Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Jq258qpxJ2xzPzPjdgnu5hHGhyc.roa
File:                     Jq258qpxJ2xzPzPjdgnu5hHGhyc.roa (raw, json)
Hash identifier:          Map3rcrK5eV2rXm2CeLbcBf3xekKwuZBK+GjM/2qoU4=
Subject key identifier:   26:AD:B9:F2:AA:71:27:6C:73:3F:33:E3:76:09:EE:E6:11:C6:87:27
Certificate issuer:       /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial:       0185737ACCC42A6B99C42C78D30C78ADC6F1
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Jq258qpxJ2xzPzPjdgnu5hHGhyc.roa
Signing time:             Mon 02 Jan 2023 17:15:05 +0000
ROA not before:           Mon 02 Jan 2023 17:15:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200847
IP address blocks:        185.179.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 Nov 2023 09:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:7a:cc:c4:2a:6b:99:c4:2c:78:d3:0c:78:ad:c6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
        Validity
            Not Before: Jan  2 17:15:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26adb9f2aa71276c733f33e37609eee611c68727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6c:ef:39:28:6f:7b:69:96:c5:c0:df:82:1c:
                    a9:ac:d8:7a:a2:e9:ca:f2:0f:16:1d:86:c3:d3:fe:
                    a2:93:bb:70:1b:cc:20:fa:52:75:b8:d9:61:04:24:
                    44:1c:9b:62:52:de:7d:8f:6a:14:b5:de:b6:d0:a1:
                    e7:89:cb:4f:5d:39:d9:d9:0f:91:c9:6f:63:fe:d8:
                    59:01:a6:7e:93:25:ef:c8:cd:d6:b1:55:a4:05:f6:
                    d5:40:d3:82:b4:dd:8d:32:f3:e1:5f:c3:66:0f:c9:
                    f7:24:2f:5b:bf:f9:df:8b:40:7a:ae:75:0c:9a:90:
                    bd:3d:53:14:8a:e0:01:ed:dc:41:a0:62:10:7b:7d:
                    e6:fd:da:55:76:8e:9a:c2:51:63:b4:e2:7f:82:33:
                    ef:ea:89:fb:2b:59:f8:e4:75:b2:f0:16:b8:b9:12:
                    d3:3f:b5:32:c1:c4:7e:1c:16:15:7b:94:25:a8:ff:
                    76:09:3b:50:23:7b:59:6e:a0:8d:69:98:8b:5f:3c:
                    29:85:79:42:5e:fc:bd:a2:e1:17:61:ea:1e:70:af:
                    85:40:50:c2:ac:9a:53:a0:46:ce:c1:5b:07:76:c1:
                    8e:f8:81:6f:22:80:7c:fd:f1:4e:19:97:0b:87:7b:
                    1d:ab:ba:cc:b1:f6:e7:7f:17:d9:b4:b3:18:97:cc:
                    ce:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AD:B9:F2:AA:71:27:6C:73:3F:33:E3:76:09:EE:E6:11:C6:87:27
            X509v3 Authority Key Identifier:
                keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Jq258qpxJ2xzPzPjdgnu5hHGhyc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:4f:ab:44:c6:a3:dd:67:84:07:13:02:d8:36:ae:9f:c2:9c:
         57:21:a5:78:b4:a3:cc:9f:69:72:0e:48:b3:c1:60:09:fc:df:
         66:4c:93:89:24:97:43:6d:5c:97:13:ec:02:05:23:70:25:6d:
         38:9c:d5:dc:ab:e4:72:40:10:c4:6b:e3:7b:3a:37:cd:ef:20:
         71:5d:73:93:94:44:30:fa:84:9b:39:33:7b:8b:3d:ae:d5:78:
         41:a2:22:df:56:e3:05:75:a7:a9:b6:d4:4e:3c:91:e5:de:03:
         65:e4:f4:e5:84:37:b7:53:cf:25:4f:9a:6e:7f:bb:f7:f9:82:
         63:0f:18:35:db:2f:14:f8:97:98:a1:31:08:2e:ea:0f:9a:c9:
         99:b8:67:82:41:be:bc:66:e2:67:cc:63:07:88:fd:21:f7:06:
         24:b3:c9:f9:cf:bf:01:c3:e7:af:7b:6b:7e:82:0e:1d:9b:5d:
         5b:bd:0a:45:ed:ba:d4:5f:ca:3b:21:6e:11:32:a8:4c:c1:d9:
         a5:d9:01:2d:05:a2:ff:23:bd:9c:97:47:a4:e5:a3:33:35:24:
         39:5f:79:ed:c9:b4:98:2b:62:e6:f1:35:85:12:2f:ea:80:ca:
         1f:7c:39:2d:c0:23:b1:b1:38:2d:9a:54:65:98:c6:e8:38:79:
         62:bd:57:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org