Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/B2mMVsFy2RR09FkoK3tKsXxVC7E.roa
File:                     B2mMVsFy2RR09FkoK3tKsXxVC7E.roa (raw, json)
Hash identifier:          lJF3Qaje4qslrNOHpEoSDkct7ySwnD8Z78AlPKcemlY=
Subject key identifier:   07:69:8C:56:C1:72:D9:14:74:F4:59:28:2B:7B:4A:B1:7C:55:0B:B1
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       01856FD525B6E4A50B31E4AED7E697CDB0F2
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/B2mMVsFy2RR09FkoK3tKsXxVC7E.roa
Signing time:             Mon 02 Jan 2023 00:15:17 +0000
ROA not before:           Mon 02 Jan 2023 00:15:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48556
IP address blocks:        188.241.109.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:d5:25:b6:e4:a5:0b:31:e4:ae:d7:e6:97:cd:b0:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: Jan  2 00:15:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=07698c56c172d91474f459282b7b4ab17c550bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d5:90:81:6e:bf:61:8d:42:f0:55:83:30:e6:
                    e6:10:ed:84:38:38:9e:77:df:83:cb:10:55:c5:cd:
                    d7:96:f0:97:14:73:98:f7:e9:65:61:ff:5c:2c:5e:
                    3f:7c:6d:c0:04:0d:e8:6a:53:a8:4a:61:0f:dd:e8:
                    da:33:2d:50:71:9d:0a:13:72:29:00:a1:f2:23:98:
                    ae:fe:38:8e:c9:c6:11:e2:df:d4:00:8e:4a:ec:47:
                    5b:ea:9b:46:e0:32:ea:cf:5f:dd:ce:66:30:b0:c0:
                    a0:3d:61:7e:18:ef:bd:08:e7:5b:cd:9f:4d:91:e8:
                    15:3e:b2:c1:3b:dd:22:00:a5:49:58:13:53:1c:50:
                    14:bb:6c:0d:d8:42:c7:3e:e8:eb:f7:b4:e5:85:ae:
                    2f:85:4c:fc:ad:47:a4:bf:25:c9:1c:22:4d:77:39:
                    dd:c4:d6:b8:69:47:c1:8e:e3:c9:0f:ad:93:af:cb:
                    b8:e3:47:cc:e7:29:44:7a:d2:a3:22:7b:d3:e8:aa:
                    8b:34:e4:a2:de:d8:91:6f:8c:28:23:c5:b9:86:e8:
                    4a:3b:c9:4d:d0:ea:73:98:b0:96:bd:e3:48:01:08:
                    eb:92:81:3e:01:32:3c:7c:ef:94:ad:f1:86:90:b5:
                    7e:04:ea:54:09:c6:bd:c2:7d:98:8e:bf:65:86:63:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:69:8C:56:C1:72:D9:14:74:F4:59:28:2B:7B:4A:B1:7C:55:0B:B1
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/B2mMVsFy2RR09FkoK3tKsXxVC7E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.241.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:33:ea:52:3b:a2:05:9c:16:2e:3a:b0:e2:f7:6a:6f:2f:13:
         15:03:97:a1:15:73:11:04:d5:11:26:e8:b5:1e:0e:7d:dd:ef:
         8b:2d:51:8f:7a:80:18:bb:67:51:24:13:8f:a1:10:4d:de:72:
         c4:58:72:0d:ac:c8:ae:b6:d4:c4:17:90:42:c4:36:03:b4:c2:
         2a:24:3f:99:a5:30:c1:c1:ef:98:4d:30:fc:ed:e7:ad:85:d1:
         03:93:3e:30:74:3b:a4:df:63:18:66:d1:d5:1e:fa:bc:cb:cf:
         3e:69:23:99:90:c9:b1:c0:3f:43:c3:80:5e:bc:30:25:d3:0a:
         b6:3c:53:67:12:1f:5d:c4:84:07:5d:9c:3a:54:56:87:e0:4a:
         66:e3:48:71:96:1b:ca:d6:e7:5d:0b:60:11:58:13:f4:53:00:
         91:01:49:cb:a3:3c:46:c6:98:5a:11:f3:0c:c9:e4:20:d3:2a:
         b7:4a:7f:7a:64:41:b3:06:ea:5f:07:81:78:dc:64:c5:5b:e1:
         9d:41:3d:fb:de:e4:05:d0:a4:97:ce:52:f8:cf:19:7a:cc:e5:
         9c:be:fc:2a:d4:f3:17:22:47:5d:de:e5:a2:7d:82:86:31:4f:
         e9:72:b7:cd:a5:9f:c2:a8:17:c8:a3:e9:82:ea:a7:88:5c:1c:
         e8:6b:66:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:42 2024 by rpki-client on console-fra.rpki-client.org