05UlqMPiChzT2P7Lpy_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.192.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:c9:31:f1:49:db:01:f5:43:ca:89:f9:3f:cd:ce:13:20:46:
         88:61:51:a0:0c:6c:0f:ec:2d:90:9d:f0:c9:89:57:2c:d2:c8:
         0e:52:23:a5:52:eb:8e:a3:7d:c2:5c:c1:52:3b:e1:65:96:3b:
         8e:27:06:d5:cd:0b:29:88:7f:68:c4:a0:b2:59:77:26:6c:e3:
         e5:5c:65:ee:b9:12:2d:cf:6c:14:31:34:19:a7:13:13:60:69:
         91:3b:2a:50:b3:c9:37:03:58:e7:72:a0:11:dc:be:d9:be:bf:
         9f:4f:86:5d:46:00:c6:8f:f5:b5:63:15:77:89:a7:12:32:58:
         8b:c9:21:a7:f2:c9:f0:30:5f:43:04:1d:27:69:e2:b8:b3:5e:
         e7:6f:5c:91:50:e3:33:ef:f0:65:40:8a:72:e0:84:fb:0e:09:
         f2:13:3e:12:6c:d7:d7:82:b8:d3:ca:33:f3:f3:75:43:ae:55:
         8e:0b:8f:57:7d:0a:c3:ca:d9:e3:81:89:4c:c8:bd:b2:c3:49:
         81:17:26:3c:15:6a:08:78:5d:5a:c4:94:98:fd:cb:de:f0:24:
         25:eb:52:e2:67:58:68:20:16:06:5b:3c:1b:e7:b0:6b:ac:91:
         3c:8a:cf:a2:2b:81:3e:1b:5c:bb:1c:af:2e:e2:ab:da:1c:df:
         54:58:4b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:05 2024 by rpki-client on console-fra.rpki-client.org