Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/JuNN82HuDJN9GhxTLrqdzzrxoZg.roa
File:                     JuNN82HuDJN9GhxTLrqdzzrxoZg.roa (raw, json)
Hash identifier:          Mi2J9jqnd3u09RQ4PhHoGD6YnNYAxcOyKon2fcCkDAs=
Subject key identifier:   26:E3:4D:F3:61:EE:0C:93:7D:1A:1C:53:2E:BA:9D:CF:3A:F1:A1:98
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       018612A55286E9368D49B8178FF973D92A28
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/JuNN82HuDJN9GhxTLrqdzzrxoZg.roa
Signing time:             Thu 02 Feb 2023 15:01:09 +0000
ROA not before:           Thu 02 Feb 2023 15:01:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.81.28.0/22 maxlen: 24
                          185.179.218.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 02 Feb 2023 19:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:12:a5:52:86:e9:36:8d:49:b8:17:8f:f9:73:d9:2a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Feb  2 15:01:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26e34df361ee0c937d1a1c532eba9dcf3af1a198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9f:fd:d8:f4:6e:6b:18:b8:a4:3c:a2:46:f0:
                    2c:67:a7:0e:56:cc:fe:94:77:15:a4:e9:1d:08:7f:
                    92:50:be:0a:8b:5f:ef:b8:4e:0b:1c:5b:43:ad:74:
                    a2:f8:00:1d:fb:cc:95:ba:ec:49:fc:a9:83:34:d0:
                    32:6a:56:22:2e:f7:6f:37:40:6d:4a:c8:f2:93:e5:
                    94:52:8e:e8:6a:33:85:3a:a4:50:a0:36:79:2a:92:
                    7f:6f:cd:d8:2f:10:4b:d0:66:a9:b2:b4:ab:4c:36:
                    d7:8c:39:ff:f0:17:2c:4c:ea:c1:38:1b:68:6b:ba:
                    9e:08:82:c0:f3:09:31:23:28:2b:b1:4c:ba:3a:3d:
                    20:8c:c4:9c:0d:04:0e:4e:90:a1:b3:36:59:38:39:
                    2d:66:ee:5f:72:b4:c3:d3:7e:d5:5f:4b:a1:6e:48:
                    6f:da:73:68:b5:32:60:39:be:8e:10:8e:01:7f:ed:
                    e8:1e:45:55:38:6d:60:87:78:3d:4e:e9:c1:7c:14:
                    18:69:60:16:2d:f2:22:5b:2a:33:49:0b:b7:3f:c8:
                    c0:c9:2f:1a:0d:62:65:21:2b:dd:26:c6:a8:28:06:
                    1c:71:bd:d2:c9:2d:55:52:c2:5d:9c:8c:c9:1f:d8:
                    40:2a:03:42:05:c6:68:3b:80:2d:3d:15:99:dc:e7:
                    a1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E3:4D:F3:61:EE:0C:93:7D:1A:1C:53:2E:BA:9D:CF:3A:F1:A1:98
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/JuNN82HuDJN9GhxTLrqdzzrxoZg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.28.0/22
                  185.179.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:92:4d:06:5d:b9:f3:f6:4a:d6:91:49:00:8b:0a:46:16:25:
         87:86:26:19:53:fa:24:f1:7a:df:9d:5b:a6:a5:fb:a7:63:ca:
         77:2a:98:fe:1c:1a:9f:e4:cf:86:82:15:31:7f:a4:14:d4:0a:
         8e:f4:2a:01:d5:d5:e3:da:b8:58:5d:3f:99:3e:8d:50:da:7d:
         9f:88:03:f9:0b:7c:97:9b:72:7c:64:77:62:79:d0:d7:f9:a4:
         5d:bf:51:03:e4:8a:bc:2b:65:99:99:af:74:61:7f:6d:c3:ec:
         a2:f8:37:10:49:ce:d4:0a:7d:86:14:25:65:28:ef:f7:d4:ef:
         5f:b0:c6:91:b2:61:5c:fe:28:54:dd:5d:b3:59:04:44:5d:ca:
         26:17:aa:b2:8c:0f:e1:ff:a4:03:58:97:9a:0e:65:67:61:33:
         b1:b3:9a:89:a4:1c:7f:f1:11:88:d0:dd:ed:e3:55:3d:16:02:
         7b:91:2d:18:5e:79:dc:8e:aa:45:35:4e:18:50:a1:5f:6b:c8:
         09:89:6c:1f:64:3a:3f:3d:43:9f:9e:00:5b:a1:34:79:2a:b7:
         64:2a:87:ac:49:17:5d:2d:88:a9:48:83:78:50:be:2a:97:39:
         2c:8c:10:b3:ac:94:3e:1e:79:03:54:3d:75:98:e1:fe:11:c5:
         9e:1f:3e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-fra.rpki-client.org