Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c866ce-7db8-4ef1-979b-6b7dda50d5a5/1/GiT72rAfw5OTN9zX9-i9CodF8ss.roa
File:                     GiT72rAfw5OTN9zX9-i9CodF8ss.roa (raw, json)
Hash identifier:          z+bf3+4x9ONWSdMj2TAhZzezvyoFegPlgeLEomu3S1w=
Subject key identifier:   1A:24:FB:DA:B0:1F:C3:93:93:37:DC:D7:F7:E8:BD:0A:87:45:F2:CB
Certificate issuer:       /CN=0bb7a29b255451e61bc42c8b9ae4943f71696ccf
Certificate serial:       0186C5C124485955B52BC1F33D21FCF8E7DF
Authority key identifier: 0B:B7:A2:9B:25:54:51:E6:1B:C4:2C:8B:9A:E4:94:3F:71:69:6C:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7eimyVUUeYbxCyLmuSUP3FpbM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/c866ce-7db8-4ef1-979b-6b7dda50d5a5/1/GiT72rAfw5OTN9zX9-i9CodF8ss.roa
Signing time:             Thu 09 Mar 2023 09:43:34 +0000
ROA not before:           Thu 09 Mar 2023 09:43:34 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204650
IP address blocks:        185.113.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 18 Mar 2023 17:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c5:c1:24:48:59:55:b5:2b:c1:f3:3d:21:fc:f8:e7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb7a29b255451e61bc42c8b9ae4943f71696ccf
        Validity
            Not Before: Mar  9 09:43:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1a24fbdab01fc3939337dcd7f7e8bd0a8745f2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:44:a1:41:3a:6a:4d:01:07:63:b5:77:a5:07:
                    5b:bc:3f:80:b4:6a:92:d6:9a:2a:b0:87:b7:9a:fc:
                    e6:59:66:ca:1c:d3:08:21:05:a0:91:33:79:87:5b:
                    ad:4a:00:67:c7:54:62:dc:55:3c:8c:7e:aa:73:5e:
                    40:26:cb:7b:e9:ff:13:6e:3f:4f:98:7b:9f:41:5f:
                    f8:09:09:44:bd:4d:b2:50:31:05:db:8a:63:e7:72:
                    e7:35:c8:3a:87:1d:2d:1a:ae:c8:c0:5d:2c:60:20:
                    c8:69:c2:43:59:5a:e6:dc:cf:87:a5:c1:42:66:75:
                    1c:54:f2:69:a0:cb:e7:a0:ff:e4:03:b1:13:51:8f:
                    77:7d:ef:27:14:70:7a:7d:d2:0b:81:3f:2c:d5:6a:
                    7c:41:16:41:1e:71:9f:c7:1a:5e:44:66:b3:94:3e:
                    c0:b9:89:62:35:a0:f0:42:da:f4:c0:02:21:06:ce:
                    00:fc:68:80:db:a0:aa:2e:f2:3f:aa:35:ae:c2:ab:
                    cd:be:44:b3:30:e4:1f:a4:f0:8e:88:57:20:13:c5:
                    52:9d:bd:71:d3:f9:10:e9:78:c7:15:46:59:4e:e5:
                    e6:93:41:fd:05:7a:ac:88:14:eb:d5:aa:3f:ba:07:
                    92:02:ee:16:f8:24:7c:0f:97:43:6a:78:71:69:76:
                    8d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:24:FB:DA:B0:1F:C3:93:93:37:DC:D7:F7:E8:BD:0A:87:45:F2:CB
            X509v3 Authority Key Identifier:
                keyid:0B:B7:A2:9B:25:54:51:E6:1B:C4:2C:8B:9A:E4:94:3F:71:69:6C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7eimyVUUeYbxCyLmuSUP3FpbM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c866ce-7db8-4ef1-979b-6b7dda50d5a5/1/GiT72rAfw5OTN9zX9-i9CodF8ss.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c866ce-7db8-4ef1-979b-6b7dda50d5a5/1/C7eimyVUUeYbxCyLmuSUP3FpbM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.113.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:35:f4:c6:9d:66:e4:5a:a5:6a:15:f6:48:3c:ce:e3:03:12:
         a8:a7:f9:05:54:05:5b:78:be:93:fc:ec:40:14:d4:ed:e6:78:
         40:6c:5f:9e:8b:2e:b3:8d:24:b2:0e:1f:9d:b6:1b:88:d2:3d:
         ce:82:32:04:3f:eb:59:2c:25:e2:66:1b:9c:4a:b9:6e:18:f9:
         a0:e0:7f:fd:94:fd:3f:0c:09:cc:09:e1:de:ea:0e:70:53:8d:
         11:af:a6:41:27:e1:55:f2:78:25:9a:c2:b6:00:60:a5:8b:06:
         aa:e1:7a:cd:a0:a2:f5:05:81:b5:97:bf:55:20:9f:17:e5:f6:
         b7:58:03:51:ae:46:e7:1e:3e:59:c1:01:04:cf:4d:60:fa:37:
         e6:ad:d2:fe:64:64:89:2f:6a:b9:32:6f:88:46:21:11:f1:9a:
         65:43:c1:62:a8:fc:f9:f5:d4:2d:21:7e:2a:4b:b2:70:dc:8d:
         b0:6a:53:c5:fa:39:8e:d6:d3:2c:7a:44:bc:0e:fd:3b:57:49:
         a5:16:f3:6a:9e:15:5e:f7:ae:88:49:21:06:14:a9:ee:34:06:
         4d:a4:6f:5f:d1:2e:2f:36:d7:75:17:33:d3:56:67:d7:4a:75:
         7a:b3:a9:70:5f:3e:d2:c4:23:91:1c:49:72:d9:cb:b3:5e:83:
         95:14:6a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:26 2024 by rpki-client on console-ams.rpki-client.org