Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/aSLcTCk-387Pc1oQDDhuDcL8VoY.roa
File:                     aSLcTCk-387Pc1oQDDhuDcL8VoY.roa (raw, json)
Hash identifier:          xOr8YZQiBkENb71axsvhLmjZwNbR2rEiCc8F1tNKywg=
Subject key identifier:   69:22:DC:4C:29:3E:DF:CE:CF:73:5A:10:0C:38:6E:0D:C2:FC:56:86
Certificate issuer:       /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Certificate serial:       018BC821733EE8A8E005D28972CCA16ED30F
Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/aSLcTCk-387Pc1oQDDhuDcL8VoY.roa
Signing time:             Mon 13 Nov 2023 10:01:57 +0000
ROA not before:           Mon 13 Nov 2023 10:01:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8851
IP address blocks:        194.207.0.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c8:21:73:3e:e8:a8:e0:05:d2:89:72:cc:a1:6e:d3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
        Validity
            Not Before: Nov 13 10:01:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6922dc4c293edfcecf735a100c386e0dc2fc5686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:c0:16:42:79:9f:a0:f7:60:5d:e2:f9:ef:
                    54:eb:d9:47:ff:e6:6c:c8:27:97:37:de:92:ea:a8:
                    2f:07:2a:65:bb:7c:34:97:e5:ba:d0:e1:e6:6f:34:
                    b2:9e:bb:ac:44:66:7f:48:3a:d3:88:bd:28:a5:8b:
                    55:3f:4f:96:92:bb:9a:51:fe:f5:d3:f8:b5:25:25:
                    c2:09:ff:f5:d5:e5:b1:ff:f1:4a:9c:a7:11:71:cb:
                    59:3d:83:1f:8c:e0:28:69:2f:0e:8b:eb:7a:05:c4:
                    a4:ff:ae:dd:d6:1a:20:37:fc:f4:f2:28:65:be:fb:
                    26:68:e9:69:b9:c4:55:ae:df:54:6a:75:c0:e9:a2:
                    4e:e7:ac:50:8d:1d:82:17:b0:c6:13:79:bc:76:34:
                    80:e4:f2:62:c4:81:a3:a0:4b:5a:ae:db:31:a1:be:
                    4e:a3:b9:2c:37:b7:29:4d:5a:1c:97:0f:4a:2d:1d:
                    f4:72:47:42:e8:29:de:36:1d:b3:02:60:46:e6:f5:
                    99:2f:02:77:07:ff:18:9a:a4:1b:93:70:96:43:16:
                    82:be:c8:58:e9:a5:9e:62:83:81:be:42:57:9c:f5:
                    c1:18:c8:d3:e0:39:b3:33:ea:cc:94:30:04:f1:13:
                    40:71:d8:98:cf:a7:e3:8e:14:3b:44:d4:ba:23:01:
                    bc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:22:DC:4C:29:3E:DF:CE:CF:73:5A:10:0C:38:6E:0D:C2:FC:56:86
            X509v3 Authority Key Identifier:
                keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/aSLcTCk-387Pc1oQDDhuDcL8VoY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.207.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         69:dd:c1:1a:8b:8b:99:14:5b:05:91:50:9b:80:d2:f0:5d:41:
         ea:3a:ac:88:8a:25:7d:d5:a9:d3:6d:0f:2b:e2:0e:d5:e3:ca:
         cc:fa:f9:52:62:01:da:21:9f:cb:f3:ea:c4:4b:f8:ae:6b:e9:
         91:10:17:ce:25:17:e6:95:3e:47:33:9b:1f:f4:55:10:39:df:
         6c:88:ec:cd:48:66:51:53:99:d8:d9:6b:96:c0:e4:eb:20:ec:
         0a:0c:33:1c:0b:21:de:53:67:55:f0:93:0d:34:21:3f:88:1b:
         78:d1:a3:b7:95:62:b4:ca:11:fe:c3:6f:63:23:9e:23:a1:87:
         95:16:d5:ed:87:c5:2e:7f:02:38:12:39:48:7a:61:b3:54:12:
         a2:32:c9:14:a0:53:2e:13:a4:5a:8f:9c:4f:d8:c1:f2:9d:74:
         d0:85:c8:0a:a3:96:48:9e:48:d8:e8:df:25:1c:b6:8a:da:f6:
         c2:b3:06:03:44:a7:86:43:9b:90:1e:30:99:6c:5b:66:58:36:
         76:1d:a4:17:8b:0b:e9:ea:f7:48:ca:de:68:64:9c:18:07:20:
         49:5a:7d:80:de:60:06:cd:b5:de:73:87:9c:8b:1d:9c:5e:5d:
         0c:eb:0f:ed:82:fd:da:99:55:4a:e5:a1:37:52:61:0b:50:66:
         f8:3a:a1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:20 2024 by rpki-client on console-fra.rpki-client.org