Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/CRDUxigpPooXo6fIdN9rsBihW2M.roa
File:                     CRDUxigpPooXo6fIdN9rsBihW2M.roa (raw, json)
Hash identifier:          1bI7lwbIXa/6P89s6TyLFsM22jKrNJjaNTT+lgltpas=
Subject key identifier:   09:10:D4:C6:28:29:3E:8A:17:A3:A7:C8:74:DF:6B:B0:18:A1:5B:63
Certificate issuer:       /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial:       018FCD7A7D07C67025231B4272204D198E18
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/CRDUxigpPooXo6fIdN9rsBihW2M.roa
Signing time:             Fri 31 May 2024 07:08:27 +0000
ROA not before:           Fri 31 May 2024 07:08:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199123
IP address blocks:        83.222.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 14:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:cd:7a:7d:07:c6:70:25:23:1b:42:72:20:4d:19:8e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
        Validity
            Not Before: May 31 07:08:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0910d4c628293e8a17a3a7c874df6bb018a15b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:17:d9:4c:36:6d:d7:74:e9:d7:fa:01:f5:8c:
                    79:3f:21:ab:e7:3f:78:e0:fb:69:0d:a1:59:33:8b:
                    49:13:eb:ee:b4:b9:a0:a1:2e:8a:f6:9a:73:67:bc:
                    2e:d3:3f:d0:46:44:ee:3a:e1:24:54:f2:d3:be:89:
                    48:4c:12:9f:3e:30:70:b2:bf:c8:db:29:d7:93:df:
                    e7:27:94:26:9d:39:8d:b3:63:14:36:de:4b:66:32:
                    25:17:81:9b:63:df:95:1b:52:33:c5:4f:cf:da:95:
                    0e:fb:11:28:52:63:15:8c:09:da:53:fd:88:a7:1c:
                    38:b0:fd:71:b2:0c:02:d3:93:d8:5f:cf:d3:2c:4e:
                    e4:3a:eb:9b:65:fe:c8:4e:10:f7:d3:59:c4:67:d8:
                    52:c9:35:5d:6b:ed:e4:1b:76:59:ff:b5:d1:5d:87:
                    48:eb:c7:71:96:80:21:42:c7:67:4c:12:44:22:eb:
                    7b:14:22:06:11:3d:b7:0f:f3:34:c2:df:11:e2:90:
                    ed:14:ee:fd:e8:52:39:a2:35:b6:90:e6:b2:01:b6:
                    5e:cf:89:e0:be:91:39:c6:21:0a:d4:23:f2:6c:bb:
                    e1:cc:5c:71:7b:2c:39:2e:82:19:f1:e3:27:d0:64:
                    94:f4:85:9b:6b:a7:3a:4e:5e:be:b8:6d:44:70:72:
                    35:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:10:D4:C6:28:29:3E:8A:17:A3:A7:C8:74:DF:6B:B0:18:A1:5B:63
            X509v3 Authority Key Identifier:
                keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/CRDUxigpPooXo6fIdN9rsBihW2M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.222.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:8a:81:72:0b:09:3d:ec:af:bd:62:7e:e5:32:5b:72:c5:6c:
         f7:4f:63:91:55:b4:30:47:dd:3e:16:b7:d2:86:5b:85:a3:d1:
         2a:5e:b6:ef:2b:f8:10:20:71:45:b8:45:92:3e:c1:b6:ba:6c:
         ea:80:1a:38:c9:2d:cf:19:3f:57:25:7c:c9:3c:ee:51:80:47:
         74:a5:9d:4c:1c:64:64:b6:25:ae:cd:96:f8:dc:d8:76:b6:f5:
         47:e4:38:5e:8e:ef:be:db:f3:16:23:96:6f:95:9f:e8:08:00:
         df:b1:7a:5a:f2:f3:0c:5f:34:70:90:f5:e6:b5:3c:fe:a8:f7:
         4f:e8:b2:f8:18:b9:41:09:0d:4e:cc:34:dd:77:f2:ad:d0:04:
         25:7e:76:14:f2:82:aa:6c:b8:a0:be:fd:a4:2e:39:8a:f1:98:
         46:b5:b3:2c:d5:28:99:0f:96:bb:0f:fd:08:fe:11:d5:5f:92:
         a4:31:6a:7d:48:f5:cc:67:4b:a8:4e:d0:a7:40:59:1d:87:d6:
         14:a2:6c:bd:ef:d0:03:0c:c8:8f:e0:ce:18:b4:2d:02:b5:60:
         f1:1b:0b:e1:c5:fc:c1:8f:88:b6:e2:d9:e7:fe:0b:72:58:6f:
         38:b9:25:8c:e8:1a:26:03:38:35:39:c1:ad:3e:25:c1:93:61:
         25:03:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 17:34:01 2024 by rpki-client on console-ams.rpki-client.org