Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/V62N4-yENn46nsCL8hjYt2Lmf-A.roa
File:                     V62N4-yENn46nsCL8hjYt2Lmf-A.roa (raw, json)
Hash identifier:          cWVKvPiBxk9YLaNLAPM7+S34HWxKCM1OQzUApxqMtrE=
Subject key identifier:   57:AD:8D:E3:EC:84:36:7E:3A:9E:C0:8B:F2:18:D8:B7:62:E6:7F:E0
Certificate issuer:       /CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Certificate serial:       01859715618E15016FD1DEC52E6C1EE17C1D
Authority key identifier: 72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/V62N4-yENn46nsCL8hjYt2Lmf-A.roa
Signing time:             Mon 09 Jan 2023 15:10:38 +0000
ROA not before:           Mon 09 Jan 2023 15:10:38 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34913
IP address blocks:        185.227.233.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:97:15:61:8e:15:01:6f:d1:de:c5:2e:6c:1e:e1:7c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
        Validity
            Not Before: Jan  9 15:10:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=57ad8de3ec84367e3a9ec08bf218d8b762e67fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:49:32:e2:72:fa:92:dd:03:3c:5d:54:8d:
                    86:bc:1a:10:68:41:36:9b:14:90:bc:17:2d:e7:7e:
                    a3:da:f9:27:c9:53:cc:0e:ea:a7:76:cb:6e:0a:04:
                    05:f0:b0:56:01:8b:7e:d7:ba:2f:18:f4:a2:ad:c2:
                    cd:0f:a7:43:25:55:ea:fb:12:db:47:85:a9:20:42:
                    f5:65:8c:4c:51:0b:8e:89:82:e8:6c:2f:32:60:d8:
                    87:89:5e:ba:75:98:56:aa:67:4a:99:5e:c5:3e:b6:
                    98:8c:88:4a:59:22:0e:06:32:73:17:0d:d5:76:23:
                    03:50:4d:d2:61:f8:db:c5:e0:e5:3b:17:37:7f:32:
                    33:94:3b:7b:d2:f8:0b:a6:7e:6e:aa:4f:0b:e7:53:
                    6d:ea:33:6c:c6:fc:58:6a:44:21:df:7b:bf:be:dd:
                    87:8b:9b:12:54:18:74:57:8e:1f:b4:47:68:da:60:
                    f1:e1:64:65:99:ee:bc:d1:13:d5:5b:73:82:36:ef:
                    16:0c:0c:40:54:0c:49:e2:6a:65:4d:75:a3:d3:76:
                    cb:63:f8:67:5c:70:69:f9:6d:92:fe:98:d6:9d:a8:
                    b6:73:07:4d:cd:1c:84:e2:58:64:e2:9d:da:c8:b4:
                    8a:98:1f:ac:55:fa:e6:12:99:65:87:1a:6f:20:f4:
                    eb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AD:8D:E3:EC:84:36:7E:3A:9E:C0:8B:F2:18:D8:B7:62:E6:7F:E0
            X509v3 Authority Key Identifier:
                keyid:72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/V62N4-yENn46nsCL8hjYt2Lmf-A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.227.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:7f:87:a6:c2:8c:9a:21:e6:44:4c:3d:f5:11:e7:4a:90:e3:
         d8:9d:15:3f:76:c4:be:ea:c3:4e:ac:e3:7c:c8:20:51:55:c1:
         ef:34:6e:b4:30:fa:6c:98:2e:91:cf:c1:02:83:86:04:ab:63:
         6e:f2:db:08:d2:ad:31:c8:a9:10:f9:9a:03:9b:e8:ff:d3:6d:
         79:7b:54:9c:33:38:62:18:22:74:e5:ab:6e:32:b9:6e:f9:11:
         f3:8e:08:7c:2f:c9:a7:53:72:ba:62:e0:b4:9d:71:78:a5:9b:
         8f:74:78:3b:1d:ef:f6:12:4f:2f:03:ea:e7:7a:89:6a:5d:fb:
         c2:d9:49:f8:95:f8:3d:44:e6:6f:81:31:7b:49:e2:19:c4:c2:
         9b:6e:6b:8d:ec:02:41:fb:2a:a0:db:cd:7e:37:b6:d6:88:09:
         34:35:0e:55:50:5a:08:a8:a2:00:9b:e2:8c:00:ff:aa:1d:64:
         0d:e2:7d:fd:06:15:33:02:46:9a:b5:8e:e6:6c:14:7e:fd:5b:
         62:d6:11:d6:46:5d:28:9a:6f:87:53:0c:ea:db:d0:c7:11:58:
         5c:55:64:cb:d9:25:b6:a6:2c:53:10:cf:80:09:08:3c:22:a8:
         d9:af:6c:e1:ae:7f:49:a9:75:2d:d8:1e:64:78:99:b0:c6:58:
         90:50:33:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:24 2024 by rpki-client on console-ams.rpki-client.org