Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/Tda_9sDAOikQFAJ5DcrGzDFhsSE.roa
File:                     Tda_9sDAOikQFAJ5DcrGzDFhsSE.roa (raw, json)
Hash identifier:          K3KC1lxffYO0P5kDCRGbdQO5Hf74H80CJyhfuR3F+w8=
Subject key identifier:   4D:D6:BF:F6:C0:C0:3A:29:10:14:02:79:0D:CA:C6:CC:31:61:B1:21
Certificate issuer:       /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial:       018CC2DB1393BCABDBBE14D840666196761F
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/Tda_9sDAOikQFAJ5DcrGzDFhsSE.roa
Signing time:             Mon 01 Jan 2024 02:29:46 +0000
ROA not before:           Mon 01 Jan 2024 02:29:46 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     34984
IP address blocks:        185.237.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Apr 2024 12:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:13:93:bc:ab:db:be:14:d8:40:66:61:96:76:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
        Validity
            Not Before: Jan  1 02:29:46 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4dd6bff6c0c03a29101402790dcac6cc3161b121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:68:d2:a0:09:56:5a:f8:b2:6e:af:f6:ac:fc:
                    ec:85:be:83:b5:6d:44:80:8a:a7:d7:3a:02:c1:ec:
                    45:99:ab:c8:64:e3:0c:60:3f:fd:cd:d6:55:68:79:
                    ba:ce:61:44:81:c6:78:df:ec:5b:c5:59:ae:63:48:
                    af:bb:c8:5f:22:8c:c8:33:e3:57:ed:73:f3:6f:79:
                    9d:db:74:6c:ab:60:fe:80:4d:71:16:db:5d:a4:2f:
                    91:d0:2c:a7:38:68:bc:cf:67:20:9f:53:be:c7:fc:
                    df:1d:e7:71:4d:b5:4f:20:63:00:1b:28:61:80:f7:
                    3c:6c:db:43:d5:a3:12:30:7a:2d:da:0b:e8:22:0f:
                    55:28:a8:7d:e9:fb:1f:30:d4:47:de:d4:75:6c:7f:
                    43:27:82:e6:c2:b0:c9:ad:60:79:c0:15:eb:7a:fd:
                    91:f6:8d:14:e9:73:42:75:be:34:87:1d:e4:e7:26:
                    a0:03:f7:71:53:6e:98:0c:23:82:53:40:ee:0f:c7:
                    24:81:06:4b:72:a5:6a:90:68:3e:11:d7:5f:b4:00:
                    d7:a4:63:ef:d4:33:e6:e8:ee:95:04:61:53:9a:32:
                    0d:6c:79:06:28:71:ca:00:27:3b:2c:b6:45:b2:c0:
                    87:5a:06:47:a6:28:18:e1:bf:b4:48:1c:a6:27:d3:
                    a9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D6:BF:F6:C0:C0:3A:29:10:14:02:79:0D:CA:C6:CC:31:61:B1:21
            X509v3 Authority Key Identifier:
                keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/Tda_9sDAOikQFAJ5DcrGzDFhsSE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.237.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:c6:fa:b7:51:37:fb:37:c1:0c:75:51:c4:3c:d8:8e:8a:4f:
         f7:50:8a:65:66:f0:f9:02:7d:64:0c:7c:9a:8a:b3:10:49:ae:
         1a:e4:06:ce:36:14:79:a8:52:8c:cd:1a:f4:ff:2b:5d:1e:a9:
         34:2d:17:e2:71:a0:86:82:1b:eb:49:aa:b4:31:ef:48:43:49:
         ae:ad:5e:c6:5d:97:e9:e9:5d:d4:e1:b6:ab:fb:d7:bb:a1:0c:
         29:eb:c2:75:c3:2f:24:b6:a9:97:ca:f7:c0:d8:aa:ab:89:33:
         89:91:af:97:5b:b6:12:02:17:03:0f:c6:f1:c9:24:d7:98:63:
         6c:37:0a:e8:a5:64:34:34:4e:60:f3:5e:04:00:fe:39:c6:f0:
         48:57:b1:db:f0:ca:8c:7b:f7:82:4b:d9:21:23:51:4c:20:45:
         ce:9f:ed:71:62:c7:22:0f:c1:a1:65:f4:91:7b:57:e4:71:7e:
         62:a1:34:54:ee:9a:bb:d7:22:c4:ba:5a:e9:5d:5d:b0:da:02:
         d6:6f:d8:35:d7:dc:98:93:c5:0b:f5:c4:75:ad:c6:8f:e3:72:
         20:e3:ad:a9:8e:a2:eb:87:6a:18:c4:70:fc:1b:7e:ea:71:bd:
         ba:3b:94:67:d6:ac:f7:f2:c0:4a:52:0f:d8:b1:7d:f0:27:cc:
         27:36:dd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org