Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/xgWJLezdeBYDeETgY3KpK_OlRsU.roa
File:                     xgWJLezdeBYDeETgY3KpK_OlRsU.roa (raw, json)
Hash identifier:          BW+ArwcxtoJ7Z4yD9eP0bcdC4YaY2L7QVFTFxfquDFM=
Subject key identifier:   C6:05:89:2D:EC:DD:78:16:03:78:44:E0:63:72:A9:2B:F3:A5:46:C5
Certificate issuer:       /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial:       01870DA3B56ECF0DEE058C38F2E7760FC441
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/xgWJLezdeBYDeETgY3KpK_OlRsU.roa
Signing time:             Thu 23 Mar 2023 08:44:05 +0000
ROA not before:           Thu 23 Mar 2023 08:44:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208726
IP address blocks:        195.77.242.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0d:a3:b5:6e:cf:0d:ee:05:8c:38:f2:e7:76:0f:c4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
        Validity
            Not Before: Mar 23 08:44:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c605892decdd7816037844e06372a92bf3a546c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fa:b7:0a:95:d5:d0:10:2d:57:d9:c8:b0:e9:
                    08:2b:04:65:8f:a6:90:f4:57:11:c7:bf:97:86:de:
                    29:af:bd:fe:79:e6:41:1a:bd:d1:5c:0f:10:12:10:
                    42:88:8c:cc:8e:ec:ff:77:2c:40:ec:10:4f:a9:ea:
                    ad:ad:70:4b:ed:f1:5c:29:40:3e:c6:a4:08:5d:83:
                    0f:47:1a:29:a5:ee:28:d8:e7:9d:58:ad:3d:60:e5:
                    96:78:70:c8:1f:53:23:e7:60:7d:11:2f:d1:eb:c3:
                    d9:55:44:e3:40:0e:30:c3:d4:94:a1:6b:83:91:55:
                    d4:e1:ad:c3:c3:0e:fe:01:a9:42:d2:b2:64:7b:d6:
                    c1:a1:40:70:18:92:20:61:87:63:cc:f0:73:1b:77:
                    c4:e0:b6:8d:1a:52:95:a0:b3:22:1f:4e:9d:97:6e:
                    8b:04:4c:77:79:4f:ce:f0:1b:c2:72:08:ff:01:bc:
                    77:db:50:0a:8b:13:6d:1c:23:65:74:80:35:85:6d:
                    d3:dd:8e:b4:7c:01:ec:b2:fa:9b:79:75:3a:45:2d:
                    76:5f:31:23:46:81:2f:3a:b0:fc:4d:6c:d6:9c:d8:
                    cd:29:d1:36:f8:df:6a:61:0d:bb:10:f4:d2:02:47:
                    ce:5b:c3:c9:f9:91:fa:16:5b:24:72:4c:c2:f9:93:
                    bf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:05:89:2D:EC:DD:78:16:03:78:44:E0:63:72:A9:2B:F3:A5:46:C5
            X509v3 Authority Key Identifier:
                keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/xgWJLezdeBYDeETgY3KpK_OlRsU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.77.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e9:88:e4:30:50:db:7e:af:06:6e:3f:04:11:dc:cc:7f:0b:e2:
         40:26:73:dc:9b:61:f6:fa:98:94:ff:44:d4:46:b6:0e:21:64:
         bb:2b:f3:47:b7:81:87:53:68:75:17:27:3f:7a:f4:33:93:3a:
         db:42:74:7e:fe:56:65:6e:8d:46:6a:05:2f:68:95:85:20:7e:
         96:ec:55:ec:f1:05:04:03:e7:3c:16:85:0b:55:78:59:9e:9b:
         c1:8c:9c:23:00:b0:d2:76:84:3b:9f:70:e7:d8:fd:c3:05:a0:
         e3:02:d3:94:d2:ed:15:7a:fa:cc:04:7d:23:a2:19:dc:07:0d:
         79:ef:ad:72:e0:ac:4c:fa:3b:33:8d:db:4e:e6:30:2a:46:2e:
         47:c8:8c:d8:36:7c:63:bc:56:a3:67:3c:c8:16:80:b8:2b:37:
         7c:2f:a5:82:c2:db:e7:48:d8:8d:3d:13:4e:16:96:5d:33:75:
         a1:d3:73:2c:3c:c0:dd:bc:a1:45:bb:01:aa:cd:3b:6f:07:9f:
         bc:24:a0:80:df:a7:d1:27:f1:56:52:d1:de:e6:cb:6c:bb:ee:
         34:47:2f:4f:13:7a:42:6d:f6:71:37:5e:89:3e:96:6b:e3:09:
         c6:27:d0:85:4d:cc:81:6c:02:31:01:d8:36:11:d4:ff:f5:c4:
         2b:9f:31:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:05 2024 by rpki-client on console-fra.rpki-client.org