Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/VWCaCrsFPhJPxr7XN2jb0XZ9c5Q.roa
File:                     VWCaCrsFPhJPxr7XN2jb0XZ9c5Q.roa (raw, json)
Hash identifier:          IDy8K29psGArmtDeONBr7s1XVPoBKRaR/5OKSoFHOAg=
Subject key identifier:   55:60:9A:0A:BB:05:3E:12:4F:C6:BE:D7:37:68:DB:D1:76:7D:73:94
Certificate issuer:       /CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Certificate serial:       01856EA69490360AA509B6A8F2CC13A45C33
Authority key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/VWCaCrsFPhJPxr7XN2jb0XZ9c5Q.roa
Signing time:             Sun 01 Jan 2023 18:44:48 +0000
ROA not before:           Sun 01 Jan 2023 18:44:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48716
IP address blocks:        185.253.8.0/24 maxlen: 32

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:a6:94:90:36:0a:a5:09:b6:a8:f2:cc:13:a4:5c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
        Validity
            Not Before: Jan  1 18:44:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=55609a0abb053e124fc6bed73768dbd1767d7394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3a:de:ca:d2:f1:c0:e9:d8:b8:7f:7a:7f:56:
                    0a:06:71:58:fa:ea:40:66:cf:6c:ed:23:3e:84:1f:
                    6f:4e:51:61:71:1c:1c:87:7c:e2:c2:d3:6a:aa:66:
                    8f:6c:22:db:09:0d:27:4d:9a:fa:36:b2:d2:11:4d:
                    4b:75:8e:87:eb:91:90:8f:41:99:7a:f5:31:7b:d0:
                    58:d4:75:25:33:dd:06:76:f0:25:26:34:f6:89:cd:
                    db:39:a3:91:16:2b:f4:e4:6d:31:f5:55:43:aa:71:
                    6c:82:8c:b6:e5:16:bf:fc:30:c5:b5:fb:a4:04:f4:
                    37:79:30:e1:00:78:f0:42:88:6d:27:8e:82:41:47:
                    62:cf:01:50:3c:c0:c7:ef:42:77:42:0a:73:69:e2:
                    42:c2:8d:06:5c:98:e7:09:0f:9e:35:e4:8d:f8:79:
                    b3:4a:bf:86:d8:c7:04:34:02:b1:53:d2:ba:d4:fe:
                    41:6b:75:aa:c0:b8:79:d2:3b:73:10:35:b9:3d:d0:
                    89:97:23:dc:43:ee:c1:4c:a3:72:7e:21:90:37:06:
                    23:7e:62:58:ea:d4:b8:68:7d:ac:4a:c8:e3:21:e0:
                    57:da:d3:3b:ec:5d:88:37:bd:23:c6:1b:59:f4:8d:
                    cd:82:12:d5:b4:9e:16:19:77:63:19:29:ba:19:25:
                    07:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:60:9A:0A:BB:05:3E:12:4F:C6:BE:D7:37:68:DB:D1:76:7D:73:94
            X509v3 Authority Key Identifier:
                keyid:1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/VWCaCrsFPhJPxr7XN2jb0XZ9c5Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.253.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:f5:7b:01:42:f5:3b:e7:62:a1:af:5c:87:5f:57:4c:aa:4c:
         52:b4:a7:d4:bb:42:8f:f8:fb:f7:b5:bd:4b:15:7a:a2:f8:89:
         d4:e5:79:ad:6a:8b:bf:20:76:ab:87:71:ad:26:c4:e2:d5:e9:
         48:d6:b1:cd:98:20:f7:96:b6:26:69:4d:8b:3c:48:5f:20:f6:
         89:c5:ae:07:09:a6:f0:4e:f0:64:8d:8b:72:07:b3:37:71:f2:
         d7:58:e6:b3:be:e3:8b:d9:9a:21:cc:4a:23:ed:e3:77:7f:d3:
         cb:66:02:1f:5e:aa:f9:b1:13:0b:51:ca:cb:6d:ca:ff:96:37:
         91:5f:15:9b:95:d9:8f:2f:0d:00:d5:54:1d:c5:fd:04:39:5d:
         2b:3e:56:8e:4c:b7:cc:f2:8f:74:2e:fa:d6:69:68:f4:6f:5a:
         06:8b:d3:4d:40:f6:c6:30:c8:6a:da:43:47:47:60:2c:64:19:
         85:e6:5e:d7:1f:51:20:42:15:2e:ef:e7:18:aa:92:01:a3:3a:
         44:e3:6c:eb:2f:2a:b7:61:9c:e7:41:e8:d9:95:08:1a:1a:89:
         90:e7:73:c0:e1:b2:82:14:06:84:96:48:b5:08:81:b9:ed:24:
         d0:63:95:38:18:a9:20:f6:2d:40:29:18:c2:ab:46:e8:35:5a:
         ab:d1:e7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:40 2024 by rpki-client on console-ams.rpki-client.org