Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/L9bwEUbs6F12S_H_3xPYjyxGkd0.roa
File:                     L9bwEUbs6F12S_H_3xPYjyxGkd0.roa (raw, json)
Hash identifier:          emwnyqktzHy7U90cdJ2uLbWczkH8M2Uo0EOsqoaiGTI=
Subject key identifier:   2F:D6:F0:11:46:EC:E8:5D:76:4B:F1:FF:DF:13:D8:8F:2C:46:91:DD
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       0185DB43217BB62AC22131CF4A02E0ACF5F6
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/L9bwEUbs6F12S_H_3xPYjyxGkd0.roa
Signing time:             Sun 22 Jan 2023 20:54:47 +0000
ROA not before:           Sun 22 Jan 2023 20:54:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60781
IP address blocks:        185.179.217.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:29:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:db:43:21:7b:b6:2a:c2:21:31:cf:4a:02:e0:ac:f5:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Jan 22 20:54:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2fd6f01146ece85d764bf1ffdf13d88f2c4691dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7e:7e:5a:d8:90:6a:b0:28:5a:a9:11:47:2a:
                    ee:25:62:e9:65:4a:bc:e8:c2:9f:66:e0:52:3a:45:
                    04:22:19:c8:29:52:9d:86:0b:3b:ee:b9:51:d7:e4:
                    7a:eb:b6:f5:8d:3a:cc:d5:22:8c:52:8a:90:bc:52:
                    1e:6a:ef:c3:52:65:3a:9b:83:65:1f:75:4a:1a:59:
                    4b:a4:67:1e:dd:fe:5e:26:18:7e:30:f3:21:8a:1c:
                    34:49:c2:b4:4b:b6:df:e7:39:13:65:4b:34:e0:e5:
                    bd:b2:e8:cf:65:9d:91:42:db:10:a8:82:a6:4e:4d:
                    94:e5:e9:4c:50:74:b5:be:a5:bf:bb:9c:c0:3c:72:
                    5b:1a:5c:e6:1c:4d:c8:47:a0:00:16:88:2b:a7:13:
                    88:af:83:5b:7f:07:ab:55:43:59:60:20:e6:e6:0f:
                    ed:93:43:83:1a:d9:7a:f1:78:4d:61:c5:b1:4a:b6:
                    e8:ff:08:55:c2:13:87:d3:f7:5f:e5:e4:ab:88:d6:
                    4b:87:86:16:09:27:60:14:74:7e:30:2d:a6:5b:fe:
                    28:32:35:3b:1b:99:44:e1:56:76:13:1d:07:25:17:
                    54:f6:2a:c5:49:5b:e8:5d:cd:7b:50:63:72:5d:17:
                    45:45:7c:20:dc:d4:1b:34:a8:27:04:2d:5b:97:ac:
                    17:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D6:F0:11:46:EC:E8:5D:76:4B:F1:FF:DF:13:D8:8F:2C:46:91:DD
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/L9bwEUbs6F12S_H_3xPYjyxGkd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:7a:05:46:f8:ee:37:8c:96:54:fa:14:a2:51:e8:9f:06:74:
         a0:7c:f5:84:ae:83:59:cd:1c:c4:86:35:d1:e0:c9:ae:e8:f0:
         f6:6a:7a:2c:14:74:60:f8:3d:95:78:00:df:dd:6c:67:88:7b:
         f1:ab:58:fd:9e:82:96:5d:69:9e:c1:25:12:a4:14:44:92:ac:
         ee:fb:2d:07:08:ab:fa:eb:37:f5:e5:37:4f:47:11:72:9d:4d:
         01:93:fc:15:be:c0:1c:f7:9a:66:af:e0:ac:3c:ca:e1:b8:fe:
         e8:63:85:f6:f8:4b:60:a9:2d:2f:cf:f2:af:9f:83:6b:40:e7:
         88:97:6a:60:bc:e9:b4:3c:35:c8:ed:90:7d:96:1e:ea:ca:3f:
         50:14:51:d2:d6:7f:ed:d8:55:f4:2a:08:96:8f:7e:6e:0e:a5:
         d3:60:e2:93:a1:8e:41:73:7f:46:af:da:c9:31:b6:1d:c9:1c:
         f2:20:ce:b8:61:da:74:47:f1:55:3e:de:49:90:1f:d3:5b:73:
         6f:7d:d6:d2:66:b3:04:85:f5:d5:40:22:a0:d7:c5:3e:86:5b:
         7e:3a:26:8b:c5:3f:40:b1:38:05:8b:d9:48:83:73:90:58:df:
         e1:30:e2:0b:a0:d3:0f:86:57:b2:e0:70:e6:e6:5f:e4:35:30:
         38:bd:68:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-fra.rpki-client.org