Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/uGvbzpSe0aNN-Vs3A9zmPSoffvw.roa
File:                     uGvbzpSe0aNN-Vs3A9zmPSoffvw.roa (raw, json)
Hash identifier:          gZw9Dcn2HusxHPoxvBZIfa1ZxTvLwnjAKO/jSnS65QM=
Subject key identifier:   B8:6B:DB:CE:94:9E:D1:A3:4D:F9:5B:37:03:DC:E6:3D:2A:1F:7E:FC
Certificate issuer:       /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial:       01856E1D3175C58F345907F1AE7455DF44E6
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/uGvbzpSe0aNN-Vs3A9zmPSoffvw.roa
Signing time:             Sun 01 Jan 2023 16:14:45 +0000
ROA not before:           Sun 01 Jan 2023 16:14:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208341
IP address blocks:        195.7.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:1d:31:75:c5:8f:34:59:07:f1:ae:74:55:df:44:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
        Validity
            Not Before: Jan  1 16:14:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b86bdbce949ed1a34df95b3703dce63d2a1f7efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b5:25:bc:79:00:ce:72:db:a9:b7:70:d8:19:
                    98:60:50:fb:c5:bd:27:5b:e3:02:1b:b0:88:85:fd:
                    79:5e:93:3c:cd:ec:c8:36:c0:86:3c:fa:d0:c1:97:
                    4f:1a:87:b3:11:57:2a:2f:1f:fa:ed:ea:5f:77:02:
                    96:0f:89:4a:84:22:3f:ed:dc:17:b2:1a:92:9f:fa:
                    ba:e6:8a:48:49:5f:89:8a:0f:c8:9f:61:e5:c8:32:
                    ff:2c:81:25:63:52:3b:84:17:f1:4c:bc:46:09:96:
                    6e:88:f0:08:e3:82:46:8c:6a:3e:0d:79:35:8c:bd:
                    42:5a:49:5d:90:87:82:30:41:e7:5f:7d:e2:de:28:
                    69:12:95:3e:0b:10:a5:eb:00:c0:9d:67:58:ba:fa:
                    4b:7a:c5:e4:92:7d:58:b2:3f:cb:0b:15:c0:7c:a9:
                    c8:64:a8:ab:4e:a7:a9:f6:cd:67:52:59:21:22:35:
                    53:70:7b:99:10:dc:bf:ad:8a:5e:52:ad:da:45:53:
                    58:aa:d8:ff:a4:79:2b:c1:1f:4c:ae:e2:a2:b1:40:
                    7b:4c:a2:0a:6b:2b:74:d2:16:cb:e5:5f:b5:9d:f1:
                    08:43:52:54:81:a0:75:e3:06:27:ef:a6:57:35:78:
                    b9:d8:e7:1e:ae:a4:19:43:c8:ba:c2:bc:8a:d6:66:
                    33:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6B:DB:CE:94:9E:D1:A3:4D:F9:5B:37:03:DC:E6:3D:2A:1F:7E:FC
            X509v3 Authority Key Identifier:
                keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/uGvbzpSe0aNN-Vs3A9zmPSoffvw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.7.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:31:99:e1:d0:7e:33:66:4f:b1:7c:cb:cb:f8:74:f6:99:6c:
         d7:86:49:c6:2a:b6:8a:88:eb:8c:3a:46:85:91:00:5d:24:1a:
         21:ba:1e:9d:17:8a:e2:99:e1:ed:e8:d4:22:35:b5:ce:88:74:
         c6:4b:f7:f9:9b:33:c0:bf:c7:ae:3c:e4:a8:7b:0b:6e:9f:be:
         06:7b:1e:ea:51:97:0a:af:eb:be:e7:ee:9f:46:d5:da:2d:77:
         c7:4e:d7:c1:e5:fa:f7:c4:89:09:2f:ed:f8:0a:94:b3:52:2a:
         ff:ba:eb:83:52:25:99:c1:76:94:b0:3e:9b:22:a7:3f:27:64:
         00:ea:fe:8d:b2:cd:8c:d1:30:ce:03:b7:9e:2d:b8:9f:8e:a9:
         aa:63:80:11:30:cb:5d:a3:dc:78:81:0f:cb:84:bb:3f:17:8f:
         e8:1d:54:ec:7f:42:29:9a:63:18:2a:2e:cb:a0:05:36:fe:08:
         f1:3c:35:1d:0b:d5:f7:49:33:75:a1:87:26:cc:95:17:79:5f:
         5f:80:05:7f:30:14:c8:09:c0:24:fa:68:d6:22:b2:38:bf:53:
         c9:16:c8:f7:ef:e9:a6:06:6b:bb:19:35:3d:08:2c:17:78:30:
         a9:af:ac:6a:94:74:75:48:20:dd:24:86:b4:15:f9:4f:3f:36:
         16:22:df:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:46 2024 by rpki-client on console-ams.rpki-client.org