Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/Ipr5gGODZNbW6by-_6uPZebfFEY.roa
File:                     Ipr5gGODZNbW6by-_6uPZebfFEY.roa (raw, json)
Hash identifier:          i13VKfykgogBMkPQiStqcXJYo504r1l2xCFu0waK63Q=
Subject key identifier:   22:9A:F9:80:63:83:64:D6:D6:E9:BC:BE:FF:AB:8F:65:E6:DF:14:46
Certificate issuer:       /CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7
Certificate serial:       018572B3F7A97236BBF633C2C7DAC21B4393
Authority key identifier: 62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/Ipr5gGODZNbW6by-_6uPZebfFEY.roa
Signing time:             Mon 02 Jan 2023 13:37:54 +0000
ROA not before:           Mon 02 Jan 2023 13:37:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        185.226.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:b3:f7:a9:72:36:bb:f6:33:c2:c7:da:c2:1b:43:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7
        Validity
            Not Before: Jan  2 13:37:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=229af980638364d6d6e9bcbeffab8f65e6df1446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fd:08:52:83:47:d7:4d:ce:3e:bf:b5:eb:3e:
                    6a:f9:8e:c6:5e:3a:15:38:62:f5:6e:f2:3e:6b:0c:
                    bb:5f:a3:9d:c9:67:00:64:fc:9c:2c:bd:0a:8d:37:
                    8a:17:0d:e9:57:f5:98:2d:df:83:6d:70:a2:7a:1d:
                    93:db:02:b8:2e:e0:9c:6d:e4:8d:92:23:73:35:c9:
                    e0:a9:07:74:09:0a:9b:d0:69:30:39:87:b9:82:02:
                    cc:c9:fd:f1:46:b6:67:58:51:ac:4a:fa:68:e8:65:
                    47:97:0a:a4:1d:54:79:62:4b:3f:2f:2a:40:0b:95:
                    89:1c:1d:71:d6:53:06:d8:e5:d1:55:ce:c3:5f:7d:
                    56:cf:92:22:bd:fa:4b:a8:d1:09:77:17:d9:e6:ff:
                    1f:d0:9a:5f:76:93:b7:7f:7d:d5:03:af:88:6e:25:
                    20:d6:8d:27:fb:dd:d9:fa:7c:9c:69:4b:fb:76:da:
                    ef:30:90:c5:3a:6e:70:b4:99:b0:0b:31:e9:67:c1:
                    2e:e0:22:0f:4b:68:97:19:ad:a0:a1:aa:e7:83:f0:
                    f9:da:c8:92:21:ad:46:f8:07:f9:8d:48:3d:39:24:
                    db:2f:24:09:52:d0:ff:2b:15:51:dd:44:18:91:84:
                    47:38:06:91:7f:df:e5:63:d7:e5:4b:9a:fd:fb:3a:
                    39:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9A:F9:80:63:83:64:D6:D6:E9:BC:BE:FF:AB:8F:65:E6:DF:14:46
            X509v3 Authority Key Identifier:
                keyid:62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/Ipr5gGODZNbW6by-_6uPZebfFEY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:64:18:7d:6a:b3:90:37:8d:00:29:2d:4f:ac:95:05:6e:62:
         82:1f:06:46:97:56:f8:00:fc:11:ed:27:ce:58:a8:0d:a9:7b:
         99:10:85:aa:75:a3:8a:7b:3c:b5:14:a5:fd:c1:1f:5c:e7:f0:
         02:5e:f9:a5:34:a2:3d:39:93:8a:1c:a6:ed:3e:af:9a:2e:02:
         09:21:df:b5:7a:2a:6e:2f:c3:74:ec:cc:c5:61:3b:5f:e9:94:
         e0:b7:4e:8f:7e:a2:d7:d8:44:6f:af:12:08:27:cf:94:ad:8f:
         ec:25:78:46:38:89:0a:3f:73:d7:fa:aa:e3:87:40:5f:dc:df:
         5a:8d:a3:85:39:55:bd:e9:1c:07:5f:f4:cd:f5:7d:bc:9a:89:
         58:c1:5e:45:89:af:3e:e6:40:06:8e:cd:28:47:0d:fb:e5:bc:
         0e:91:63:1b:32:b0:55:86:df:c6:67:b4:55:2d:50:2c:f1:fa:
         21:0a:74:76:ec:73:a7:4d:42:ff:bc:e4:4f:37:c5:70:07:20:
         0a:49:0f:c9:07:71:c6:70:cf:27:fd:1c:a0:76:77:48:bd:cb:
         f8:81:5d:29:8e:a2:fd:76:d2:0b:89:7d:86:41:4c:b8:28:37:
         0f:86:39:46:99:cf:48:1d:70:c7:6b:74:5f:90:4e:99:c0:66:
         3f:a0:93:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:36 2024 by rpki-client on console-ams.rpki-client.org