Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/Ja_wptkIQg_pI4R7nr1idv_o63Q.roa
File:                     Ja_wptkIQg_pI4R7nr1idv_o63Q.roa (raw, json)
Hash identifier:          v+B4KCMZO8wIDFycMTIIdFw8dX40z463JcPdVu+rKbU=
Subject key identifier:   25:AF:F0:A6:D9:08:42:0F:E9:23:84:7B:9E:BD:62:76:FF:E8:EB:74
Certificate issuer:       /CN=a6958444728f5ab7aa826f4378005ce679200d52
Certificate serial:       018805C5CDD2F952DE078737CDF422DC3EB6
Authority key identifier: A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/Ja_wptkIQg_pI4R7nr1idv_o63Q.roa
Signing time:             Wed 10 May 2023 13:07:09 +0000
ROA not before:           Wed 10 May 2023 13:07:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206441
IP address blocks:        185.184.224.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:05:c5:cd:d2:f9:52:de:07:87:37:cd:f4:22:dc:3e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6958444728f5ab7aa826f4378005ce679200d52
        Validity
            Not Before: May 10 13:07:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=25aff0a6d908420fe923847b9ebd6276ffe8eb74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f7:15:a4:c4:51:8a:d9:e4:fb:16:59:27:41:
                    b8:d8:a0:c9:2f:75:7b:a4:73:3f:b0:3c:08:52:5c:
                    dd:73:81:a4:42:0a:82:7f:f4:0b:21:c4:b5:05:56:
                    71:39:94:55:93:4d:bc:9c:2d:1f:77:ea:32:f1:29:
                    62:40:30:a7:b0:22:a9:2c:49:ca:b0:cd:c3:06:c0:
                    c8:02:27:e2:18:43:cc:62:25:be:b9:50:f5:a7:38:
                    57:28:1f:1e:68:4d:71:c3:40:b1:6b:ea:c0:f5:0e:
                    02:50:67:de:ce:db:d6:42:4a:e7:cb:5f:7b:5f:a1:
                    36:b2:29:76:d3:f5:7d:af:a3:ef:11:77:b1:f2:47:
                    15:cb:0b:7b:2e:13:aa:1f:d1:ed:12:95:78:7c:aa:
                    27:fa:60:35:b2:17:d6:1a:ea:9b:b7:e0:d4:02:55:
                    a4:80:ba:fa:ab:cd:df:c7:1f:9b:87:8a:d5:2a:ae:
                    a4:15:89:54:6a:82:7d:ee:16:f3:7d:e1:00:ad:f7:
                    64:56:3a:eb:6a:13:31:38:23:e1:15:c8:31:9c:6b:
                    7f:53:8d:c5:92:d4:32:b6:4b:31:53:5d:1b:a0:e6:
                    ed:91:e7:6d:d9:d8:4f:55:f8:90:a3:c5:bd:b5:2d:
                    d8:6d:be:63:7d:c6:62:7a:0d:a7:7f:0d:80:46:93:
                    95:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AF:F0:A6:D9:08:42:0F:E9:23:84:7B:9E:BD:62:76:FF:E8:EB:74
            X509v3 Authority Key Identifier:
                keyid:A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/Ja_wptkIQg_pI4R7nr1idv_o63Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.184.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:60:fe:19:97:e8:11:c2:aa:df:f6:4d:20:50:65:77:91:09:
