Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/GQMr6b8TwGJY0zRXmdPv5gUegeg.roa
File:                     GQMr6b8TwGJY0zRXmdPv5gUegeg.roa (raw, json)
Hash identifier:          MEJd4/CJ8CIfKJt/wMCbRgCosAdoMIrVlSejcirJ3J8=
Subject key identifier:   19:03:2B:E9:BF:13:C0:62:58:D3:34:57:99:D3:EF:E6:05:1E:81:E8
Certificate issuer:       /CN=ed800950a31dcdacaac56adb936a42beb845e24b
Certificate serial:       01856F0B5A273A697D27BB40337E173B9D2F
Authority key identifier: ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/GQMr6b8TwGJY0zRXmdPv5gUegeg.roa
Signing time:             Sun 01 Jan 2023 20:34:52 +0000
ROA not before:           Sun 01 Jan 2023 20:34:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     399746
IP address blocks:        185.221.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 13 Apr 2023 08:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:0b:5a:27:3a:69:7d:27:bb:40:33:7e:17:3b:9d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed800950a31dcdacaac56adb936a42beb845e24b
        Validity
            Not Before: Jan  1 20:34:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=19032be9bf13c06258d3345799d3efe6051e81e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b7:18:e3:1b:f7:09:42:3a:ee:b9:3d:b5:e4:
                    b3:99:7c:ed:e3:ec:9e:3e:a3:a1:86:7c:ab:e2:e7:
                    09:1e:d7:97:7b:c3:57:b6:97:68:76:a8:2e:73:8c:
                    2f:9d:7f:1d:85:4e:cd:58:17:31:a8:af:68:ce:59:
                    9a:b3:d7:45:a7:b1:63:de:cd:08:5c:1e:2d:78:6c:
                    11:cb:94:be:e2:a1:1c:fb:48:52:a1:0e:46:f6:a9:
                    c8:ff:49:d9:58:39:e1:0b:f6:c8:50:c5:f7:51:02:
                    39:25:f5:13:7a:cb:32:81:46:84:52:00:35:5d:f1:
                    7e:75:9a:6b:16:22:ad:30:7a:02:40:e1:5f:e2:37:
                    b5:9e:a4:45:9a:8f:20:59:2a:41:51:92:d4:f0:ca:
                    07:b7:a4:0e:4a:d6:26:a2:77:32:76:cf:ba:75:af:
                    fd:3f:23:9b:6e:66:c9:8a:74:de:a3:f7:83:ee:13:
                    24:26:5d:0f:09:59:5b:4d:b2:98:98:58:06:e5:9e:
                    b0:15:1d:a7:5b:ee:2c:c9:ce:32:44:42:a7:cd:33:
                    33:cf:f8:fd:22:76:27:f4:b8:2a:d6:9f:aa:20:dc:
                    78:5e:37:83:1f:2a:b9:72:74:5d:b0:04:d0:c7:bd:
                    59:4f:34:7b:ed:67:32:31:06:21:8a:db:40:ab:4d:
                    98:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:03:2B:E9:BF:13:C0:62:58:D3:34:57:99:D3:EF:E6:05:1E:81:E8
            X509v3 Authority Key Identifier:
                keyid:ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/GQMr6b8TwGJY0zRXmdPv5gUegeg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.221.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:c1:b6:26:80:20:9f:30:e2:e0:e7:21:7f:ee:83:67:e5:28:
         25:04:62:10:c1:b4:d6:e8:88:f7:34:e6:bb:b6:66:4a:39:1b:
         f5:f9:23:ba:29:27:db:0d:e3:40:12:c0:9b:7c:59:c0:7a:97:
         cc:ac:2d:5d:09:a0:59:1d:46:a8:8a:d0:57:dc:d1:ac:8a:82:
         a1:cc:55:c7:d6:27:d2:bf:33:8e:e2:8a:e1:7d:c0:0f:69:ec:
         f9:b7:fb:98:28:c9:d3:31:9c:bc:75:11:de:d5:10:47:e4:1b:
         d7:a6:fc:5e:bc:2a:ae:09:d0:25:f7:54:22:6e:79:e1:db:8f:
         32:c9:77:0b:3f:33:78:46:5b:95:e7:47:ad:32:e3:92:e9:a9:
         a4:69:b6:a6:3f:1e:4b:36:08:ea:cd:22:aa:d3:57:a3:0f:ce:
         f1:62:bb:4d:44:fa:dd:eb:ab:6a:3d:fd:69:cf:c6:1d:e7:87:
         ec:34:e1:7d:8d:73:b9:ae:05:3f:72:bc:59:c5:9e:15:3d:78:
         2d:7f:23:81:3d:29:a1:ef:4c:d9:99:0c:db:7e:f4:fb:72:3c:
         c9:ee:0c:83:2b:50:62:c9:95:ac:cd:35:43:99:ef:5b:df:0d:
         81:11:d9:da:41:2c:2a:de:e9:a6:04:4e:88:25:7d:25:b6:1d:
         d9:0a:71:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:07 2024 by rpki-client on console-ams.rpki-client.org