Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/Jb2bH9eG8mL2dC4yFpMfxgLjZq0.roa
File:                     Jb2bH9eG8mL2dC4yFpMfxgLjZq0.roa (raw, json)
Hash identifier:          Vuetp6iEoMTkaXFZktPkZS716nx4Wfw1bB/3ThTrO/k=
Subject key identifier:   25:BD:9B:1F:D7:86:F2:62:F6:74:2E:32:16:93:1F:C6:02:E3:66:AD
Certificate issuer:       /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial:       01857246C952CACED2E4FB327884487520D9
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/Jb2bH9eG8mL2dC4yFpMfxgLjZq0.roa
Signing time:             Mon 02 Jan 2023 11:38:39 +0000
ROA not before:           Mon 02 Jan 2023 11:38:39 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201341
IP address blocks:        185.122.143.0/24 maxlen: 24
                          185.122.141.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:c9:52:ca:ce:d2:e4:fb:32:78:84:48:75:20:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
        Validity
            Not Before: Jan  2 11:38:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=25bd9b1fd786f262f6742e3216931fc602e366ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:36:e7:46:6f:6d:bd:9e:65:42:76:2d:24:d4:
                    d3:bb:89:4a:72:52:0a:d0:3f:1f:52:15:cb:26:c4:
                    1e:06:97:5b:be:21:c9:5c:f4:c6:2f:58:ff:5d:71:
                    de:56:e7:bf:d8:a6:a3:e9:22:6e:2a:fc:ff:79:7d:
                    ee:e2:7d:8d:95:e5:6c:ec:07:30:9e:ff:be:ea:41:
                    c2:1c:ec:b1:6b:80:95:b8:b8:1c:b4:0f:5f:83:db:
                    fc:17:54:79:b8:db:3d:4e:c0:f8:3d:4e:3e:5f:ee:
                    1b:79:94:96:0a:92:09:8d:10:f2:c4:1f:07:2a:51:
                    ef:23:43:e7:ff:06:25:94:78:35:db:2b:b4:42:34:
                    dc:21:f9:94:44:98:9b:74:3a:57:ae:3b:08:9a:62:
                    aa:58:ea:21:d2:4c:6e:e9:8b:43:df:5a:79:e5:cf:
                    08:00:a8:b9:d6:0a:e3:67:4d:df:7a:7f:45:74:b2:
                    7b:bf:cc:93:7f:ba:c4:6c:ee:dc:53:3b:1e:27:fb:
                    c0:c4:36:5e:2e:1b:f5:f4:55:58:ee:21:03:85:36:
                    fb:52:3c:40:e1:d1:e8:ef:05:38:ed:96:1b:24:51:
                    c6:94:84:c9:55:7d:c5:71:86:b7:41:37:b4:dc:e8:
                    4e:28:f5:bb:da:7f:be:d0:df:27:93:b5:4b:97:62:
                    fb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BD:9B:1F:D7:86:F2:62:F6:74:2E:32:16:93:1F:C6:02:E3:66:AD
            X509v3 Authority Key Identifier:
                keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/Jb2bH9eG8mL2dC4yFpMfxgLjZq0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.122.141.0/24
                  185.122.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:61:aa:98:37:80:89:ac:01:4b:8d:83:6d:39:79:8b:35:d9:
         c2:5d:c0:50:92:f2:5d:46:94:e6:1e:c8:9c:b8:ac:46:d5:bf:
         fe:31:30:83:c0:73:50:2f:e8:d8:3a:ba:dc:27:96:24:af:b6:
         65:80:45:7c:b5:fe:79:e6:ad:66:84:66:ff:d5:5a:83:04:b1:
         00:32:dc:1c:3a:0b:b1:39:6e:ef:25:21:b6:35:7c:4a:b7:5a:
         0a:a6:8e:e0:d4:68:d2:41:76:58:a5:a4:35:83:f5:00:39:59:
         64:d2:69:33:7c:45:60:4f:66:ea:54:ef:ea:5f:a0:ca:9f:75:
         fc:21:23:6c:75:8a:a1:7d:27:3f:a5:11:00:69:1d:7e:fc:04:
         e1:88:37:c6:67:8e:c7:2f:91:67:a2:3b:60:13:01:1c:0c:6f:
         65:3e:0e:b4:fe:ac:fc:b2:1e:c3:5a:cf:ce:96:e0:ec:d7:c0:
         49:db:23:1e:05:6c:b3:ef:40:8f:99:94:84:42:36:5d:5a:7c:
         bb:26:ba:86:d4:57:7d:9c:17:2d:b0:df:bc:15:f8:95:6c:f5:
         52:fa:ec:06:39:50:bc:6c:d5:cb:4a:13:7e:33:25:56:e5:a5:
         dd:89:69:6f:ad:24:42:e0:ae:b8:bf:18:75:f3:8e:0f:f1:49:
         fd:98:06:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:58 2024 by rpki-client on console-fra.rpki-client.org