Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/w4ENSrwbYprA60HUOwrX3r9z4uY.roa
File:                     w4ENSrwbYprA60HUOwrX3r9z4uY.roa (raw, json)
Hash identifier:          t+TPowhM4elEI8fYZX0m68a0lNT4dvjDHnaxYPBRhWg=
Subject key identifier:   C3:81:0D:4A:BC:1B:62:9A:C0:EB:41:D4:3B:0A:D7:DE:BF:73:E2:E6
Certificate issuer:       /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial:       01856D6F85D83DF26F40485AB803B5CA69C7
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/w4ENSrwbYprA60HUOwrX3r9z4uY.roa
Signing time:             Sun 01 Jan 2023 13:05:03 +0000
ROA not before:           Sun 01 Jan 2023 13:05:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49825
IP address blocks:        84.23.50.0/24 maxlen: 32

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:6f:85:d8:3d:f2:6f:40:48:5a:b8:03:b5:ca:69:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
        Validity
            Not Before: Jan  1 13:05:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3810d4abc1b629ac0eb41d43b0ad7debf73e2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:62:ec:33:37:71:e2:bf:fa:4f:ea:d5:9e:15:
                    22:bb:e8:2d:ea:da:cb:eb:88:6c:28:e9:2d:38:12:
                    9f:29:a2:c2:a9:9d:5d:66:28:e2:5a:6a:cd:62:ab:
                    84:ad:ca:7e:85:5d:9b:b5:a8:7a:f8:51:78:dc:65:
                    d1:48:51:c1:20:d7:1a:b1:bb:da:94:1b:aa:7c:cf:
                    99:e5:91:47:78:14:97:02:67:68:ef:e9:6a:94:68:
                    6f:45:2b:ef:c5:f5:5b:00:e7:29:eb:6b:7d:18:16:
                    23:cf:3b:a8:48:c5:db:41:bd:eb:fe:a8:a3:6b:b9:
                    4d:95:e6:57:9b:df:c0:0c:3e:ce:62:95:5b:c6:6c:
                    cf:aa:3f:6d:84:22:66:44:1d:d4:c9:d1:24:a0:93:
                    2b:10:0e:37:50:7f:a8:0d:19:9c:78:2c:78:d5:ff:
                    a0:3d:d7:b7:b1:1d:fd:4e:1b:43:46:1d:b3:40:c9:
                    a1:62:e7:18:c5:64:62:81:3b:04:10:53:ab:ef:d8:
                    d0:c7:c4:5f:98:aa:07:49:3e:b4:b6:8f:d6:de:e1:
                    18:7e:a7:54:07:5a:0a:53:5d:3e:1e:2a:bf:ce:22:
                    96:28:31:be:5b:92:7a:b1:1f:fa:6e:61:ef:68:20:
                    c9:55:4f:a2:1d:6f:20:fe:55:db:a9:21:4a:9b:ee:
                    05:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:81:0D:4A:BC:1B:62:9A:C0:EB:41:D4:3B:0A:D7:DE:BF:73:E2:E6
            X509v3 Authority Key Identifier:
                keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/w4ENSrwbYprA60HUOwrX3r9z4uY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.23.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:a2:b0:83:d1:f9:9e:c6:84:b2:29:32:31:bf:f6:61:d8:d2:
         6f:1a:6d:86:c1:c1:70:86:ee:3b:9a:b0:25:46:1e:b4:51:10:
         88:2e:86:7b:e4:8b:ea:5b:70:03:3c:de:41:9a:52:5f:95:8c:
         14:b5:f8:71:2e:ac:0b:cb:d4:38:60:72:a3:20:ca:95:f9:7c:
         75:d7:83:62:05:10:9e:99:2e:8c:15:cf:b5:cd:ba:a4:13:c6:
         36:f4:f9:a6:0c:b5:48:4c:7a:cf:63:83:d0:ff:3b:22:7d:94:
         ae:44:e8:19:f2:f2:78:4c:1d:90:ca:14:8f:5b:c1:7c:5b:ba:
         8a:3b:f3:49:8a:6d:26:fb:9c:e0:0b:80:1a:21:2b:e2:86:83:
         eb:cc:15:ac:d1:09:e8:7e:af:a0:ab:a1:4b:24:f5:c9:df:1b:
         e7:31:99:cd:b9:6e:81:a9:7f:2f:23:c0:66:c4:a4:c8:6a:c2:
         51:a8:a8:ec:13:ba:53:ad:45:b6:de:73:e1:7e:0d:7f:2d:b6:
         19:15:9d:9b:f3:41:c4:9a:31:eb:fd:9f:49:1e:a5:38:03:80:
         99:c9:39:d6:30:1f:43:5f:3d:79:e7:9a:86:8a:fd:b1:8e:e6:
         50:af:11:51:1b:5a:67:40:6c:c7:77:0c:70:1f:d6:57:18:0c:
         2e:ad:ae:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:47 2024 by rpki-client on console-ams.rpki-client.org