Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/GQvBlA9RXWyR7I-9jCzmOmAj2OA.roa
File:                     GQvBlA9RXWyR7I-9jCzmOmAj2OA.roa (raw, json)
Hash identifier:          L/SkUg3w9L3b5AacTMjC0cYXmUAa6uvK5/KacNf9JIE=
Subject key identifier:   19:0B:C1:94:0F:51:5D:6C:91:EC:8F:BD:8C:2C:E6:3A:60:23:D8:E0
Certificate issuer:       /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial:       01857139F0551544443F0AC2C350640C612D
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/GQvBlA9RXWyR7I-9jCzmOmAj2OA.roa
Signing time:             Mon 02 Jan 2023 06:45:00 +0000
ROA not before:           Mon 02 Jan 2023 06:45:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6724
IP address blocks:        185.122.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:39:f0:55:15:44:44:3f:0a:c2:c3:50:64:0c:61:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
        Validity
            Not Before: Jan  2 06:45:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=190bc1940f515d6c91ec8fbd8c2ce63a6023d8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e5:42:a2:17:14:1b:75:a5:d3:34:b6:10:28:
                    14:30:5c:53:ff:0a:34:f3:e5:10:42:d2:27:0a:72:
                    d4:5a:d5:00:26:47:16:9d:79:cb:85:d7:90:7e:1b:
                    89:1c:7c:d4:2c:64:e5:5c:29:88:99:77:27:17:ea:
                    32:27:a2:da:9f:11:aa:f7:2c:e7:54:a6:62:09:98:
                    da:b7:5e:d7:0f:a0:62:9b:66:f9:de:82:68:ef:0f:
                    07:f5:5b:96:f6:de:7f:5c:74:65:6e:81:f1:f5:95:
                    a8:23:88:ae:90:b0:87:3e:f6:8f:41:a0:73:87:8d:
                    1f:eb:98:85:44:29:55:9f:de:cd:b8:53:d1:c5:88:
                    95:13:d2:1c:e3:58:88:92:20:da:bd:ef:54:d7:6c:
                    d2:27:55:3c:47:85:92:e9:34:dd:de:ce:80:f2:99:
                    6c:e6:ba:d0:20:eb:15:4b:35:cd:eb:28:0a:83:38:
                    c9:eb:13:2a:2d:07:60:4f:89:4e:69:21:c8:2a:7c:
                    a0:8e:c5:2b:45:08:ab:db:0a:19:e9:21:11:c1:73:
                    ea:4f:79:ac:96:90:94:81:c9:c1:87:50:d6:b9:09:
                    54:ae:2a:8d:dc:bf:7f:cd:59:99:ae:31:1a:5e:56:
                    1d:c2:98:29:14:9e:cb:ff:9a:ff:d3:38:0e:7d:08:
                    be:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0B:C1:94:0F:51:5D:6C:91:EC:8F:BD:8C:2C:E6:3A:60:23:D8:E0
            X509v3 Authority Key Identifier:
                keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/GQvBlA9RXWyR7I-9jCzmOmAj2OA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.122.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:2b:37:95:1b:c9:df:82:df:1d:59:71:23:4c:dc:cc:b8:34:
         50:d0:a1:bc:e6:08:81:bb:36:d0:6f:b8:df:c3:f2:b1:04:fe:
         02:1f:08:b6:0d:53:d7:ae:7b:49:10:61:de:9b:7e:53:ec:bc:
         60:aa:35:3b:70:62:b0:9f:43:77:88:aa:0a:a3:ab:5f:9b:cf:
         00:e6:15:76:c0:f0:7d:bf:5a:28:e0:da:01:98:7e:d4:b3:76:
         31:73:51:54:77:29:15:54:e8:71:18:5f:ba:80:c6:87:12:b6:
         b4:db:df:55:23:6f:dd:c8:5c:d8:de:33:b1:02:e9:84:f5:1c:
         22:02:43:63:fb:61:a2:ec:e9:33:b2:f0:0d:02:c5:5d:1b:2b:
         15:46:05:f3:6d:bc:f4:a4:5f:d8:d6:ba:49:cd:6c:7a:95:0c:
         e8:95:c7:c8:b1:9e:e8:05:b4:c9:8a:f8:af:4b:c2:fb:f5:37:
         cb:f7:9b:4c:b9:12:ae:68:62:8c:cb:41:87:bd:58:9a:3d:0c:
         d1:34:fc:ee:90:99:04:1a:27:8d:db:7e:88:05:ef:91:e0:43:
         92:34:75:24:a9:df:69:60:69:43:07:85:90:d7:1d:47:53:38:
         c9:d8:5f:79:06:df:11:9e:ac:18:42:7e:9f:10:b7:79:30:a4:
         10:2e:b2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:28 2024 by rpki-client on console-fra.rpki-client.org