Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/m_w17xoRsQGSh5eO1HP7EpIuVsc.roa
File:                     m_w17xoRsQGSh5eO1HP7EpIuVsc.roa (raw, json)
Hash identifier:          PCL242w1EPEk5pZ0tUa2XZ0sBpcH7yN7WB0h0b8819w=
Subject key identifier:   9B:FC:35:EF:1A:11:B1:01:92:87:97:8E:D4:73:FB:12:92:2E:56:C7
Certificate issuer:       /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial:       018750CD95BA2FD4B4D31C264ED20CAFE124
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/m_w17xoRsQGSh5eO1HP7EpIuVsc.roa
Signing time:             Wed 05 Apr 2023 09:44:23 +0000
ROA not before:           Wed 05 Apr 2023 09:44:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62371
IP address blocks:        194.0.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:50:cd:95:ba:2f:d4:b4:d3:1c:26:4e:d2:0c:af:e1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
        Validity
            Not Before: Apr  5 09:44:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9bfc35ef1a11b1019287978ed473fb12922e56c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:82:87:15:47:5d:77:66:95:be:b0:74:9c:c0:
                    13:64:b2:f2:07:f3:ae:1c:0f:2a:1b:c1:81:76:a9:
                    55:af:8c:65:9b:3b:38:76:32:2e:5b:5d:7f:5f:31:
                    5d:66:a6:c9:1b:9a:20:23:14:18:b8:ca:a8:ea:4d:
                    d6:03:e2:4c:98:7e:a5:af:92:75:de:0c:4e:ef:78:
                    8b:76:52:f1:ce:79:e9:f0:ce:7f:88:20:db:28:cd:
                    06:52:85:d0:63:16:7f:b8:45:48:67:77:a0:ae:1b:
                    a9:21:68:69:ed:8c:8e:46:95:4d:c3:b6:57:70:bb:
                    c4:d2:b6:db:c7:c9:15:3a:e7:ce:fa:c5:b6:89:19:
                    77:a3:80:0b:2b:1b:26:6c:31:93:fa:fb:63:7c:7a:
                    d1:1d:5d:c2:c2:20:56:00:30:9e:3a:36:c5:17:e2:
                    3a:37:eb:02:2e:7a:5d:67:3e:30:a6:e5:4f:b6:e1:
                    1f:5a:d1:a8:af:eb:2a:88:72:95:3c:d5:b2:45:5f:
                    99:28:cd:b1:2e:06:ab:0d:cb:6c:ff:c5:2d:65:9f:
                    cc:80:b3:dd:b5:7c:88:b2:3c:f6:59:42:09:ce:a3:
                    35:6c:f0:9d:01:cb:55:e5:e1:e2:95:83:75:01:9e:
                    c8:99:e9:2c:1f:62:5f:9f:3b:b1:cf:35:03:bf:3a:
                    b4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FC:35:EF:1A:11:B1:01:92:87:97:8E:D4:73:FB:12:92:2E:56:C7
            X509v3 Authority Key Identifier:
                keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/m_w17xoRsQGSh5eO1HP7EpIuVsc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.0.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:fa:89:03:de:b3:1a:56:aa:ce:d0:b6:2e:06:54:12:b5:78:
         7d:93:fa:fc:04:5e:47:34:de:81:9d:b9:8d:1e:3e:a4:03:64:
         11:de:f0:39:f4:c9:91:bc:7e:47:7f:46:8d:cd:65:46:6f:28:
         1b:b9:ff:59:11:03:7b:56:a3:2c:ce:15:87:e3:6e:25:35:d8:
         88:fb:91:d4:4b:44:95:bc:7b:41:a9:49:5b:2d:4e:8e:73:1f:
         d0:ed:a8:9f:f5:86:99:a0:79:6f:17:92:f8:a2:5d:67:55:16:
         55:71:be:a0:06:83:30:54:a1:75:15:d3:21:a4:90:28:8c:d7:
         fd:19:f0:db:3b:77:78:62:72:0d:f2:85:ab:ed:96:2a:20:2f:
         c2:62:b0:a7:f4:55:46:39:33:22:33:22:eb:c8:21:f3:68:b6:
         2a:0e:2a:fc:0d:f7:2d:b1:b8:08:7e:c4:57:8d:c1:61:bf:4c:
         71:e8:a3:59:09:35:b3:82:0c:5d:2b:27:3f:e6:af:cf:54:5a:
         b1:56:62:1f:9c:8a:b7:c6:9e:96:70:d9:06:39:40:29:99:fe:
         93:e8:d6:03:2b:ef:75:cb:a8:57:68:b9:dd:e8:f0:27:1b:b9:
         66:f5:b3:83:db:78:13:a5:cd:5a:4b:1a:ea:3b:e3:77:17:4e:
         39:81:71:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:23 2024 by rpki-client on console-ams.rpki-client.org