Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/J15_IqyzHQDAxCgfEKn5Lmtu07Y.roa
File:                     J15_IqyzHQDAxCgfEKn5Lmtu07Y.roa (raw, json)
Hash identifier:          01zSOV0R5ZFYGxyyWlh2gnfK9jULwXb+iQ4Rj7Z87mY=
Subject key identifier:   27:5E:7F:22:AC:B3:1D:00:C0:C4:28:1F:10:A9:F9:2E:6B:6E:D3:B6
Certificate issuer:       /CN=4e7545eee66daa39443ff9f88f522447f7863783
Certificate serial:       01856BD3500020D552BB307A1D0ADC2DCBBD
Authority key identifier: 4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/J15_IqyzHQDAxCgfEKn5Lmtu07Y.roa
Signing time:             Sun 01 Jan 2023 05:34:48 +0000
ROA not before:           Sun 01 Jan 2023 05:34:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58059
IP address blocks:        193.3.35.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d3:50:00:20:d5:52:bb:30:7a:1d:0a:dc:2d:cb:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e7545eee66daa39443ff9f88f522447f7863783
        Validity
            Not Before: Jan  1 05:34:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=275e7f22acb31d00c0c4281f10a9f92e6b6ed3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b6:0b:ce:4a:1f:63:ff:71:33:2b:56:1b:52:
                    69:e6:66:4a:9f:a0:62:ea:4a:5e:9a:93:b0:35:27:
                    3a:27:05:d3:0e:d2:59:e3:8c:d4:f5:f4:cf:89:2d:
                    1a:79:15:2c:38:30:c6:24:e8:21:65:40:a0:ab:45:
                    f8:34:d9:81:67:ed:c0:85:47:ad:e8:2f:15:b3:e0:
                    c6:85:7a:bd:fb:2c:80:62:9f:b6:2d:fc:d6:2c:91:
                    22:95:43:71:43:bc:0e:5d:61:51:fc:69:4b:d3:14:
                    d4:84:10:eb:32:46:bf:59:e0:38:68:9d:36:2a:14:
                    35:03:ca:a9:9f:aa:b8:65:c8:a2:02:17:f8:9c:85:
                    b9:ae:61:1e:8b:36:24:2a:2e:2a:d8:72:c7:69:c5:
                    70:f7:ed:c2:42:53:9d:6b:bf:d9:e1:ea:a4:fa:63:
                    69:73:40:cf:97:d4:eb:81:bf:1f:79:30:03:9a:ee:
                    aa:87:ec:27:8e:bd:57:cf:14:d2:75:f2:8c:09:b7:
                    03:29:91:09:eb:58:c7:ad:5c:b0:ae:86:ec:13:cc:
                    ee:71:8c:2a:c3:d9:9a:73:95:67:34:7e:66:83:bf:
                    48:21:70:8e:df:a7:d6:90:9c:e8:fe:dc:fe:e1:0e:
                    90:3d:8f:03:8d:59:a0:1e:e4:bd:b6:80:8e:c7:0f:
                    d1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5E:7F:22:AC:B3:1D:00:C0:C4:28:1F:10:A9:F9:2E:6B:6E:D3:B6
            X509v3 Authority Key Identifier:
                keyid:4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/J15_IqyzHQDAxCgfEKn5Lmtu07Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:9f:14:aa:0e:f6:05:9c:ea:14:cb:2d:e1:74:ee:a3:3e:27:
         b1:fc:eb:53:f8:0f:db:33:39:33:59:23:14:fa:f8:96:37:a7:
         46:ca:3c:0c:a7:92:12:d7:ac:59:1c:a4:cf:67:ae:ed:d8:35:
         4d:ae:22:bc:de:37:07:ba:8c:6b:dc:00:03:f7:b5:bd:9c:c0:
         2e:1b:99:f3:86:f5:51:dc:ee:e7:ef:5b:70:41:85:31:8d:01:
         6a:5c:01:62:b1:35:99:eb:71:88:78:5c:54:56:20:ff:b0:d1:
         a2:1a:3c:ed:25:c4:5f:ea:64:ff:08:34:ab:cf:8e:32:83:7c:
         75:c0:41:8b:91:e0:f4:ee:a2:55:ba:72:bb:64:62:9a:ed:40:
         60:f5:94:5b:dd:4a:93:d9:5f:0c:d5:3e:83:25:55:3b:a8:a3:
         39:48:e3:06:ea:7d:73:f1:5c:d6:6a:4c:0a:80:44:25:80:a8:
         7c:c9:24:34:ca:a4:e2:01:98:54:b4:d4:da:87:77:1c:8c:ff:
         48:d0:5d:c6:f1:ab:21:bd:b7:e7:b1:56:70:31:50:57:dd:49:
         b9:be:16:0c:bb:69:b2:ce:a7:61:d1:76:ef:1d:b3:45:84:f7:
         07:c3:8c:59:b7:bc:3d:f8:d7:ac:8e:2c:26:25:73:e3:37:c2:
         57:02:c7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:40 2024 by rpki-client on console-ams.rpki-client.org