Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/CupWDvamb47e8Cm78q-4ZD7jQ14.roa
File:                     CupWDvamb47e8Cm78q-4ZD7jQ14.roa (raw, json)
Hash identifier:          xoARMB22hx8pjxgKi8rUMuun4niSJ7+yOB6Q+x+Ko98=
Subject key identifier:   0A:EA:56:0E:F6:A6:6F:8E:DE:F0:29:BB:F2:AF:B8:64:3E:E3:43:5E
Certificate issuer:       /CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Certificate serial:       01856F14D391FB807206E22CD756B582C66A
Authority key identifier: 73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/CupWDvamb47e8Cm78q-4ZD7jQ14.roa
Signing time:             Sun 01 Jan 2023 20:45:13 +0000
ROA not before:           Sun 01 Jan 2023 20:45:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39421
IP address blocks:        185.44.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:14:d3:91:fb:80:72:06:e2:2c:d7:56:b5:82:c6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
        Validity
            Not Before: Jan  1 20:45:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0aea560ef6a66f8edef029bbf2afb8643ee3435e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:34:5d:8b:e9:ac:ac:2f:e6:b9:13:09:f0:4c:
                    e1:f4:d0:73:e7:d9:fa:72:6a:b9:80:69:30:d7:61:
                    70:1a:4f:43:9e:51:fd:51:da:09:a7:a5:eb:fa:b5:
                    36:ba:3f:55:05:ba:e8:4a:99:5b:c5:aa:01:fd:48:
                    39:27:ab:f9:48:48:7c:4a:27:d6:ff:fc:32:ea:9a:
                    9f:a6:66:13:a4:c3:cb:86:09:e9:13:35:02:33:dc:
                    14:d1:e5:5d:cd:0e:fd:11:9d:9a:25:fe:d7:82:e5:
                    27:54:b4:5c:d8:13:3b:07:f0:98:75:28:39:a6:01:
                    c3:c3:1e:a1:ae:28:15:7b:25:37:bb:f8:8c:28:81:
                    45:d9:dc:6b:d2:48:12:6c:9f:57:75:2d:91:99:5c:
                    e8:9d:26:11:a8:3b:59:9d:cb:99:f4:33:4c:0c:48:
                    7c:97:df:9d:3d:5b:6f:6c:6f:3e:4d:52:3a:bd:59:
                    72:40:f4:97:f0:f8:42:8e:e7:34:5c:e0:e3:48:5c:
                    74:d0:21:2a:de:51:4b:05:28:59:6f:9f:c2:19:df:
                    c8:73:1d:b6:50:d8:78:da:dd:66:ef:dc:47:55:8f:
                    41:e2:82:69:5e:c4:a4:dc:a2:1e:c1:6a:3c:45:c9:
                    39:cb:ec:9f:5c:1a:c4:a9:5c:8c:75:c4:00:06:a7:
                    b5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EA:56:0E:F6:A6:6F:8E:DE:F0:29:BB:F2:AF:B8:64:3E:E3:43:5E
            X509v3 Authority Key Identifier:
                keyid:73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/CupWDvamb47e8Cm78q-4ZD7jQ14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.44.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:7f:59:33:f1:2a:2c:82:be:95:9a:ad:48:60:55:c1:37:5a:
         3b:64:5d:a8:a6:10:f3:4a:14:b1:f3:bc:3b:14:c3:d8:86:96:
         c6:79:bc:87:ea:a6:8a:49:23:be:e7:8a:cc:8e:e8:fc:d7:b6:
         3b:ec:83:a1:bb:79:e1:5e:f2:7a:54:a4:60:73:bd:23:0d:21:
         b3:08:d8:d5:19:18:cb:e4:a1:b4:21:77:96:09:88:b6:58:f7:
         e3:37:fb:02:df:10:72:5b:78:58:25:99:a4:47:88:d2:93:62:
         c5:2c:ec:41:0a:3f:5f:6b:f8:dc:89:fe:69:84:17:1a:e1:ae:
         75:95:47:d2:29:bd:45:6a:86:1b:66:e2:05:7d:e5:8f:1b:b3:
         7c:a8:ba:18:87:8c:70:6e:93:c1:b7:50:c0:39:c5:0b:5f:24:
         8b:03:20:78:56:4e:c6:45:f4:17:aa:88:b0:14:ea:c7:52:d8:
         68:40:ba:0e:ae:f1:1d:bb:ff:6b:8a:41:be:77:f9:4a:03:ce:
         e4:92:a1:c9:4a:90:e2:18:bd:ac:1e:2a:91:09:8c:58:6b:96:
         71:db:91:92:af:b9:fa:5b:cc:6f:6d:b2:7a:29:9d:d6:3a:60:
         a2:e6:79:78:99:1e:5b:8e:03:8f:64:76:15:61:31:97:91:05:
         9f:d3:18:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:26 2024 by rpki-client on console-fra.rpki-client.org