Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/4zqkZVYKwvyqEaVpvUdEqfXBarc.roa
File:                     4zqkZVYKwvyqEaVpvUdEqfXBarc.roa (raw, json)
Hash identifier:          04yzfHWk4mSOuTayn8+WqZx15Gfd8OxJlZ4Ml1V9sAs=
Subject key identifier:   E3:3A:A4:65:56:0A:C2:FC:AA:11:A5:69:BD:47:44:A9:F5:C1:6A:B7
Certificate issuer:       /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial:       0185710C44D55143998E2F348F535F3A615F
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/4zqkZVYKwvyqEaVpvUdEqfXBarc.roa
Signing time:             Mon 02 Jan 2023 05:55:07 +0000
ROA not before:           Mon 02 Jan 2023 05:55:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213369
IP address blocks:        185.180.229.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 22 Mar 2023 11:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:0c:44:d5:51:43:99:8e:2f:34:8f:53:5f:3a:61:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
        Validity
            Not Before: Jan  2 05:55:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e33aa465560ac2fcaa11a569bd4744a9f5c16ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:72:e5:18:7a:a9:7a:72:41:67:a8:0f:3e:53:
                    2a:b8:6b:f3:62:8b:86:68:e1:c4:08:2f:dd:75:6f:
                    10:e6:f5:0d:58:62:53:3d:a9:2c:e5:44:c7:23:7c:
                    3c:41:19:14:3a:77:88:c8:d6:df:e0:69:bb:f3:ec:
                    b0:cd:d9:ea:76:9e:b4:5b:90:7d:5c:dc:40:61:e5:
                    15:de:8e:6c:68:dc:1c:c3:7c:c5:f5:89:4e:9b:7e:
                    29:14:b1:df:cd:29:ee:79:e9:f6:f7:e6:47:cc:3d:
                    04:55:d5:03:b5:92:26:8d:52:4b:6e:c2:58:4f:d3:
                    2c:6c:54:d7:57:b1:bb:3e:be:1a:8b:7e:6c:1e:29:
                    86:5f:73:e0:e4:89:2b:c2:47:4d:9f:d4:06:c7:10:
                    0e:eb:50:3b:15:f8:84:12:f4:03:8e:1a:09:fc:4b:
                    24:e4:e8:97:b8:58:98:d7:20:b9:26:f2:94:3c:92:
                    68:9d:fb:1d:33:d5:0d:34:c9:3a:ce:25:b4:1d:0d:
                    69:ae:7a:0b:ba:f0:5f:a6:28:f1:a7:2d:3a:d4:34:
                    00:5d:b6:ca:7b:9c:8f:81:53:93:3c:c3:e4:ad:4a:
                    a3:fb:bf:62:f2:6c:17:1a:bf:32:81:c6:f8:12:18:
                    e7:ff:27:f3:18:c5:49:3e:20:96:45:17:50:0f:a3:
                    14:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3A:A4:65:56:0A:C2:FC:AA:11:A5:69:BD:47:44:A9:F5:C1:6A:B7
            X509v3 Authority Key Identifier:
                keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/4zqkZVYKwvyqEaVpvUdEqfXBarc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.180.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:84:4e:9a:33:90:4f:e3:bb:87:44:99:fe:dc:6a:3d:ff:ba:
         26:6f:98:8f:ca:5a:72:3f:00:69:d1:aa:06:90:9e:3b:5d:3e:
         d9:01:81:a2:21:7f:51:f4:31:2c:4c:24:bf:58:4b:e1:cb:60:
         78:1f:03:6b:40:f9:89:f4:d5:09:ca:55:fd:b1:d1:3f:a9:90:
         0a:47:a6:a3:b6:09:9d:9a:f6:77:99:27:0e:30:fb:cc:14:90:
         02:b1:ce:ab:aa:d3:54:6f:2f:a1:25:93:59:7d:27:de:7d:60:
         da:e7:0f:c7:6d:4e:33:d5:24:e3:4b:7a:ff:37:16:e7:e6:97:
         bd:56:91:f5:e3:30:af:73:2b:44:bf:56:89:c6:6d:7c:8c:2d:
         e0:c7:32:18:e9:32:b7:ca:a6:aa:45:a1:41:fe:e4:2c:9b:51:
         93:18:18:88:ff:10:bb:57:d6:b3:f6:75:02:55:33:c6:31:37:
         be:13:91:c5:ac:ae:07:c9:3b:99:63:e3:41:d6:1f:dc:45:6b:
         99:58:85:12:45:d6:ef:1a:1a:e4:53:ac:45:ec:35:fa:61:a0:
         1f:3e:8f:78:81:cd:72:5a:9f:b5:05:e2:6a:94:6c:ab:34:ec:
         37:25:16:87:72:a8:c4:5f:14:0f:ff:f6:0b:f1:1c:04:45:40:
         16:8c:39:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org