Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/ZRttji3PLcxR0CDR2oWPpgllsp4.roa
File:                     ZRttji3PLcxR0CDR2oWPpgllsp4.roa (raw, json)
Hash identifier:          hT+/wAyWhsNbeMp8L2KYndhhLw+xGqw6x8KeHLu9zkU=
Subject key identifier:   65:1B:6D:8E:2D:CF:2D:CC:51:D0:20:D1:DA:85:8F:A6:09:65:B2:9E
Certificate issuer:       /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial:       01856B932708051179BF5CC60D0A492D5AB7
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/ZRttji3PLcxR0CDR2oWPpgllsp4.roa
Signing time:             Sun 01 Jan 2023 04:24:43 +0000
ROA not before:           Sun 01 Jan 2023 04:24:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     136184
IP address blocks:        185.228.92.0/24 maxlen: 24
                          185.228.95.0/24 maxlen: 24
                          185.228.94.0/24 maxlen: 24
                          185.228.93.0/24 maxlen: 24
                          185.228.92.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:30:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:93:27:08:05:11:79:bf:5c:c6:0d:0a:49:2d:5a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
        Validity
            Not Before: Jan  1 04:24:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=651b6d8e2dcf2dcc51d020d1da858fa60965b29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f2:f7:f0:f2:a4:47:8c:45:01:e1:81:29:27:
                    84:6f:97:aa:01:f7:e6:fd:27:9f:1d:14:68:e5:00:
                    20:b2:61:bb:41:2f:a7:07:21:89:ea:96:05:29:40:
                    ae:a0:1e:16:b7:c4:0a:55:5e:64:ba:4e:48:fd:82:
                    da:84:84:db:92:cf:a1:aa:13:4e:dc:6a:f2:26:cc:
                    87:9c:94:8d:cf:54:7d:61:63:f5:3c:09:8b:93:cb:
                    f2:37:73:b8:dc:4d:28:60:07:26:0c:e6:5b:5a:19:
                    73:e9:1c:47:26:c0:a0:14:a4:c4:e7:20:3a:a2:12:
                    39:ab:91:94:e8:02:61:79:ac:2d:2c:c6:51:4e:ac:
                    e2:69:e2:0c:02:d1:5a:0f:3c:85:c8:ea:81:ba:9c:
                    0b:61:22:7b:73:81:6c:f3:4d:c8:07:ef:df:37:2b:
                    e6:d0:db:5e:ec:55:b3:89:cb:b0:80:75:f1:7c:80:
                    e6:07:de:90:6b:f5:a4:63:38:03:ce:d9:68:46:54:
                    1c:a5:7e:49:d9:40:57:3d:8e:dd:77:22:9c:37:b4:
                    e2:37:98:18:34:df:2a:89:00:74:a7:0e:c7:13:48:
                    54:f4:24:50:7b:3a:60:f7:14:db:33:fd:a2:86:ec:
                    18:c9:1a:ed:3f:1e:05:f6:6c:31:fa:99:a3:06:d2:
                    97:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1B:6D:8E:2D:CF:2D:CC:51:D0:20:D1:DA:85:8F:A6:09:65:B2:9E
            X509v3 Authority Key Identifier:
                keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/ZRttji3PLcxR0CDR2oWPpgllsp4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.228.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:8a:90:93:35:f6:77:86:22:f0:d0:90:6b:a2:cd:34:36:c0:
         a3:bf:1c:c0:94:28:68:10:3f:98:32:9b:bb:36:89:36:7a:9b:
         46:67:ea:34:a4:d2:52:cb:8f:f8:2a:d3:dc:ca:5d:91:85:e6:
         31:3b:84:e0:3a:07:02:29:0d:31:8a:d0:70:ff:fe:87:eb:c2:
         ab:9f:3b:77:0b:65:4c:06:3c:f4:2a:1e:47:11:d5:67:e4:2c:
         42:7b:27:41:d9:ab:3e:6a:63:31:d3:73:79:9d:14:fe:7e:17:
         6d:cc:be:10:fc:d4:02:c1:8a:b8:70:e4:47:e3:1d:4f:30:3e:
         0b:af:b8:b7:68:4a:0d:a6:6b:7a:2a:2f:c6:14:4a:41:97:3c:
         16:12:fb:24:72:82:9c:e1:7b:e7:f8:f5:16:40:7a:4a:6a:31:
         6a:86:29:34:e1:65:fe:e4:31:05:2a:4a:d4:ce:8c:9b:cf:07:
         32:17:13:6a:02:44:64:5e:fa:bf:30:2a:70:c3:62:f0:c5:ab:
         c4:8d:48:e4:69:b6:9b:62:25:b9:3b:cb:35:55:93:62:76:b6:
         d4:f1:65:4a:69:22:ac:50:81:07:15:5e:88:e4:ea:81:bd:fd:
         99:45:3c:be:2d:46:ec:7d:d2:cb:22:19:35:0f:30:3d:db:02:
         93:db:c4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:28 2024 by rpki-client on console-ams.rpki-client.org