Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/F7kpgs1i2peBbWMXC4yBXtpl5Bs.roa
File:                     F7kpgs1i2peBbWMXC4yBXtpl5Bs.roa (raw, json)
Hash identifier:          P21OvKvDZp04zKvt0we5U6q7pZzyBR/i4FEp79m2Nhc=
Subject key identifier:   17:B9:29:82:CD:62:DA:97:81:6D:63:17:0B:8C:81:5E:DA:65:E4:1B
Certificate issuer:       /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial:       018CC802E93F74E986AE6009721F3EA0A15C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/F7kpgs1i2peBbWMXC4yBXtpl5Bs.roa
Signing time:             Tue 02 Jan 2024 02:31:23 +0000
ROA not before:           Tue 02 Jan 2024 02:31:23 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     39351
IP address blocks:        193.180.76.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 14 May 2024 14:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:02:e9:3f:74:e9:86:ae:60:09:72:1f:3e:a0:a1:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
        Validity
            Not Before: Jan  2 02:31:23 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=17b92982cd62da97816d63170b8c815eda65e41b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:58:11:dd:59:87:16:d3:52:2a:ce:bb:e0:42:
                    b4:75:42:30:1a:b4:25:4d:7a:46:e2:e1:e0:ea:e7:
                    16:a8:c2:ac:98:e5:49:6e:44:6c:65:a5:de:9b:90:
                    a3:71:10:38:e7:fc:46:fb:21:e2:74:a5:fd:5c:cd:
                    aa:ad:21:33:6f:e4:4e:f3:f3:58:95:19:f8:07:8c:
                    a0:69:fd:d9:e2:5c:1e:8a:c4:ed:9d:c4:32:28:f6:
                    f7:ea:70:cf:27:6f:19:9e:a0:41:73:6e:ca:40:78:
                    5d:36:d2:cd:0a:4a:c4:b2:19:ca:6b:88:e4:d2:83:
                    74:f7:ee:6d:34:a9:d2:cc:5d:61:43:8e:fd:d7:52:
                    57:17:6d:99:d5:3b:7b:b0:0e:af:3a:b6:59:2e:86:
                    40:33:30:31:7f:5c:6b:54:a7:56:f3:40:0f:0e:7e:
                    45:54:b1:41:4e:68:24:22:b5:28:25:5c:0b:d1:97:
                    9a:ea:8f:07:b3:fb:17:7f:32:e3:b1:09:41:62:92:
                    f8:8b:61:ed:d3:c5:a6:13:e5:4a:9d:c8:c1:f9:f2:
                    e5:2b:f1:ee:d6:da:36:9c:84:3f:06:87:d3:6d:98:
                    94:c6:c7:3c:4f:cf:3b:15:91:ef:3d:ea:36:5f:e6:
                    d3:bf:2e:52:72:6d:53:ca:8b:c0:8d:10:47:fa:0f:
                    02:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B9:29:82:CD:62:DA:97:81:6D:63:17:0B:8C:81:5E:DA:65:E4:1B
            X509v3 Authority Key Identifier:
                keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/F7kpgs1i2peBbWMXC4yBXtpl5Bs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.180.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:e6:c8:ec:16:50:ed:2d:9e:23:cf:c2:d1:e2:95:41:26:60:
         63:95:9c:ae:b8:b0:51:f2:9c:2e:78:50:94:7b:d5:e3:00:19:
         ef:27:f7:0e:27:2a:96:c6:c4:25:5e:7c:ae:ec:c5:06:12:b9:
         49:8c:91:a8:dc:f0:63:e7:98:80:d4:00:ac:69:d7:50:b8:51:
         7d:03:de:11:a3:e9:08:c1:c2:2f:08:67:16:e3:99:cf:9e:ac:
         02:c2:82:67:2a:bb:62:40:41:b6:23:d5:44:ea:8c:42:e4:bb:
         c5:7e:06:29:75:03:72:68:c4:6e:fd:37:0b:64:d9:04:47:f3:
         48:26:fd:e7:9a:b7:ab:42:66:f6:68:94:d8:0d:15:d4:67:90:
         3c:f3:64:10:37:21:54:93:d5:72:7b:e9:d9:2c:69:54:1e:84:
         88:21:5d:cd:01:a3:f1:a4:28:cb:90:f8:97:76:19:d1:16:2b:
         5c:eb:ed:8d:8e:ee:f3:c2:5b:98:ad:a5:62:d9:1a:10:d1:84:
         37:88:71:42:2d:16:1a:1a:4d:43:f8:be:6b:74:13:b1:be:a9:
         6b:d9:1b:c8:6f:fb:52:ad:d9:d3:a2:eb:26:8a:51:ae:5e:d2:
         16:eb:90:51:74:0b:a2:82:79:13:90:71:e9:d6:89:6a:16:b6:
         96:58:ed:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 18:05:43 2024 by rpki-client on console-ams.rpki-client.org