         47:33:fb:22:d7:0a:cb:ac:7e:26:1d:03:55:08:a6:a9:88:1b:
         f6:6d:7e:8c:1c:b6:6c:ca:11:09:9b:e2:70:c4:93:f2:d7:92:
         4a:04:9b:6b:6f:01:78:a5:f1:6e:8c:ae:d5:d2:25:6e:39:0b:
         b4:bb:74:7b:1a:fc:12:4d:6c:f2:17:90:1d:f4:09:93:d0:9d:
         d4:67:be:f7:bd:cd:c6:12:79:ac:9e:73:e9:b6:b2:dd:d1:28:
         fb:b9:18:2e:8b:93:a9:d9:f7:ea:13:c9:43:a4:29:f0:f2:47:
         2a:99:a2:ac:28:1c:d1:0b:d4:43:92:b9:ff:9a:01:3a:21:d0:
         2a:b2:b6:01:7d:cd:2f:55:f2:27:d5:0d:ec:82:c3:3d:c3:2b:
         b0:d2:88:64:45:ed:b9:06:e8:64:6f:7d:f0:f7:56:b6:eb:69:
         7d:b1:15:3e:4e:9b:14:df:9d:f1:1d:33:79:42:bf:eb:d8:60:
         8e:29:57:87:84:e8:c8:a1:54:a5:c6:df:3e:6f:6b:10:df:78:
         28:29:0e:9b:2c:24:53:b0:5a:73:e3:51:cd:bd:83:21:29:56:
         24:7c:00:38:17:86:f7:1d:31:85:b2:ec:00:e6:f9:24:7d:8b:
         29:61:ac:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgFxc3S+VLeB4c3zfQi3D62MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OTU4NDQ0NzI4ZjVhYjdhYTgyNmY0Mzc4MDA1Y2U2Nzky
MDBkNTIwHhcNMjMwNTEwMTMwNzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWFmZjBhNmQ5MDg0MjBmZTkyMzg0N2I5ZWJkNjI3NmZmZThlYjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/cVpMRRitnk+xZZJ0G42KDJL3V7
pHM/sDwIUlzdc4GkQgqCf/QLIcS1BVZxOZRVk028nC0fd+oy8SliQDCnsCKpLEnK
sM3DBsDIAifiGEPMYiW+uVD1pzhXKB8eaE1xw0Cxa+rA9Q4CUGfeztvWQkrny197
X6E2sil20/V9r6PvEXex8kcVywt7LhOqH9HtEpV4fKon+mA1shfWGuqbt+DUAlWk
gLr6q83fxx+bh4rVKq6kFYlUaoJ97hbzfeEArfdkVjrrahMxOCPhFcgxnGt/U43F
ktQytksxU10boObtkedt2dhPVfiQo8W9tS3Ybb5jfcZieg2nfw2ARpOVbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCWv8KbZCEIP6SOEe569Ynb/6Ot0MB8GA1UdIwQY
MBaAFKaVhERyj1q3qoJvQ3gAXOZ5IA1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHBXRVJIS1BXcmVxZ205RGVBQmM1bmtnRFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZGMxZjEtYzE1Ny00MDhiLWFmZTEt
MWI1MTFjNjYzOTc4LzEvSmFfd3B0a0lRZ19wSTRSN25yMWlkdl9vNjNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iZGMxZjEtYzE1Ny00MDhiLWFmZTEtMWI1MTFjNjYzOTc4
LzEvcHBXRVJIS1BXcmVxZ205RGVBQmM1bmtnRFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubjgMA0G
CSqGSIb3DQEBCwUAA4IBAQCxYP4Zl+gRwqrf9k0gUGV3kQlHM/si1wrLrH4mHQNV
CKapiBv2bX6MHLZsyhEJm+JwxJPy15JKBJtrbwF4pfFujK7V0iVuOQu0u3R7GvwS
TWzyF5Ad9AmT0J3UZ773vc3GEnmsnnPptrLd0Sj7uRgui5Op2ffqE8lDpCnw8kcq
maKsKBzRC9RDkrn/mgE6IdAqsrYBfc0vVfIn1Q3sgsM9wyuw0ohkRe25Buhkb33w
91a262l9sRU+TpsU353xHTN5Qr/r2GCOKVeHhOjIoVSlxt8+b2sQ33goKQ6bLCRT
sFpz41HNvYMhKVYkfAA4F4b3HTGFsuwA5vkkfYspYawT
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:26 2024 by rpki-client on console.sobornost.net