Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/1-BKkeVA6ifGITeAcfYQ6WjR2Zyo.roa
File:                     1-BKkeVA6ifGITeAcfYQ6WjR2Zyo.roa (raw, json)
Hash identifier:          Ly5wlAHLv6ft9GtTD6R5iJ0lTM6pwqn6Ym4AuaP+ygk=
Subject key identifier:   F8:12:A4:79:50:3A:89:F1:88:4D:E0:1C:7D:84:3A:5A:34:76:67:2A
Certificate issuer:       /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial:       01856DD413CAAA4552B3E01D5ABAD691BCE3
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/1-BKkeVA6ifGITeAcfYQ6WjR2Zyo.roa
Signing time:             Sun 01 Jan 2023 14:54:53 +0000
ROA not before:           Sun 01 Jan 2023 14:54:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203511
IP address blocks:        185.250.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 Mar 2023 07:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:d4:13:ca:aa:45:52:b3:e0:1d:5a:ba:d6:91:bc:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
        Validity
            Not Before: Jan  1 14:54:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f812a479503a89f1884de01c7d843a5a3476672a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b4:44:ff:30:7a:8e:e6:bc:fb:fb:cf:e4:5b:
                    83:a9:4d:d8:9e:c4:16:c8:fc:3c:c4:31:a1:c6:58:
                    79:d9:00:1f:f0:c1:88:d6:53:4f:b2:3f:1a:9c:07:
                    6b:b8:46:33:87:96:b7:ae:ca:5e:8c:65:a7:51:b9:
                    7d:e0:be:0a:e0:69:94:72:91:a2:1d:cf:d3:c9:57:
                    a3:41:7a:bc:70:18:b3:fa:17:34:b0:80:37:a6:17:
                    08:ea:54:f4:5d:f0:e7:11:07:bb:c1:87:d1:09:d8:
                    5a:93:cf:a4:c0:50:3a:09:c2:49:f0:ee:0d:07:70:
                    74:06:6b:3d:46:2a:69:ee:b1:4a:5d:e0:e3:13:53:
                    f4:ba:8a:46:e8:f4:0b:79:7b:e9:55:19:9a:c6:52:
                    a1:49:f8:d8:aa:94:3a:a0:12:e3:80:be:1c:53:09:
                    4f:9b:9b:b4:49:c9:26:02:91:8e:f7:70:74:80:4d:
                    fb:55:8b:cc:3a:f9:ef:85:3f:58:73:cb:39:d9:c9:
                    fd:b3:c7:90:c9:ed:da:f1:eb:65:a4:54:76:52:67:
                    ae:fd:e1:2b:f5:dc:18:da:f8:eb:17:cd:e0:1c:5f:
                    98:4f:44:e2:2c:5a:5f:1e:51:0e:f2:06:4e:44:d4:
                    88:8a:45:fc:b1:86:25:f5:de:33:c5:b9:77:07:c9:
                    21:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:12:A4:79:50:3A:89:F1:88:4D:E0:1C:7D:84:3A:5A:34:76:67:2A
            X509v3 Authority Key Identifier:
                keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/1-BKkeVA6ifGITeAcfYQ6WjR2Zyo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.250.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:8e:3a:14:6a:c1:c1:1f:1e:ae:dd:85:2b:31:d2:1b:1b:24:
         a0:dc:e5:38:d0:a1:cd:e1:ff:d5:44:02:50:8b:af:65:bd:b4:
         f2:5e:f9:8f:66:97:c2:c3:45:25:d2:4a:7d:06:68:5e:b9:20:
         1c:c9:94:17:94:a3:2c:86:91:5f:1e:2a:34:4a:e4:7c:a2:8e:
         86:80:87:13:ed:39:da:59:e6:9b:26:b6:71:f5:04:ed:d7:52:
         4f:44:98:c4:ac:28:2b:2a:8a:ba:5e:48:6b:dc:4b:2c:49:58:
         d5:60:e1:fb:ec:c7:6d:76:30:b9:85:36:ad:34:3c:2d:96:dc:
         66:cc:2f:95:0e:f1:e6:37:7b:29:e4:58:45:ca:6c:65:3f:de:
         28:aa:0d:25:a8:5a:cb:9c:59:23:a5:07:9e:94:2a:cc:7a:45:
         9b:78:a2:0e:37:9a:fb:c5:29:25:68:e2:10:fd:d5:eb:35:f5:
         3d:7b:81:ce:b9:cd:fe:3d:d6:bb:93:0e:8c:59:e1:21:e2:58:
         fe:c0:03:e1:71:58:07:db:e6:4e:8a:29:53:4b:49:60:9c:67:
         0b:24:de:6c:b6:2e:c8:cf:3a:7b:f3:27:49:b9:70:94:3a:b9:
         2d:cc:6a:6b:25:ac:a9:88:30:d1:c3:02:29:4b:1f:78:5b:65:
         e1:df:2f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:47 2024 by rpki-client on console-ams.rpki-client.org