Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/gFpCTHGhtVbw6mIPrakz9BMg_Lk.roa
File:                     gFpCTHGhtVbw6mIPrakz9BMg_Lk.roa (raw, json)
Hash identifier:          ngjFSrJl9hbO0Vsc4kafjt72JQvp+bBbO6G1Q+hre70=
Subject key identifier:   80:5A:42:4C:71:A1:B5:56:F0:EA:62:0F:AD:A9:33:F4:13:20:FC:B9
Certificate issuer:       /CN=97eac753379fd22ff6515033f513dc282463ad2d
Certificate serial:       0185715E731768C90FEBDC7E3006E35761FB
Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/gFpCTHGhtVbw6mIPrakz9BMg_Lk.roa
Signing time:             Mon 02 Jan 2023 07:24:53 +0000
ROA not before:           Mon 02 Jan 2023 07:24:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211336
IP address blocks:        185.184.145.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:5e:73:17:68:c9:0f:eb:dc:7e:30:06:e3:57:61:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d
        Validity
            Not Before: Jan  2 07:24:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=805a424c71a1b556f0ea620fada933f41320fcb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:87:d7:24:24:f1:ff:b1:70:36:e6:11:57:ac:
                    1f:1e:24:3a:3f:b0:03:6d:8a:7e:98:bf:03:65:0a:
                    e5:96:2b:71:34:04:67:69:11:cf:b9:94:93:61:d8:
                    9f:3a:1d:39:a6:2e:5f:f2:0f:43:31:8e:18:d4:38:
                    89:7d:c6:94:84:9d:58:26:f2:c8:1a:1d:a9:17:8a:
                    c6:41:12:26:f4:3c:99:53:e3:62:2f:21:43:27:8a:
                    93:28:71:4b:ae:70:45:a6:8e:57:85:f5:d1:12:50:
                    5f:9d:c9:39:40:7b:67:e7:4b:30:7d:fc:0d:a5:b2:
                    8b:fd:ab:f9:df:6b:59:82:4a:08:64:60:ff:ed:aa:
                    73:6e:67:d7:ca:b4:d5:e8:3d:22:72:f8:99:7a:8b:
                    d8:9d:47:e7:35:97:f0:7f:63:a3:95:d6:3c:15:2b:
                    a0:73:da:f3:50:fd:b4:92:5e:b6:e1:8d:1a:93:1b:
                    f0:45:ba:fa:04:a0:48:22:6b:90:ec:70:a3:f7:1d:
                    0d:88:e1:3d:a0:75:91:59:52:7c:11:6c:2c:2b:9c:
                    47:c4:71:0c:41:bc:25:20:5d:58:b9:ca:09:9a:bd:
                    a3:1e:c9:7a:8b:28:9d:68:41:5e:a9:35:16:e3:1e:
                    51:09:82:49:8b:b6:2e:f0:53:33:a5:2b:a6:9e:53:
                    bf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5A:42:4C:71:A1:B5:56:F0:EA:62:0F:AD:A9:33:F4:13:20:FC:B9
            X509v3 Authority Key Identifier:
                keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/gFpCTHGhtVbw6mIPrakz9BMg_Lk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.184.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:31:a5:84:74:7c:bc:69:d0:df:13:d6:14:2e:4a:e3:9c:ca:
         39:ca:e5:6b:c8:a7:d3:55:e8:2a:88:f1:28:8b:49:6f:85:28:
         6d:51:31:7e:7c:f5:d4:f7:34:4f:a0:0b:c4:91:54:81:66:a6:
         1a:f3:02:7b:55:f1:17:4e:e8:32:82:7a:61:ec:8d:48:81:c0:
         3d:2a:bc:0f:3b:e3:2e:df:85:09:c9:d4:4b:5d:a2:00:48:ba:
         fb:d3:e1:1e:61:a7:24:71:da:b2:64:29:d5:28:1c:41:d1:46:
         74:a6:70:c7:aa:c4:b8:ad:57:a0:7f:2e:c0:dd:81:e5:df:eb:
         5b:95:e5:38:ea:c3:9d:60:6e:e4:73:c2:80:a5:5e:14:34:ea:
         61:0e:d1:2c:28:75:b6:5f:83:b8:80:71:79:7b:99:c6:3e:78:
         e6:04:af:6b:38:65:71:77:b9:c0:07:21:2a:03:6c:4f:0e:a6:
         cf:f8:e5:6d:8a:02:e4:aa:62:86:cd:4c:c0:b6:52:39:66:9b:
         ee:53:3d:9e:da:b9:bc:7b:82:5f:ef:05:9d:b7:c9:c5:e0:11:
         d4:3f:08:1f:d1:05:9d:87:6e:0a:e3:6f:20:fa:2d:2d:7a:6f:
         b1:02:c1:c5:c6:6f:48:ed:3e:33:19:95:e0:ff:ae:57:52:49:
         85:46:93:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org