Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/1fSGDy6_oterCUwVFgL3l27PNWw.roa
File:                     1fSGDy6_oterCUwVFgL3l27PNWw.roa (raw, json)
Hash identifier:          0l1qqv8jr4DXbxJw1MeCGha0N9xUDwLgISswH2dx3vQ=
Subject key identifier:   D5:F4:86:0F:2E:BF:A2:D7:AB:09:4C:15:16:02:F7:97:6E:CF:35:6C
Certificate issuer:       /CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Certificate serial:       01856D0A83E229D42F3B178CDC9CE915DE08
Authority key identifier: 8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/1fSGDy6_oterCUwVFgL3l27PNWw.roa
Signing time:             Sun 01 Jan 2023 11:14:43 +0000
ROA not before:           Sun 01 Jan 2023 11:14:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     22351
IP address blocks:        185.244.14.0/23 maxlen: 23
                          185.244.12.0/23 maxlen: 23
                          80.73.212.0/22 maxlen: 22
                          80.73.208.0/22 maxlen: 22
                          80.73.216.0/24 maxlen: 24
                          80.73.217.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:0a:83:e2:29:d4:2f:3b:17:8c:dc:9c:e9:15:de:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cee8804ff70376e2afe21abf93e228d5afdd509
        Validity
            Not Before: Jan  1 11:14:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d5f4860f2ebfa2d7ab094c151602f7976ecf356c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:44:07:93:37:35:8f:6e:d9:72:ac:f2:72:08:
                    cd:19:98:f7:a2:4f:af:05:92:c3:5a:40:f5:3b:0a:
                    c5:80:c8:8c:0c:00:1b:97:e8:ee:80:f8:1b:df:7a:
                    7f:6d:81:0e:be:73:46:b6:28:d5:0e:e3:b9:d8:e5:
                    8e:9a:58:1c:f5:64:51:06:2b:89:14:8c:93:60:0e:
                    67:a4:5f:f3:21:2d:2d:08:12:71:09:e3:73:fe:a1:
                    61:6f:8c:66:32:53:01:9e:6f:db:00:78:25:bb:e8:
                    a7:3c:6c:20:d9:a8:71:1b:56:f4:9a:e6:77:5a:8d:
                    5a:72:a6:f6:81:e2:eb:0c:86:1c:0e:ae:ed:ae:ca:
                    c3:0b:28:35:ba:16:b7:58:e9:6a:b4:d9:3f:14:fc:
                    57:8d:e5:cf:1a:b9:b5:db:fb:ed:2a:67:06:ba:ae:
                    aa:bd:95:ed:67:b5:73:03:8d:7f:a5:05:d5:27:9b:
                    6c:4e:6f:98:89:d0:62:62:27:98:30:18:aa:36:35:
                    fe:34:6c:00:01:f5:0b:0f:51:61:7b:05:f4:e9:bd:
                    aa:db:36:fb:15:41:dd:5a:f4:58:fc:0d:d8:86:94:
                    a1:6b:2d:f6:fe:3a:31:f1:4d:9d:4f:d4:2d:f6:5b:
                    bd:b4:9e:85:ce:48:e9:0f:23:57:c9:8b:2f:1e:89:
                    d9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F4:86:0F:2E:BF:A2:D7:AB:09:4C:15:16:02:F7:97:6E:CF:35:6C
            X509v3 Authority Key Identifier:
                keyid:8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/1fSGDy6_oterCUwVFgL3l27PNWw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.73.208.0-80.73.217.255
                  185.244.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:fe:c7:b9:02:63:0a:77:8f:86:70:f8:29:95:83:95:37:31:
         2c:ab:c6:d6:b8:31:87:1b:1f:9a:a1:f0:8d:5a:6a:1d:bb:98:
         ad:83:42:64:03:47:4e:cc:4a:95:44:3f:af:70:d7:b2:78:a1:
         2d:00:b8:2d:b1:10:2f:e1:cd:df:b1:f3:5c:bb:7f:5c:aa:dc:
         f7:9a:f8:84:2f:d5:4e:b8:3f:c1:64:b6:02:9c:ce:95:b3:7c:
         ac:cd:22:ae:1a:d6:44:fb:6a:8a:d5:f1:8e:13:d1:41:0d:88:
         b0:23:63:16:b6:06:f9:a9:75:40:62:ef:b2:3a:97:97:90:26:
         a9:91:8d:be:b5:aa:13:42:3a:94:30:52:f6:47:3b:e8:21:45:
         9d:d3:c0:39:9d:25:3a:79:c4:f7:18:1c:f4:73:68:f1:4f:93:
         17:eb:53:68:72:71:e8:b1:0f:ee:71:16:e4:a8:5b:8e:08:32:
         15:28:a3:df:c6:82:4e:a5:9e:0a:48:e2:fb:47:11:5b:34:05:
         b6:fc:10:bf:4a:c4:a8:86:f4:76:0b:9b:4f:78:4f:7e:54:0a:
         dd:16:9a:5c:cc:d5:a8:70:3b:fb:d5:9f:0c:3d:c4:bb:3d:bc:
         1c:57:22:ce:06:5b:e9:fd:5d:b1:3c:01:34:d4:fd:1a:55:8b:
         c0:ba:f4:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:29 2024 by rpki-client on console-fra.rpki-client.org