Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/DpkozePtxpH1QXt857oZJ8ueZHQ.roa
File:                     DpkozePtxpH1QXt857oZJ8ueZHQ.roa (raw, json)
Hash identifier:          EKP6Oj6yLjk11zCMoTHhJ7kKujpycpBIOD0Ct3spYmw=
Subject key identifier:   0E:99:28:CD:E3:ED:C6:91:F5:41:7B:7C:E7:BA:19:27:CB:9E:64:74
Certificate issuer:       /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial:       01856F79720521A9C9CF1C2037BA502332EE
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/DpkozePtxpH1QXt857oZJ8ueZHQ.roa
Signing time:             Sun 01 Jan 2023 22:35:08 +0000
ROA not before:           Sun 01 Jan 2023 22:35:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34984
IP address blocks:        185.237.82.0/24 maxlen: 24
                          185.237.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 01 Mar 2023 21:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:79:72:05:21:a9:c9:cf:1c:20:37:ba:50:23:32:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
        Validity
            Not Before: Jan  1 22:35:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0e9928cde3edc691f5417b7ce7ba1927cb9e6474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:e0:2f:b1:53:80:3b:47:46:64:31:8c:24:
                    c0:54:a6:ba:dd:62:6c:4f:57:dc:a9:5d:f0:32:7a:
                    5f:95:de:86:53:e1:d0:b0:5c:68:4b:28:94:ff:5b:
                    3a:1f:e7:a5:d9:93:63:e6:fa:ba:0c:2f:6e:29:b5:
                    ac:ad:2e:f3:de:a3:f0:6d:20:db:cb:27:e0:14:9e:
                    a6:19:a4:2c:7e:f0:56:52:ae:ef:92:fe:5b:24:02:
                    10:35:b6:99:ca:5c:94:db:ad:9f:26:c9:48:5e:d9:
                    d8:98:63:e1:4a:39:e9:2a:70:71:0a:d6:ea:8b:82:
                    f5:cf:f4:b1:5b:54:b1:b0:98:ad:08:ec:97:8b:7b:
                    12:73:11:ad:11:4a:12:4a:ac:55:73:bb:b2:33:c3:
                    d3:50:97:5f:30:b9:61:79:a1:f8:0c:16:9f:86:f6:
                    33:e6:f0:c8:c7:a3:9f:45:87:74:e2:fc:bd:64:cd:
                    f0:39:27:50:15:44:2e:b3:68:75:00:9e:5a:fb:01:
                    49:f0:48:21:21:c9:7a:60:70:9e:78:21:16:d3:29:
                    1a:7b:99:97:02:91:2b:91:07:65:74:55:c1:29:ac:
                    fb:79:8f:e3:01:c7:36:0f:76:cd:97:9f:c8:22:55:
                    a3:fa:0c:ba:07:41:24:a4:83:2f:8c:ec:ed:f5:80:
                    8a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:99:28:CD:E3:ED:C6:91:F5:41:7B:7C:E7:BA:19:27:CB:9E:64:74
            X509v3 Authority Key Identifier:
                keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/DpkozePtxpH1QXt857oZJ8ueZHQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.237.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:61:af:82:0f:dd:fb:53:bd:2a:7a:4e:87:4c:13:37:3e:60:
         a7:bc:5c:2d:d7:84:8a:f5:6b:6f:e0:6f:e7:6b:75:48:88:27:
         73:27:81:20:cb:70:63:ae:6f:31:2a:77:f5:3e:06:85:71:ea:
         53:1a:9b:ee:96:07:fc:5d:22:bd:77:18:0e:8a:8f:3a:b0:39:
         12:7f:55:fb:7c:08:1c:e0:f8:0b:0b:a6:69:b8:7f:28:9a:e0:
         1b:76:68:f9:69:b3:8f:06:a4:ba:9f:8f:58:bc:75:95:7a:57:
         4a:f4:f1:49:dd:c5:03:fe:ad:f1:70:83:75:27:77:76:9a:ed:
         cb:9e:7c:e2:5d:f6:86:1c:ae:f8:a5:9e:e5:e3:ab:e0:56:73:
         76:cc:0e:91:1e:5f:a5:30:44:6b:a5:67:61:38:a9:d1:6b:5a:
         cc:ed:e9:7b:10:e6:a9:00:f0:ae:2f:bf:72:1b:9b:5f:f2:0b:
         b2:63:18:cb:68:1e:14:0c:f3:2f:e1:af:61:d5:7d:a3:93:87:
         50:46:c1:3f:4e:13:d8:41:45:75:d0:be:e6:6f:6c:be:21:8e:
         4f:58:7b:26:4f:77:bb:1f:8a:0c:2c:99:cf:ad:52:b3:eb:0a:
         48:68:05:31:a7:54:88:23:48:c3:42:8c:1a:00:e2:35:48:08:
         c5:ca:28:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:59 2024 by rpki-client on console-fra.rpki-client.org