Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/JSKCkL3TSUHFqeoSl4EoYjjf_zk.roa
File:                     JSKCkL3TSUHFqeoSl4EoYjjf_zk.roa (raw, json)
Hash identifier:          aTN0ybBq3WtcIMjdIoiUrk1WJ/06mY7aU1sT8xd/srA=
Subject key identifier:   25:22:82:90:BD:D3:49:41:C5:A9:EA:12:97:81:28:62:38:DF:FF:39
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       018613A792DF12388656DEEE178A67FA7444
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/JSKCkL3TSUHFqeoSl4EoYjjf_zk.roa
Signing time:             Thu 02 Feb 2023 19:43:14 +0000
ROA not before:           Thu 02 Feb 2023 19:43:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213186
IP address blocks:        185.179.218.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sat 02 Dec 2023 10:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:13:a7:92:df:12:38:86:56:de:ee:17:8a:67:fa:74:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Feb  2 19:43:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=25228290bdd34941c5a9ea129781286238dfff39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e0:2b:6d:62:8c:70:69:7c:37:7c:93:73:64:
                    f9:62:0a:4b:3d:5d:8f:52:0a:a5:4d:ca:4a:3d:de:
                    50:c9:51:af:82:40:c7:c3:8d:06:4b:b9:09:96:c2:
                    2c:00:4f:4f:ef:4c:d0:64:af:c1:6d:54:92:88:62:
                    7f:08:93:4b:d7:3b:b5:13:f2:79:68:02:e1:cb:db:
                    d3:fc:da:8c:c2:a6:8d:64:7e:d3:8e:90:a1:68:1b:
                    6a:ec:bc:fe:c4:13:10:2b:f9:39:81:00:3e:da:18:
                    cb:a2:90:22:56:98:ff:50:43:d6:30:fb:60:df:fb:
                    39:68:82:4d:a4:d4:8d:d1:b2:f4:28:5f:a9:81:eb:
                    ec:40:00:4c:20:13:6c:5a:71:82:c2:a6:11:8f:02:
                    f7:5c:00:e8:25:1c:45:ee:d4:68:54:33:ec:ae:60:
                    cb:3b:b9:79:ca:c1:72:cb:ab:9f:f7:11:8d:53:6e:
                    5c:1d:b2:23:15:ff:7a:da:d0:a8:4d:78:0d:c9:ee:
                    0a:cf:bc:85:59:d4:45:4a:8c:67:67:91:7e:21:f9:
                    f6:f0:fc:f4:6a:58:6a:d4:3f:b5:ee:e2:5c:1e:2f:
                    db:06:e6:97:f7:fa:b7:f0:05:bf:e9:42:94:c3:6c:
                    77:3e:da:e6:a1:32:8d:81:48:38:f5:92:e2:67:c2:
                    67:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:22:82:90:BD:D3:49:41:C5:A9:EA:12:97:81:28:62:38:DF:FF:39
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/JSKCkL3TSUHFqeoSl4EoYjjf_zk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:e7:fa:1b:90:68:fb:44:f2:cf:a5:9c:ec:5a:b3:c4:a5:80:
         56:15:6a:fa:d4:13:ad:9c:1e:50:44:86:8e:ff:f4:d7:c2:23:
         6f:bd:4a:42:df:4c:f4:f0:4b:93:04:7a:25:90:b3:1a:8c:9a:
         a8:3e:55:9a:11:8c:b2:fe:93:ad:89:21:c4:80:15:36:5b:ab:
         9b:2a:21:fa:e3:1a:fb:2e:77:41:ef:e4:b6:38:ea:95:4c:f0:
         30:47:b1:4f:5f:71:05:c7:5e:1d:f4:63:08:5d:0e:18:f9:5e:
         d0:f5:e7:de:bf:73:a9:71:4a:d0:60:e5:bc:7e:fc:fd:35:95:
         25:ac:78:72:28:7a:3a:3c:00:66:80:fc:03:2b:6a:3f:b8:ca:
         9d:a0:8e:ca:db:54:4d:20:8e:61:07:67:07:b7:07:f1:e4:b7:
         e0:7d:49:6f:26:a4:81:9f:df:71:00:06:98:42:eb:27:82:d6:
         0f:10:f2:58:07:e5:be:20:a8:f4:29:a4:3d:d1:e4:78:94:07:
         68:ac:51:02:f2:f0:72:33:49:ea:80:aa:ad:55:43:24:04:f7:
         ae:f0:7f:6c:4b:28:6f:21:ba:0a:b6:f7:eb:37:25:4c:c1:76:
         2f:61:a2:6b:4c:6c:bf:18:b4:67:98:8d:97:e2:e1:28:32:20:
         87:ba:fe:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:38 2024 by rpki-client on console-ams.rpki-client.org