Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7SuwH5-iRFdWbeVoesZYsvQ7F_8.roa
File:                     7SuwH5-iRFdWbeVoesZYsvQ7F_8.roa (raw, json)
Hash identifier:          X46R5XPI+22Hi+63aLpc89rpcIMoHgW4jmd3aiNejGk=
Subject key identifier:   ED:2B:B0:1F:9F:A2:44:57:56:6D:E5:68:7A:C6:58:B2:F4:3B:17:FF
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       01856FD519C18661D6B3FB460AF8C3442719
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7SuwH5-iRFdWbeVoesZYsvQ7F_8.roa
Signing time:             Mon 02 Jan 2023 00:15:14 +0000
ROA not before:           Mon 02 Jan 2023 00:15:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39016
IP address blocks:        188.241.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:d5:19:c1:86:61:d6:b3:fb:46:0a:f8:c3:44:27:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: Jan  2 00:15:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ed2bb01f9fa24457566de5687ac658b2f43b17ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:02:2f:72:f0:41:be:aa:06:88:d0:bb:da:49:
                    02:27:d2:8c:26:78:ab:29:9c:06:37:a5:38:83:02:
                    3d:e7:7e:2f:a7:1e:78:32:2b:9d:38:f4:ac:6a:a0:
                    8a:14:f1:f1:96:d7:f1:76:46:4f:5c:bd:a6:e5:6e:
                    cb:e6:7e:9a:95:12:e8:81:58:14:b0:2c:df:1a:50:
                    68:2c:35:c4:e1:25:93:4c:53:8d:08:8e:97:56:9b:
                    dd:2b:f7:cc:18:a2:5e:e0:fa:81:16:b4:9f:19:e0:
                    20:8e:a7:80:7f:6b:e0:07:f9:04:4d:02:f9:ef:7d:
                    ef:a2:2a:f8:22:e6:cf:ff:be:50:22:c4:4f:22:6b:
                    40:dc:96:4d:48:38:58:c8:ec:5c:d8:0b:04:64:05:
                    5d:a9:aa:31:27:e7:7f:fb:ac:75:21:12:50:d0:61:
                    94:2d:80:2e:95:24:7d:c3:3a:f8:ae:8d:bd:32:58:
                    97:fd:24:25:82:10:83:85:42:96:35:e9:5b:58:36:
                    d6:33:d3:2f:4d:41:78:8a:95:8f:e3:c4:1b:9d:02:
                    58:31:f0:b1:d4:9e:c3:16:cc:45:30:72:90:e5:67:
                    5c:bf:51:57:b7:d1:ce:26:08:e4:cb:04:9c:96:7b:
                    b0:f5:0b:b4:d8:ec:d6:c5:b3:59:2e:66:49:3c:50:
                    a9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2B:B0:1F:9F:A2:44:57:56:6D:E5:68:7A:C6:58:B2:F4:3B:17:FF
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7SuwH5-iRFdWbeVoesZYsvQ7F_8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.241.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:87:f0:90:f1:bb:5e:87:aa:12:be:c1:ca:17:69:0e:22:e9:
         97:8c:ab:f9:52:b9:a8:dc:a2:9e:6a:a2:79:6a:74:e0:a1:0f:
         5c:19:f0:48:36:51:86:aa:f3:98:8e:d7:5f:3a:20:ef:b8:0c:
         eb:8c:c7:c5:bc:3d:39:fa:0a:46:d4:31:dd:99:44:87:fc:c0:
         b3:7d:0f:57:00:ad:45:ac:9c:30:a6:d3:92:ef:6f:d0:25:ac:
         af:9b:a0:06:b6:1d:56:1c:51:da:1a:9c:78:1c:9e:2e:ef:b2:
         04:37:f1:02:69:44:f0:28:8c:b4:c8:ed:57:4c:a7:13:3b:4c:
         f5:5a:0c:ff:2e:b5:e8:3b:54:42:45:16:a4:35:fb:15:d7:a5:
         5f:69:e6:65:6b:67:a3:a1:b5:c1:a8:27:65:28:88:eb:5f:57:
         cf:24:0c:05:7c:f1:06:33:12:3b:61:de:e3:e9:50:64:cc:54:
         f3:2a:4b:f2:9d:d4:07:ce:b1:24:7c:aa:7d:f3:84:d1:d4:6d:
         1a:fe:4b:64:7a:bd:70:15:d2:61:e0:b2:a5:00:ca:e0:ba:b0:
         6e:04:25:f4:cb:50:4d:e9:44:cd:bf:8b:a3:b2:25:d0:ce:d2:
         1d:5b:8f:94:e0:a9:5b:8d:c3:93:8a:93:52:7c:75:f2:fe:bb:
         b1:c0:38:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:42 2024 by rpki-client on console-fra.rpki-client.org