Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/ap1vGv5FVFouLBwR3lU3wRaFRr8.roa
File:                     ap1vGv5FVFouLBwR3lU3wRaFRr8.roa (raw, json)
Hash identifier:          IeRhZyyx3cb9PDsJdoDR7nsv4A+HyzPxPVumv4EZXrE=
Subject key identifier:   6A:9D:6F:1A:FE:45:54:5A:2E:2C:1C:11:DE:55:37:C1:16:85:46:BF
Certificate issuer:       /CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
Certificate serial:       018CC8DE365D5C7558EEB36B22E4AE25DB8E
Authority key identifier: 18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/ap1vGv5FVFouLBwR3lU3wRaFRr8.roa
Signing time:             Tue 02 Jan 2024 06:30:55 +0000
ROA not before:           Tue 02 Jan 2024 06:30:55 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49402
IP address blocks:        193.169.48.0/23 maxlen: 23
                          185.56.221.0/24 maxlen: 24
                          185.56.222.0/24 maxlen: 24
                          185.56.220.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 02 Jan 2025 11:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:de:36:5d:5c:75:58:ee:b3:6b:22:e4:ae:25:db:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
        Validity
            Not Before: Jan  2 06:30:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6a9d6f1afe45545a2e2c1c11de5537c1168546bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d5:18:1f:32:f6:73:46:66:52:7e:2a:4d:58:
                    f2:25:8f:f2:bc:da:b5:2d:91:17:93:b0:e5:63:e1:
                    3a:13:82:89:f6:ca:3d:3f:75:e6:dd:75:bf:23:24:
                    9d:66:6c:eb:67:3f:ec:e3:5c:86:4e:00:d8:07:2d:
                    b4:72:08:29:07:90:40:9e:dc:e6:ea:1d:f7:f5:ed:
                    a7:21:f1:19:b3:2b:0e:1d:3f:ce:a2:52:5d:40:78:
                    db:51:8b:d7:f4:be:59:6b:96:62:ac:6c:6c:00:62:
                    ec:d3:f9:3a:10:c8:c6:e0:27:60:99:c8:5f:aa:e7:
                    ac:4b:a2:49:24:3b:37:c2:56:5a:f4:59:73:64:01:
                    b5:ac:be:f3:0a:2b:ed:2a:dd:42:c8:48:0c:1a:f6:
                    54:1e:78:36:1b:ea:e9:56:38:e8:b0:fd:cf:12:46:
                    de:8e:b8:33:e4:32:ab:1d:81:f4:55:32:9f:18:82:
                    ed:f0:a3:a9:2b:a6:ee:f7:22:fb:f5:6e:cc:2a:e2:
                    d4:3f:4b:c7:d6:5b:26:8c:a8:a6:78:de:2c:f7:97:
                    69:26:55:59:ed:67:e3:e4:58:f3:e6:f5:2b:6c:54:
                    79:64:1a:43:24:2c:17:95:23:a4:51:71:de:ed:d9:
                    ce:fe:bd:97:2d:70:ca:11:32:ad:2a:63:c2:cb:41:
                    87:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9D:6F:1A:FE:45:54:5A:2E:2C:1C:11:DE:55:37:C1:16:85:46:BF
            X509v3 Authority Key Identifier:
                keyid:18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/ap1vGv5FVFouLBwR3lU3wRaFRr8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.56.220.0-185.56.222.255
                  193.169.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:65:34:16:6f:92:32:03:21:f4:f6:84:c7:8d:2a:7d:05:35:
         42:15:5b:aa:6a:f6:12:56:4b:38:fd:a3:2b:57:2f:bd:3b:92:
         af:53:2f:79:6b:8a:c4:77:0f:4f:54:75:2c:49:bc:17:6c:dd:
         29:aa:a5:d2:12:03:ad:c1:09:9c:05:0f:3f:0b:d6:8a:24:29:
         79:21:83:85:96:46:87:82:12:46:75:8f:1f:a4:fe:df:a1:65:
         53:fa:cc:05:ab:c9:03:56:24:15:42:e4:9e:a0:be:71:bb:3c:
         c6:fa:e4:85:ec:26:e8:0c:48:85:22:ac:d4:08:93:d5:f3:34:
         bb:ce:be:b3:bb:a0:79:ff:bd:06:b9:d0:30:dd:83:e5:e0:6c:
         f2:0b:55:6f:8d:c8:c9:20:e0:c4:c5:4f:1d:a8:60:79:87:5f:
         00:20:1a:0e:d2:fe:66:f0:13:0b:e0:80:0b:5a:06:be:bf:eb:
         c6:64:5d:23:08:2a:d0:3a:52:82:9a:0a:b2:d8:a6:94:f1:fd:
         3d:c1:1f:75:8b:0e:66:a4:95:73:3e:f7:89:b0:8a:ae:19:6c:
         33:66:a5:46:8a:d0:05:dd:c6:86:23:85:dd:8d:50:e6:7b:56:
         d8:2f:cb:d3:9a:99:11:2e:12:69:e1:5b:6b:58:bd:c3:5f:c0:
         ce:6e:e6:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 7 10:14:54 2025 by rpki-client