Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/_TRArB1VCCF5D9z4cOa46ChTEis.roa
File:                     _TRArB1VCCF5D9z4cOa46ChTEis.roa (raw, json)
Hash identifier:          QUep9lJ/ZbQ4mZeJhPNfpANt5tfZOWxRuyCmGQVpSN4=
Subject key identifier:   FD:34:40:AC:1D:55:08:21:79:0F:DC:F8:70:E6:B8:E8:28:53:12:2B
Certificate issuer:       /CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
Certificate serial:       018571C313835A006DA0BA64711F871867DE
Authority key identifier: 5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/_TRArB1VCCF5D9z4cOa46ChTEis.roa
Signing time:             Mon 02 Jan 2023 09:14:47 +0000
ROA not before:           Mon 02 Jan 2023 09:14:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206454
IP address blocks:        185.183.226.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:c3:13:83:5a:00:6d:a0:ba:64:71:1f:87:18:67:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
        Validity
            Not Before: Jan  2 09:14:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fd3440ac1d550821790fdcf870e6b8e82853122b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f5:e0:a2:4c:bd:40:ca:f2:60:d8:95:c0:b1:
                    fd:f2:66:14:3c:48:15:ef:9c:73:f7:16:a3:17:6c:
                    e5:82:1e:7c:24:57:d4:48:b1:d0:e0:e0:ca:95:23:
                    7a:85:d1:dd:69:d2:58:6f:fe:87:65:5b:d0:69:c8:
                    dc:96:be:49:0e:96:29:0d:4b:4c:80:24:5e:8f:a3:
                    b8:1f:7f:74:9e:19:a1:bf:34:67:ae:af:88:83:f6:
                    8a:20:20:56:49:fe:7a:28:b8:4b:10:7e:1c:42:7c:
                    02:96:b1:3a:eb:3e:fc:34:97:81:43:4b:65:fe:b5:
                    ad:0e:f2:76:e6:dc:2d:df:b7:fe:db:e9:18:a4:0a:
                    cc:cf:62:73:7c:a7:0f:cb:c7:27:47:69:19:69:03:
                    a5:9f:63:2c:e1:34:f5:1f:47:24:32:19:64:41:1f:
                    71:df:5a:7f:1f:85:e5:8a:0c:eb:21:99:24:9e:2c:
                    78:8d:a6:26:00:8a:75:79:00:20:18:e8:ce:90:bc:
                    34:48:a0:9a:9a:02:2f:c8:f6:10:ef:55:8f:ae:84:
                    d6:ce:8a:cf:b4:e4:22:79:49:06:aa:18:86:dc:8a:
                    9b:98:f2:26:86:53:f0:24:d3:ac:05:89:ed:aa:10:
                    59:7a:26:e8:2a:ed:c2:7d:89:f8:7b:17:c3:16:15:
                    c5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:34:40:AC:1D:55:08:21:79:0F:DC:F8:70:E6:B8:E8:28:53:12:2B
            X509v3 Authority Key Identifier:
                keyid:5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/_TRArB1VCCF5D9z4cOa46ChTEis.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:0f:56:4c:53:4f:c2:ce:c7:dd:0c:ac:b7:b0:63:1a:65:fd:
         d7:3a:1a:01:d7:4e:6c:e8:2f:97:5a:24:ab:7b:e8:6b:cf:30:
         e2:e8:32:d6:16:b2:ed:dc:99:95:b0:48:a8:af:80:cc:19:8c:
         4a:e9:79:42:23:cd:ca:f4:81:6e:5b:43:3c:10:2c:e1:08:d3:
         6f:7e:75:f9:dd:ce:ba:ba:6f:f1:73:1c:ec:fb:19:df:5e:bc:
         a7:8b:36:e4:0e:32:b6:42:2a:6e:db:62:75:de:b2:bf:13:97:
         17:6c:54:5f:ce:ca:85:e9:73:66:e1:ca:c1:5f:7a:b5:ee:f8:
         49:6d:73:8a:63:bd:28:f9:3f:b2:1c:f6:7f:e5:1f:93:65:5c:
         ea:f7:c3:50:b3:cd:c7:c6:bc:42:fc:94:26:13:9a:52:3a:4e:
         16:4f:e0:4a:4d:d2:86:70:58:14:68:a7:ad:20:f7:4e:d2:c1:
         70:6f:a7:74:88:be:8f:31:9d:f1:2d:09:c4:55:5e:63:6c:c9:
         96:f5:d4:84:16:ae:f3:f3:d9:ca:52:bd:dc:c4:81:fd:5d:07:
         1f:ac:ed:25:4b:db:b6:be:01:dc:60:c2:35:16:ca:2d:a0:b1:
         4b:96:e2:a5:8e:d7:f0:92:f6:b3:51:cb:01:8c:fe:8e:fd:b9:
         db:3b:a6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:07 2024 by rpki-client on console-fra.rpki-client.org