Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/GBr0QssGM35exwS4-joDhyItNI4.roa
File:                     GBr0QssGM35exwS4-joDhyItNI4.roa (raw, json)
Hash identifier:          yebqBO9KrLz7mJAGcZbP5jZQ6hmX2faIDR7y2mNEhTo=
Subject key identifier:   18:1A:F4:42:CB:06:33:7E:5E:C7:04:B8:FA:3A:03:87:22:2D:34:8E
Certificate issuer:       /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial:       0187553E8339C44FB8E23971F37848F351C9
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/GBr0QssGM35exwS4-joDhyItNI4.roa
Signing time:             Thu 06 Apr 2023 06:26:12 +0000
ROA not before:           Thu 06 Apr 2023 06:26:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208485
IP address blocks:        5.249.184.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 15 Jun 2023 15:59:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:55:3e:83:39:c4:4f:b8:e2:39:71:f3:78:48:f3:51:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
        Validity
            Not Before: Apr  6 06:26:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=181af442cb06337e5ec704b8fa3a0387222d348e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c2:61:1b:ec:04:5d:14:06:7e:a2:f0:83:c0:
                    6e:cf:fb:c0:a6:87:05:85:39:d4:b4:83:87:29:85:
                    85:9a:c2:30:cf:85:28:68:bc:73:50:00:4d:78:a5:
                    d3:51:80:c6:da:74:dd:d5:3a:32:2c:1f:d2:55:79:
                    e2:61:35:e0:06:4b:91:ec:df:f4:4d:d8:d8:5f:30:
                    ea:3a:e8:10:b9:9b:f2:a2:76:dd:9d:f5:9a:f4:79:
                    52:f0:d5:30:02:09:b6:3b:d5:7f:06:cb:40:fc:6d:
                    ff:22:cb:df:b5:a6:13:83:95:4f:6a:12:ca:a6:97:
                    9e:52:4c:da:b5:25:a9:76:81:1d:33:27:56:b2:9d:
                    b8:75:6e:43:8d:da:0b:71:df:05:18:7d:95:41:63:
                    9b:69:2f:58:94:f7:3d:d1:9b:e8:da:dd:39:59:d7:
                    20:a5:5e:36:9c:1a:de:2c:29:06:36:2d:35:fc:05:
                    44:36:14:77:0d:81:a5:b3:e5:d1:04:88:5e:a7:57:
                    97:fb:56:1f:19:2e:6c:1b:8a:fa:60:f3:13:72:81:
                    ce:d7:7b:8d:ec:90:b2:32:c7:05:2d:d2:17:9d:74:
                    da:94:8e:c6:85:0f:f9:5b:ca:bd:0a:2b:f2:f1:64:
                    6e:0a:3d:1b:4a:00:ea:3d:2a:7a:39:f3:1a:ea:48:
                    d9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1A:F4:42:CB:06:33:7E:5E:C7:04:B8:FA:3A:03:87:22:2D:34:8E
            X509v3 Authority Key Identifier:
                keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/GBr0QssGM35exwS4-joDhyItNI4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.249.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:71:27:de:56:3c:1d:88:d1:4f:d0:a1:2c:5e:5b:67:13:6e:
         be:06:85:ac:d8:35:d3:be:dd:93:cd:87:08:0b:95:d1:33:21:
         4d:70:67:a2:b6:3b:c9:ae:09:f8:60:fe:c1:a7:94:36:66:01:
         32:4f:7b:cd:54:7c:4b:aa:5f:7b:7c:5a:e2:89:27:41:da:f5:
         1c:d8:60:64:5d:30:06:39:4f:c7:43:e8:b5:e4:19:9c:1d:fb:
         b4:66:f4:f3:cc:33:3e:54:05:a4:19:63:08:03:74:a6:5a:fe:
         0e:3c:ac:58:86:08:9a:4c:52:bf:6a:dc:33:b5:3a:7c:db:4b:
         81:00:32:3d:d1:f0:5b:50:55:ab:a7:1f:0e:ac:9a:f3:ce:e1:
         ea:59:32:98:a5:1e:d3:d5:da:66:c8:ad:14:aa:60:49:99:5a:
         e5:49:25:3a:15:91:4a:b5:fe:17:c7:46:41:c0:4d:e6:88:32:
         22:96:2a:db:bd:7e:ce:53:d5:3d:e9:d0:0f:30:f0:1e:aa:e0:
         72:03:c0:d6:c1:6d:66:b0:ad:0f:f6:2e:cf:a9:6b:10:a1:cc:
         43:e2:a7:15:94:f1:63:17:4b:8d:1b:51:08:4b:d1:78:1a:27:
         4b:a0:1d:e1:33:c6:ef:8b:a9:05:c4:59:c8:0c:39:98:b2:18:
         8a:b4:5f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:05 2024 by rpki-client on console-fra.rpki-client.org