Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/jvr_yXHDdcQlmdK34n-DoaznigQ.roa
File:                     jvr_yXHDdcQlmdK34n-DoaznigQ.roa (raw, json)
Hash identifier:          x7RM93H5/ADMAEXSyo0urN31trhXsJchOjLXIlanHys=
Subject key identifier:   8E:FA:FF:C9:71:C3:75:C4:25:99:D2:B7:E2:7F:83:A1:AC:E7:8A:04
Certificate issuer:       /CN=5f1a427072b31d44784c375dfae42278e71fa836
Certificate serial:       0189788FF1F6E1D2997D2F5AB45CD5295ACC
Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/jvr_yXHDdcQlmdK34n-DoaznigQ.roa
Signing time:             Fri 21 Jul 2023 13:07:26 +0000
ROA not before:           Fri 21 Jul 2023 13:07:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     272988
IP address blocks:        185.236.182.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:78:8f:f1:f6:e1:d2:99:7d:2f:5a:b4:5c:d5:29:5a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836
        Validity
            Not Before: Jul 21 13:07:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8efaffc971c375c42599d2b7e27f83a1ace78a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2d:5d:dd:16:6d:d6:e5:fd:b7:3d:32:54:7f:
                    cf:0d:10:38:cf:bd:94:c6:7c:06:81:27:6f:38:ee:
                    21:e7:e9:92:66:0b:fa:fe:e6:e3:4b:d6:ec:03:0c:
                    a6:b0:f1:46:d8:72:f4:03:d7:c1:c8:fb:d8:2e:4e:
                    6d:1f:7c:56:be:a3:34:86:05:24:37:17:2b:c4:2d:
                    67:ec:8e:86:6a:2a:ff:8b:e6:ff:a8:20:83:84:27:
                    bb:10:08:75:e8:fd:36:8b:8f:10:99:f8:31:ad:42:
                    3b:62:b6:3e:d9:b1:b1:0a:3d:5c:c8:f9:2b:28:74:
                    28:b8:7d:c7:df:76:64:d3:a2:19:62:e6:f2:97:ec:
                    15:c1:04:e4:95:21:7c:c0:78:05:9e:f6:b9:d1:01:
                    88:b0:63:2b:f9:02:3c:93:79:e7:9c:03:40:39:b6:
                    7a:b6:48:ae:a5:cb:c9:63:2a:43:d8:c5:d2:bb:04:
                    c9:e4:18:32:b9:7e:44:a5:e9:50:04:6c:c1:8c:29:
                    c9:03:69:91:4f:79:29:85:28:e1:10:eb:b2:b8:28:
                    eb:2b:76:65:cf:c4:43:94:d7:54:08:00:df:08:28:
                    ef:9b:c6:c4:cf:03:cf:28:54:ce:e4:47:33:c3:60:
                    0c:44:8b:3d:cb:9c:57:bb:92:94:2d:5a:ae:68:46:
                    ae:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FA:FF:C9:71:C3:75:C4:25:99:D2:B7:E2:7F:83:A1:AC:E7:8A:04
            X509v3 Authority Key Identifier:
                keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/jvr_yXHDdcQlmdK34n-DoaznigQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.236.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:1a:57:64:c2:b1:22:94:5a:63:12:69:de:80:0e:8a:aa:3c:
         17:f3:26:57:25:ce:3a:ec:8d:4c:47:78:3b:ba:5f:ab:f4:a6:
         c6:08:ee:d2:58:05:62:70:59:3e:7f:94:3d:46:a2:d7:ba:db:
         24:ef:ad:31:44:92:6e:a3:11:9f:55:b8:b8:00:ad:08:52:64:
         a0:b2:68:22:01:89:3f:6a:f0:73:0c:a9:8a:6e:23:fc:8e:f6:
         ac:13:30:4d:f5:07:bb:ea:9a:f9:81:1a:4b:e4:df:d5:77:10:
         94:55:0e:85:31:45:cc:64:42:3c:73:80:1e:6e:4a:65:cd:80:
         95:cd:ab:96:24:97:1e:75:68:ba:cb:b2:6d:08:b1:bc:56:23:
         20:2c:3b:ab:0b:99:d7:13:15:40:7a:8e:2e:bb:0c:13:82:91:
         6b:11:6d:7c:50:41:35:47:21:35:0a:28:51:36:df:12:9e:e1:
         2b:b0:f0:bf:15:11:ef:bb:90:13:33:21:11:f9:d0:df:0c:42:
         34:65:30:c7:06:40:b7:85:41:5a:5a:24:71:a9:76:61:ef:2d:
         4d:da:bf:84:8c:ae:19:93:10:71:34:62:d6:de:08:a8:f5:5c:
         cf:8b:3f:7e:0c:16:a2:bf:56:77:df:b0:05:04:a4:54:39:8b:
         69:51:41:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:19 2024 by rpki-client on console-ams.rpki-client.org