Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/69vILJjKgE7Ss0vaDEbwNCOC8Gk.roa
File:                     69vILJjKgE7Ss0vaDEbwNCOC8Gk.roa (raw, json)
Hash identifier:          w0Vm4Ilhano/IDMqJxYXFH/S8xyJ2Kby3Y9zw7tRvQo=
Subject key identifier:   EB:DB:C8:2C:98:CA:80:4E:D2:B3:4B:DA:0C:46:F0:34:23:82:F0:69
Certificate issuer:       /CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Certificate serial:       018BC9F0B4B19CB45278C47EEE01AAD625BA
Authority key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/69vILJjKgE7Ss0vaDEbwNCOC8Gk.roa
Signing time:             Mon 13 Nov 2023 18:27:57 +0000
ROA not before:           Mon 13 Nov 2023 18:27:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34224
IP address blocks:        185.252.22.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 13 Nov 2023 19:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c9:f0:b4:b1:9c:b4:52:78:c4:7e:ee:01:aa:d6:25:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
        Validity
            Not Before: Nov 13 18:27:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ebdbc82c98ca804ed2b34bda0c46f0342382f069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:89:cf:a5:b9:43:cd:4d:40:53:a3:97:73:43:
                    2a:c3:10:14:9f:55:e2:99:51:1b:d2:c7:2f:81:46:
                    24:f3:6a:af:3f:08:dd:89:43:9e:9a:60:48:47:c8:
                    2e:a8:e6:fe:75:1a:fc:e9:ab:3c:cf:8f:7d:d9:fe:
                    fc:ab:70:eb:ef:9b:3a:65:6e:14:2f:46:1d:43:87:
                    33:d7:f0:25:2c:92:af:a5:3a:f8:46:ab:14:1e:27:
                    f1:63:9a:82:2d:ed:42:bb:0c:ca:23:00:3d:22:af:
                    0c:92:77:ba:36:64:b3:62:f5:0c:05:21:54:3f:d3:
                    51:72:a4:05:93:70:87:5f:6e:7e:69:95:ab:92:47:
                    af:2d:a1:b6:8e:64:63:2a:66:aa:db:5b:72:ea:3a:
                    1e:32:3a:ff:a2:39:31:3f:98:33:bb:b6:47:66:ed:
                    b5:70:41:a9:ab:f1:40:84:c0:1d:79:49:ec:1b:a9:
                    66:c3:d3:46:40:09:70:2d:53:3f:f3:c7:1a:58:7d:
                    38:34:94:c7:a7:ba:8a:72:47:72:7c:85:66:78:50:
                    06:6f:df:3a:97:3a:f5:ec:5e:a2:d1:dd:76:2e:72:
                    d7:f2:83:f9:6a:1f:e8:f2:7d:4f:c9:eb:ba:95:d4:
                    64:65:05:04:d6:dc:a6:49:9a:ca:4d:1f:1e:2d:0a:
                    ae:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DB:C8:2C:98:CA:80:4E:D2:B3:4B:DA:0C:46:F0:34:23:82:F0:69
            X509v3 Authority Key Identifier:
                keyid:F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/69vILJjKgE7Ss0vaDEbwNCOC8Gk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.252.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:cf:64:8f:60:07:66:f6:f2:9a:58:79:62:61:b3:47:d7:7b:
         1c:b9:4b:b2:29:82:82:9b:1e:b1:0b:f0:29:e2:42:a0:9b:f1:
         29:74:56:a6:55:01:14:02:6f:64:2d:1d:45:fc:25:fc:cb:4e:
         cc:65:0e:c0:b5:05:a4:ca:c2:ce:84:4d:d4:39:2b:99:20:ca:
         97:72:79:f0:21:44:73:50:7b:b7:77:f4:c3:ca:59:4b:d1:47:
         f1:68:9c:77:aa:33:28:a5:61:2c:44:d5:97:b5:53:6f:c5:8f:
         a7:23:88:d9:96:c7:74:5a:43:99:23:b0:8b:77:4b:0c:e8:81:
         b5:30:e4:7d:75:cd:b4:2e:2c:ce:a7:a3:19:a0:f9:ef:a2:65:
         eb:51:ba:99:b3:d3:f1:c0:92:b2:28:3b:82:13:d8:c6:44:00:
         00:a5:10:f8:8c:c4:67:d4:56:76:e8:db:fb:ed:34:8c:5e:61:
         fb:74:df:59:8b:fc:f8:08:89:9c:10:ed:56:37:26:30:c3:78:
         6b:94:87:5d:72:13:4b:50:3f:b0:28:e4:fe:7c:5d:2c:48:c3:
         c8:77:a7:9b:a2:65:b4:aa:2e:64:4b:e4:39:bd:ad:de:f3:41:
         78:e7:be:6f:3c:0c:ed:1f:13:33:fe:e7:26:63:6b:01:30:74:
         67:7d:df:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:36 2024 by rpki-client on console-fra.rpki-client.org