Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1-GtPcIUWFIeoHlPVTSV4xcnVJXY.roa
File:                     1-GtPcIUWFIeoHlPVTSV4xcnVJXY.roa (raw, json)
Hash identifier:          q0ZEAXZi/oVAFUYaVvclYbvLsQLuOl+bBpqM1Z7HrVA=
Subject key identifier:   F8:6B:4F:70:85:16:14:87:A8:1E:53:D5:4D:25:78:C5:C9:D5:25:76
Certificate issuer:       /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial:       018576CCF864353F90E4330259FCE796C9A6
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1-GtPcIUWFIeoHlPVTSV4xcnVJXY.roa
Signing time:             Tue 03 Jan 2023 08:43:42 +0000
ROA not before:           Tue 03 Jan 2023 08:43:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205759
IP address blocks:        185.207.144.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:76:cc:f8:64:35:3f:90:e4:33:02:59:fc:e7:96:c9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
        Validity
            Not Before: Jan  3 08:43:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f86b4f7085161487a81e53d54d2578c5c9d52576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:63:38:23:eb:12:44:2e:13:bf:32:80:c2:fb:
                    9b:d4:d6:d2:6f:2e:be:4b:50:a8:43:9a:ab:ba:30:
                    f8:85:ad:31:9e:82:91:27:d0:17:5c:47:ff:e6:2d:
                    8b:7c:79:29:11:94:22:3d:58:01:b2:66:5c:07:cb:
                    b6:91:46:02:bf:8f:61:2f:d5:a4:7d:09:bb:75:bb:
                    8f:cc:4e:b8:da:c4:dd:79:40:d1:10:9d:37:31:75:
                    36:77:a3:f8:98:70:70:b9:c1:39:5a:0b:d4:c1:35:
                    87:da:f4:1b:c9:1e:50:e7:57:65:32:b4:ea:2e:ee:
                    56:2e:92:ac:bc:46:ee:4a:6a:01:07:c0:fb:c2:aa:
                    5d:2c:a7:b1:02:97:7e:a7:33:54:00:96:c9:a5:1e:
                    5a:5b:1e:b7:49:fd:b8:41:47:04:9e:66:9c:cb:ba:
                    77:4c:7f:9e:e8:a3:84:87:1d:68:66:ec:18:90:36:
                    9d:fb:9a:95:16:c3:3b:ff:46:ef:49:82:68:89:00:
                    90:0a:31:73:4d:0d:a2:d9:14:3f:10:45:22:8a:69:
                    1c:2f:63:85:b2:35:24:14:bc:9e:94:77:fb:6b:d3:
                    22:87:1d:2b:3b:7f:ec:45:48:34:1b:91:22:66:b2:
                    86:cb:f9:90:60:e2:3b:c5:a7:22:05:fa:80:dd:14:
                    c1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6B:4F:70:85:16:14:87:A8:1E:53:D5:4D:25:78:C5:C9:D5:25:76
            X509v3 Authority Key Identifier:
                keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1-GtPcIUWFIeoHlPVTSV4xcnVJXY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.207.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:61:92:39:35:67:d0:e3:2f:57:10:2e:52:5e:33:f9:5a:74:
         e9:5e:69:1f:16:bf:25:ac:11:05:27:8d:6e:58:a4:c7:30:e7:
         6f:ef:b2:b9:72:f6:26:5b:4b:aa:d2:a4:79:80:a0:08:28:6d:
         5a:57:65:2a:96:12:45:56:d8:ef:3c:6b:d4:19:09:1d:db:73:
         fb:6b:ed:c0:f5:80:17:84:eb:32:a2:37:e7:3c:fc:a5:57:45:
         17:da:65:e5:14:43:5e:08:3d:1e:6e:0d:b2:b4:3b:b2:0a:b4:
         03:e9:37:c1:66:83:38:40:ef:b8:be:95:3c:93:19:c9:6d:95:
         95:8f:92:b3:7b:ec:e5:10:92:27:38:d1:2f:32:22:f6:63:6e:
         53:a3:2f:73:94:3c:53:6e:7d:7a:f3:7e:7c:8b:5f:2d:95:7b:
         94:1f:28:a3:69:f8:b4:f4:6b:cb:75:83:f8:a6:29:ca:bf:d0:
         ef:41:16:8f:dd:ac:87:15:6b:5f:e9:d8:b1:e6:31:64:97:3c:
         d2:1f:bb:e8:f0:53:4c:bf:81:53:7c:13:3a:e4:05:b8:5f:b0:
         70:a5:83:73:30:cb:44:69:f3:b5:0a:1f:98:2b:7c:e8:54:74:
         7e:c8:a1:4e:d7:08:94:d3:9e:99:7d:0b:b0:dc:e1:ae:c8:6d:
         c6:ba:30:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org