Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/gCy2E5uoue9YCJ4zeYS8aT4Z7hs.roa
File:                     gCy2E5uoue9YCJ4zeYS8aT4Z7hs.roa (raw, json)
Hash identifier:          lX4BCDbjw36UygPcACDlrZIZr8lUomu+kWE4uwixU2Y=
Subject key identifier:   80:2C:B6:13:9B:A8:B9:EF:58:08:9E:33:79:84:BC:69:3E:19:EE:1B
Certificate issuer:       /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial:       01869272DB07746815D55C49C5A7C4FB973E
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/gCy2E5uoue9YCJ4zeYS8aT4Z7hs.roa
Signing time:             Mon 27 Feb 2023 10:37:26 +0000
ROA not before:           Mon 27 Feb 2023 10:37:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44477
IP address blocks:        185.231.205.0/24 maxlen: 24
                          185.231.204.0/24 maxlen: 24
                          185.231.206.0/24 maxlen: 24
                          185.231.207.0/24 maxlen: 24
                          141.98.169.0/24 maxlen: 24
                          45.84.0.0/24 maxlen: 24
                          193.43.147.0/24 maxlen: 24
                          45.84.1.0/24 maxlen: 24
                          188.119.122.0/24 maxlen: 24
                          188.119.123.0/24 maxlen: 24
                          45.89.52.0/24 maxlen: 24
                          45.159.250.0/24 maxlen: 24
                          45.159.249.0/24 maxlen: 24
                          45.159.248.0/24 maxlen: 24
                          45.159.251.0/24 maxlen: 24
                          45.67.35.0/24 maxlen: 24
                          5.182.36.0/24 maxlen: 24
                          5.182.38.0/24 maxlen: 24
                          5.182.39.0/24 maxlen: 24
                          193.57.138.0/24 maxlen: 24
                          193.57.137.0/24 maxlen: 24
                          193.57.136.0/24 maxlen: 24
                          93.185.166.0/24 maxlen: 24
                          45.93.8.0/24 maxlen: 24
                          45.93.9.0/24 maxlen: 24
                          45.87.153.0/24 maxlen: 24
                          45.87.154.0/24 maxlen: 24
                          45.8.145.0/24 maxlen: 24
                          45.8.144.0/24 maxlen: 24
                          193.46.57.0/24 maxlen: 24
                          193.46.56.0/24 maxlen: 24
                          194.4.48.0/24 maxlen: 24
                          194.4.51.0/24 maxlen: 24
                          194.4.50.0/24 maxlen: 24
                          194.4.49.0/24 maxlen: 24
                          194.116.172.0/24 maxlen: 24
                          194.116.191.0/24 maxlen: 24
                          194.116.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 Mar 2023 20:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:92:72:db:07:74:68:15:d5:5c:49:c5:a7:c4:fb:97:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
        Validity
            Not Before: Feb 27 10:37:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=802cb6139ba8b9ef58089e337984bc693e19ee1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b4:d2:8d:6e:54:e8:25:f2:18:15:3e:e5:06:
                    f4:d0:41:56:68:94:14:6a:28:d4:a5:f4:8d:20:ae:
                    73:9d:a5:78:e0:a8:16:ae:e3:6f:3f:15:59:fa:9c:
                    98:34:eb:c9:3d:cd:00:91:27:58:2b:fb:64:6d:58:
                    b6:94:c4:46:36:95:85:e4:94:fd:8d:8b:36:15:17:
                    d0:83:b4:41:0d:31:fc:ed:3a:2c:d4:8c:29:ac:0f:
                    d6:cf:eb:b5:ec:c7:07:c3:a6:dc:6e:44:9e:d3:40:
                    cd:04:bb:00:8d:41:13:8a:9c:65:f0:40:7b:d9:14:
                    94:21:d8:56:22:9a:8f:2d:7b:4f:00:25:4c:bc:3a:
                    a9:0c:aa:35:cb:ea:a1:75:1b:04:ce:76:5a:52:43:
                    61:07:ee:00:d7:ed:32:92:64:98:64:d9:70:92:bc:
                    0a:4a:cb:26:67:68:1a:dd:df:6e:07:a8:d9:b1:48:
                    f9:8c:a0:e3:ef:51:ab:ac:3a:0d:32:38:50:2f:0c:
                    1b:de:50:9d:3b:ee:bc:d2:6a:d9:0c:eb:3f:df:f2:
                    e6:d8:f0:38:95:b6:ac:ee:12:9e:e9:15:9a:f1:9c:
                    53:2f:79:49:a4:aa:bb:4e:23:e8:25:7d:b5:a5:9d:
                    54:37:1a:3d:d5:71:5d:27:ba:dc:51:8c:3e:d9:bd:
                    1a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2C:B6:13:9B:A8:B9:EF:58:08:9E:33:79:84:BC:69:3E:19:EE:1B
            X509v3 Authority Key Identifier:
                keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/gCy2E5uoue9YCJ4zeYS8aT4Z7hs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.36.0/24
                  5.182.38.0/23
                  45.8.144.0/23
                  45.67.35.0/24
                  45.84.0.0/23
                  45.87.153.0-45.87.154.255
                  45.89.52.0/24
                  45.93.8.0/23
                  45.159.248.0/22
                  93.185.166.0/24
                  141.98.169.0/24
                  185.231.204.0/22
                  188.119.122.0/23
                  193.43.147.0/24
                  193.46.56.0/23
                  193.57.136.0-193.57.138.255
                  194.4.48.0/22
                  194.116.172.0/24
                  194.116.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:11:87:62:2f:74:7a:bc:42:62:cd:0e:8c:9c:5b:0f:a7:ed:
         6a:10:3f:7b:a8:f6:bf:df:6b:2d:d5:25:d9:9b:3d:2c:2d:a0:
         d3:38:97:de:b8:db:f9:4f:e9:57:d8:a0:af:df:5d:b1:74:38:
         8b:50:3b:07:84:3b:1f:3d:f8:2e:b8:07:ef:1e:3d:08:89:77:
         e7:58:d7:88:35:41:04:bc:2d:59:ee:f4:00:a8:4d:31:f4:59:
         a3:17:d9:d1:3c:4c:56:4d:d3:2d:c3:d0:10:04:09:1c:97:ec:
         90:4e:5c:34:d9:54:18:85:2d:d5:b8:bb:2b:cb:af:e3:cf:19:
         12:b5:32:55:57:f3:16:3e:04:ee:60:54:85:d8:bd:8d:78:c3:
         ea:6f:59:c4:c2:53:e5:99:91:e9:fc:84:d5:d7:34:7d:28:06:
         58:28:bc:58:88:c7:dc:e9:d6:b3:80:54:9b:2d:0b:09:8b:ad:
         b9:7c:47:a9:66:58:69:7c:1b:6a:f6:de:3a:05:ad:1f:33:69:
         46:20:6a:cc:60:3b:9e:49:a8:a7:5b:49:77:c5:b5:9f:5e:0c:
         37:83:55:18:80:b2:b7:7b:5f:c4:e2:c8:e7:e8:9f:f7:e6:2a:
         98:65:11:bc:81:8a:da:d4:22:35:30:86:05:37:7e:86:72:f2:
         b2:27:3c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:24 2024 by rpki-client on console-fra.rpki-client.org