Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/LV0elNWT022XSKtNppgLjyph4yQ.roa
File:                     LV0elNWT022XSKtNppgLjyph4yQ.roa (raw, json)
Hash identifier:          sBzlZABOw/f11dOHxBmZ74nMDsjbOKR7bbw7aRSdBZ0=
Subject key identifier:   2D:5D:1E:94:D5:93:D3:6D:97:48:AB:4D:A6:98:0B:8F:2A:61:E3:24
Certificate issuer:       /CN=e618eff923e35bf83792353c4633ca2300f75b6c
Certificate serial:       018B445B27A4FD41E9B1F08CFAF80F97BEA6
Authority key identifier: E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/LV0elNWT022XSKtNppgLjyph4yQ.roa
Signing time:             Wed 18 Oct 2023 19:55:06 +0000
ROA not before:           Wed 18 Oct 2023 19:55:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.218.142.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 20 Oct 2023 19:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:44:5b:27:a4:fd:41:e9:b1:f0:8c:fa:f8:0f:97:be:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e618eff923e35bf83792353c4633ca2300f75b6c
        Validity
            Not Before: Oct 18 19:55:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2d5d1e94d593d36d9748ab4da6980b8f2a61e324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:fe:14:25:5d:93:55:66:41:ca:83:05:d4:
                    55:21:b0:73:a7:37:85:96:73:c5:2b:08:aa:74:be:
                    a3:12:11:10:38:c3:8d:b3:93:4b:35:60:11:3b:b0:
                    45:4f:bd:50:34:e2:74:81:ff:f9:17:0c:a3:60:cb:
                    c8:9a:27:44:28:b1:28:b6:32:ee:f4:69:4b:58:4d:
                    6b:47:3f:1f:0f:05:a8:f0:a4:e6:65:42:51:20:38:
                    56:e4:e4:27:ce:4b:46:f4:0b:6a:c2:b8:1f:5d:b6:
                    08:56:1a:5f:6b:f3:57:4b:db:58:fe:26:af:23:ca:
                    13:58:75:90:ac:8e:a5:84:c6:47:fc:4e:e6:a1:ff:
                    1f:72:85:ef:04:41:c4:d9:c2:7e:63:ba:e6:62:6e:
                    cc:3c:44:05:97:cd:a4:13:7b:75:22:17:8d:c7:ea:
                    30:1c:68:a3:50:6a:18:8f:9b:5e:b6:fd:ae:49:55:
                    05:1a:a7:dc:61:dc:91:e1:b2:eb:0c:7b:c0:80:54:
                    14:61:f4:76:af:9b:24:53:be:fe:ea:ea:7a:1b:5e:
                    91:c0:50:74:f3:8a:55:8b:c6:8d:90:40:c4:4d:5c:
                    f3:cc:f2:7e:d1:b2:a1:ba:c2:bd:2a:f1:14:dc:7e:
                    f9:5e:b3:cf:f8:f0:09:b4:43:46:0e:0b:ff:ec:d0:
                    06:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5D:1E:94:D5:93:D3:6D:97:48:AB:4D:A6:98:0B:8F:2A:61:E3:24
            X509v3 Authority Key Identifier:
                keyid:E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/LV0elNWT022XSKtNppgLjyph4yQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:61:7f:13:74:a0:b0:ec:ed:f6:fa:56:e2:d1:85:45:b8:4f:
         39:f8:27:49:31:55:b9:69:bb:81:08:d5:3f:60:f4:77:06:08:
         81:ff:a3:e8:23:3e:80:97:66:d0:3d:c1:b7:59:61:4b:e6:65:
         c9:1e:e2:08:aa:d7:93:bc:e4:71:0b:31:5c:b6:a1:3f:71:bc:
         f5:6c:74:e8:40:0a:ed:5d:e1:e3:0b:c7:96:dd:3a:aa:bc:a0:
         2e:6d:52:27:16:9f:7a:8c:95:51:51:f3:63:9a:ae:83:d2:e1:
         ef:5b:8b:ce:24:bd:4b:cb:df:52:2d:e3:85:c6:53:7e:49:dc:
         45:b5:7f:e6:5d:fc:bd:59:72:3b:0d:66:3a:11:41:d7:83:cb:
         90:a0:ad:7b:bb:a3:75:dc:74:b3:af:2e:c9:0e:d7:9b:dc:2b:
         94:7f:0b:71:c7:a0:53:6b:78:a0:d8:ac:bf:cf:cb:91:be:37:
         b1:b3:47:0c:36:3f:1a:a3:32:93:47:7f:11:57:a7:62:3a:50:
         d7:45:80:20:36:cc:e1:f0:7b:61:5d:da:9c:2d:00:b3:be:1a:
         48:90:e6:7b:e6:a1:f8:3f:af:b8:31:d5:7c:c2:d6:16:4c:6d:
         af:2e:64:48:4b:07:65:0b:34:a6:90:ea:41:9b:09:2e:98:68:
         d7:64:a6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:55 2024 by rpki-client on console-fra.rpki-client.org