Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/HjMKhrUSXcvFHGM3XuW1sSb7LjI.roa
File:                     HjMKhrUSXcvFHGM3XuW1sSb7LjI.roa (raw, json)
Hash identifier:          j4wfDjly50PCoDSfeeiYkmLERbj8oFJhaokdWwUzcBA=
Subject key identifier:   1E:33:0A:86:B5:12:5D:CB:C5:1C:63:37:5E:E5:B5:B1:26:FB:2E:32
Certificate issuer:       /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial:       01856CB82A7B1924B4B709DC38423E3104DE
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/HjMKhrUSXcvFHGM3XuW1sSb7LjI.roa
Signing time:             Sun 01 Jan 2023 09:44:46 +0000
ROA not before:           Sun 01 Jan 2023 09:44:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12962
IP address blocks:        193.178.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:b8:2a:7b:19:24:b4:b7:09:dc:38:42:3e:31:04:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
        Validity
            Not Before: Jan  1 09:44:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1e330a86b5125dcbc51c63375ee5b5b126fb2e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:03:79:21:87:49:40:45:e8:1e:a0:05:f1:6e:
                    96:e1:6f:fd:34:b5:5a:7a:dc:e9:40:71:f4:33:06:
                    65:2a:0d:0c:c3:db:31:4d:0f:1a:db:d3:9c:78:d5:
                    99:37:45:b3:34:e0:2c:6b:6d:b7:2e:3b:29:8f:3a:
                    e7:76:10:23:18:9b:66:8a:e2:8a:92:e7:95:26:ff:
                    00:30:22:97:66:f0:24:aa:2c:b7:bf:4d:91:ad:4a:
                    6d:f9:f2:4e:49:16:a9:15:95:9b:69:6f:a7:2b:e4:
                    96:af:64:21:16:cb:dc:17:03:e3:4a:d6:0a:45:ca:
                    e0:59:73:0e:1f:e1:46:53:11:ba:9f:21:d1:b1:7c:
                    bb:e7:fa:da:a7:9a:23:08:e0:c9:45:d0:03:73:ac:
                    f8:cc:fe:1b:7f:c3:43:4e:c2:99:e8:04:2e:c4:88:
                    25:25:2f:17:d6:42:f7:c9:dc:a7:62:ec:ec:4e:cb:
                    ad:91:5a:b5:c5:e5:4c:64:ad:1e:79:a2:41:1c:dc:
                    85:c8:76:ae:36:ac:6e:76:dd:d7:a8:76:21:dc:8a:
                    ed:af:b4:a6:49:5f:69:2c:6a:5f:56:04:d1:ac:5b:
                    14:85:90:46:3c:af:d5:aa:e9:ef:e5:3c:55:de:27:
                    13:81:21:be:a8:d9:bb:59:9e:75:8c:9f:41:75:7f:
                    7c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:33:0A:86:B5:12:5D:CB:C5:1C:63:37:5E:E5:B5:B1:26:FB:2E:32
            X509v3 Authority Key Identifier:
                keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/HjMKhrUSXcvFHGM3XuW1sSb7LjI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:ab:c4:a3:3c:9f:91:d0:57:f2:45:d9:38:3d:2d:8c:4a:76:
         7d:7c:f3:d9:aa:92:45:30:93:93:cb:1a:87:b5:28:2e:9a:30:
         46:93:6a:2e:2c:e4:74:f7:df:cc:10:ec:44:0f:8c:85:01:c5:
         3e:8f:18:52:37:2c:cc:ad:10:ad:4b:64:36:16:38:18:ed:24:
         b5:ef:26:10:42:8e:a1:6e:9a:02:65:1c:43:57:77:cf:17:34:
         c2:19:df:ac:2b:e7:3a:6a:9e:33:db:29:f6:c1:d9:4c:d9:92:
         db:85:b3:10:11:a7:52:39:06:d1:12:7d:ed:9e:a5:02:fe:f0:
         bd:11:c4:b0:15:f5:02:f9:38:58:18:82:b5:0b:16:79:76:54:
         9c:8d:55:89:98:51:4d:c4:f2:9d:20:b3:fc:19:0c:1e:1d:42:
         82:46:96:f1:42:c7:c0:1d:be:2c:6c:93:22:42:ad:99:ab:19:
         83:71:8f:b7:92:ce:52:bc:b6:87:56:43:7b:63:00:38:ca:a9:
         10:cb:08:15:55:a2:78:b6:93:02:40:cc:1c:fe:83:fb:4e:94:
         3c:2d:8d:22:f8:38:2f:e6:b2:01:be:d3:a3:c5:c9:5a:cc:23:
         22:cf:79:18:61:a5:b2:7f:38:fd:52:19:90:b2:93:20:6c:50:
         a4:e3:b7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:09 2024 by rpki-client on console-ams.rpki-client.org