Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iWJlj240C2hxMfUE1wXKmHmFGAg.roa
File:                     iWJlj240C2hxMfUE1wXKmHmFGAg.roa (raw, json)
Hash identifier:          2yMEywoXXqC7hFSYDQ987lf5C6d1ac3YCreB0aeQ4Bc=
Subject key identifier:   89:62:65:8F:6E:34:0B:68:71:31:F5:04:D7:05:CA:98:79:85:18:08
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       018736DF9383BE10EF6BAEB5C82B1B328136
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iWJlj240C2hxMfUE1wXKmHmFGAg.roa
Signing time:             Fri 31 Mar 2023 08:53:54 +0000
ROA not before:           Fri 31 Mar 2023 08:53:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     32780
IP address blocks:        185.194.179.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 13 Apr 2023 16:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:36:df:93:83:be:10:ef:6b:ae:b5:c8:2b:1b:32:81:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Mar 31 08:53:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8962658f6e340b687131f504d705ca9879851808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:22:f9:3b:a1:e6:ec:f4:bc:9b:bc:d7:df:88:
                    d3:e6:9a:53:23:a7:63:64:70:34:02:41:2a:bf:08:
                    ae:07:6a:a1:92:ec:fd:03:06:68:c1:48:3a:b5:78:
                    67:86:3e:b0:3c:df:b8:93:76:94:7d:f5:d2:7f:a1:
                    86:37:05:ea:23:cf:da:c1:d3:2e:da:b3:ea:e3:ec:
                    89:c6:40:3c:28:fd:f6:5d:e7:b7:32:c6:e8:47:d6:
                    4f:50:2d:4c:93:cb:d8:45:b0:a3:87:6e:f0:fe:cc:
                    fc:49:09:41:2e:b4:df:ab:f6:48:c5:db:57:0e:a7:
                    50:28:9f:bc:4b:78:50:dd:3a:47:ec:25:35:4c:54:
                    ed:79:78:6a:00:b2:54:32:25:7e:27:87:f6:7c:b2:
                    2a:73:e1:21:35:54:7a:bd:83:6a:5d:5c:93:86:0e:
                    ff:31:99:ef:81:ec:6e:54:95:bf:b7:3a:67:26:15:
                    f8:d0:22:03:ce:b3:5e:21:ca:a0:96:99:75:d8:51:
                    48:86:75:81:94:60:74:c4:dd:b3:26:10:56:09:fa:
                    a1:02:2f:5d:64:6b:13:dc:a3:e4:95:36:08:4f:fa:
                    e1:70:7c:6b:af:a7:71:04:4b:8d:79:54:2d:c6:ba:
                    af:cc:d4:69:45:4e:d6:81:4a:1b:78:1f:d8:1c:55:
                    ed:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:62:65:8F:6E:34:0B:68:71:31:F5:04:D7:05:CA:98:79:85:18:08
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iWJlj240C2hxMfUE1wXKmHmFGAg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.194.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:ea:2e:8a:d0:70:b0:b7:49:81:71:27:32:32:f1:fb:d7:0c:
         5f:c5:ab:3c:6d:02:db:e2:61:b8:65:be:28:dc:09:72:3d:46:
         4b:e2:ca:81:58:42:00:17:7b:a1:57:a7:09:4f:6a:8d:43:bd:
         80:97:39:7b:26:47:da:92:89:5d:8d:37:a3:99:53:bb:a9:f0:
         ab:09:6e:13:02:67:c4:56:f8:69:b9:10:35:80:2f:2e:17:fc:
         cb:a8:3c:a8:87:62:de:a4:90:ce:24:c7:b7:50:0e:9f:8e:fd:
         32:93:4e:86:df:e7:74:57:fa:3d:1f:fc:e2:0b:14:ff:a3:9e:
         ba:f8:f1:91:d9:32:40:de:45:57:8a:11:c3:39:78:0a:e2:71:
         5a:66:c9:c4:2b:70:94:37:27:f5:08:46:58:6c:36:64:a5:92:
         61:c9:82:9f:a8:f5:56:56:aa:91:5c:b8:9a:eb:a9:d2:aa:59:
         28:d1:e1:2f:ee:83:a7:b7:c6:83:65:26:be:3c:d1:d3:cd:ae:
         7f:98:e1:49:7f:90:8d:38:30:1f:e0:be:04:ce:77:fd:f1:be:
         fd:19:14:e8:78:18:2c:b2:85:4d:03:93:42:8c:ca:51:23:d5:
         b7:fb:e1:5e:8f:0d:39:46:2f:d3:bc:ef:9f:a7:7d:be:27:72:
         d9:b2:40:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYc235ODvhDva661yCsbMoE2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwMzMxMDg1MzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTYyNjU4ZjZlMzQwYjY4NzEzMWY1MDRkNzA1Y2E5ODc5ODUxODA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iL5O6Hm7PS8m7zX34jT5ppTI6dj
ZHA0AkEqvwiuB2qhkuz9AwZowUg6tXhnhj6wPN+4k3aUffXSf6GGNwXqI8/awdMu
2rPq4+yJxkA8KP32Xee3MsboR9ZPUC1Mk8vYRbCjh27w/sz8SQlBLrTfq/ZIxdtX
DqdQKJ+8S3hQ3TpH7CU1TFTteXhqALJUMiV+J4f2fLIqc+EhNVR6vYNqXVyThg7/
MZnvgexuVJW/tzpnJhX40CIDzrNeIcqglpl12FFIhnWBlGB0xN2zJhBWCfqhAi9d
ZGsT3KPklTYIT/rhcHxrr6dxBEuNeVQtxrqvzNRpRU7WgUobeB/YHFXtEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIliZY9uNAtocTH1BNcFyph5hRgIMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvaVdKbGoyNDBDMmh4TWZVRTF3WEttSG1GR0FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucKzMA0G
CSqGSIb3DQEBCwUAA4IBAQBH6i6K0HCwt0mBcScyMvH71wxfxas8bQLb4mG4Zb4o
3AlyPUZL4sqBWEIAF3uhV6cJT2qNQ72Alzl7JkfakoldjTejmVO7qfCrCW4TAmfE
VvhpuRA1gC8uF/zLqDyoh2LepJDOJMe3UA6fjv0yk06G3+d0V/o9H/ziCxT/o566
+PGR2TJA3kVXihHDOXgK4nFaZsnEK3CUNyf1CEZYbDZkpZJhyYKfqPVWVqqRXLia
66nSqlko0eEv7oOnt8aDZSa+PNHTza5/mOFJf5CNODAf4L4Eznf98b79GRToeBgs
soVNA5NCjMpRI9W3++Fejw05Ri/TvO+fp32+J3LZskDf
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org