Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/j45Il_U9ON75hh77ZvtBX4jVhJM.roa
File:                     j45Il_U9ON75hh77ZvtBX4jVhJM.roa (raw, json)
Hash identifier:          KEPpv3d3tozyJVqLUgKu2iScpH+PZHtgTdyV3ponvWQ=
Subject key identifier:   8F:8E:48:97:F5:3D:38:DE:F9:86:1E:FB:66:FB:41:5F:88:D5:84:93
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       01856F66F3077CFCE0075D6409602EBA2786
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/j45Il_U9ON75hh77ZvtBX4jVhJM.roa
Signing time:             Sun 01 Jan 2023 22:14:55 +0000
ROA not before:           Sun 01 Jan 2023 22:14:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207279
IP address blocks:        185.179.216.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 19 Jan 2023 13:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:66:f3:07:7c:fc:e0:07:5d:64:09:60:2e:ba:27:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Jan  1 22:14:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8f8e4897f53d38def9861efb66fb415f88d58493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f0:66:d7:46:15:91:af:43:6e:66:04:a1:48:
                    e3:97:7e:0c:97:67:6a:05:f7:46:a0:ee:94:9b:82:
                    e1:62:16:a2:a9:4e:92:42:32:51:c6:da:9b:9f:6c:
                    52:47:dd:33:0f:b5:49:f9:94:a7:13:7e:0b:5c:f8:
                    9f:fd:b0:89:e2:4b:b7:de:86:8c:ea:f5:4f:61:96:
                    e3:de:b2:43:3d:09:3c:ae:0d:01:aa:58:ed:ab:0c:
                    2a:b2:94:b5:d9:43:af:a9:6e:72:86:57:73:b7:f2:
                    d4:51:a6:fe:42:7c:3f:3f:89:d4:14:60:6c:7c:2e:
                    83:06:69:bc:b8:49:ad:0c:20:45:ae:69:a5:8b:db:
                    4e:cd:f8:01:ca:7c:da:26:04:b5:ed:07:e7:8c:37:
                    9e:bb:25:19:87:55:31:da:3f:10:88:81:e0:0b:39:
                    07:31:e2:39:2c:d7:4c:ee:cb:7d:b7:84:15:50:2f:
                    1a:80:f7:fd:81:ea:58:dd:e7:6e:d6:77:08:f7:5a:
                    e8:c7:0f:ab:20:84:cf:a0:08:ac:69:d7:c7:2e:31:
                    0a:68:80:5c:19:c6:6e:d3:ab:44:b0:ac:4d:20:26:
                    fa:60:c3:00:45:04:5d:38:e3:f9:25:c0:5d:81:06:
                    f6:9c:2a:12:22:77:13:f2:f5:15:2b:31:f8:38:11:
                    b1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8E:48:97:F5:3D:38:DE:F9:86:1E:FB:66:FB:41:5F:88:D5:84:93
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/j45Il_U9ON75hh77ZvtBX4jVhJM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:ac:eb:c4:97:c0:28:ea:fc:73:cd:2d:d4:e7:08:76:9d:21:
         4a:8a:a1:84:3e:b5:b3:a6:50:43:b3:00:0f:f2:93:a1:64:f7:
         05:66:a6:bf:31:8b:1b:fb:b4:7a:23:1a:b3:35:87:56:5e:af:
         68:67:c2:e3:55:46:97:d2:5c:6e:f2:f6:cf:0f:63:72:7c:01:
         5b:7c:aa:7c:b7:47:c8:05:7f:1c:cb:ef:09:a7:b4:eb:13:0d:
         52:4f:03:77:85:05:c9:b5:a4:26:76:ab:a9:95:b2:fb:d0:65:
         bf:97:4d:08:5e:1c:82:3e:f8:00:f1:e2:21:67:5e:0d:a3:74:
         5e:58:f4:60:b8:f9:83:c5:f0:32:fa:61:c4:ff:3c:00:6a:8e:
         a6:df:eb:bf:64:76:23:51:ab:f1:ac:91:f9:12:d9:24:07:19:
         51:9f:35:fb:5c:a8:82:0f:20:76:0c:76:6c:c2:8d:da:1e:1d:
         9a:8f:90:4b:9f:33:79:a9:f5:f0:d2:1f:a3:3f:98:8a:82:1c:
         32:7f:8b:46:41:c2:fa:1c:f8:b5:9f:03:58:c2:44:bb:06:4b:
         d9:01:ce:c4:dd:b4:ab:b6:77:c5:99:be:0c:a0:f2:bc:e9:24:
         eb:b4:00:44:49:2a:46:95:f9:e6:04:e3:26:1e:25:b3:27:a6:
         0d:15:01:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-fra.rpki-client.org