Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/tH1GWW80zEgu4Sn_OsJTQ0Zp-gY.roa
File:                     tH1GWW80zEgu4Sn_OsJTQ0Zp-gY.roa (raw, json)
Hash identifier:          Pt8qWlgyeh3L/kjkbhnkPEf2Dl3fUxTbZ8GR6CBA5zs=
Subject key identifier:   B4:7D:46:59:6F:34:CC:48:2E:E1:29:FF:3A:C2:53:43:46:69:FA:06
Certificate issuer:       /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial:       01856F54A5B5D227E30FA457E21A9AC01D65
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/tH1GWW80zEgu4Sn_OsJTQ0Zp-gY.roa
Signing time:             Sun 01 Jan 2023 21:54:56 +0000
ROA not before:           Sun 01 Jan 2023 21:54:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12350
IP address blocks:        81.23.64.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:54:a5:b5:d2:27:e3:0f:a4:57:e2:1a:9a:c0:1d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
        Validity
            Not Before: Jan  1 21:54:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b47d46596f34cc482ee129ff3ac253434669fa06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ad:b1:4d:b8:79:ae:02:12:b5:f0:92:3c:22:
                    17:71:1f:c9:1a:8b:b8:be:8a:49:4b:a6:86:d2:01:
                    7d:0e:40:01:a5:1e:24:07:a2:35:ee:48:10:7f:84:
                    8b:a7:b6:2f:8d:20:35:02:74:15:0f:d7:99:47:cc:
                    a7:a3:9d:54:6f:ec:84:62:c4:89:3d:4c:c9:6e:11:
                    da:8d:0d:8e:dc:73:0b:fa:8c:a3:4a:fc:6c:3e:50:
                    54:16:bc:4b:82:95:83:d8:2a:98:13:17:3a:55:0d:
                    07:dc:f9:34:91:25:44:84:c4:90:46:0b:a1:e6:37:
                    23:78:26:62:3c:74:b8:a7:f3:c6:14:02:9e:50:33:
                    13:de:82:ea:31:d2:fd:e8:72:0b:92:66:e1:cc:33:
                    76:ee:36:bf:d5:d7:1e:68:ec:c9:05:36:70:74:0f:
                    7d:36:ab:70:eb:c9:39:1d:7e:10:7c:f3:d7:55:5d:
                    f9:2e:a8:ea:cd:f5:21:15:3e:e6:42:07:59:33:b7:
                    c7:a3:a0:00:ee:90:bc:a2:f5:c3:1f:3f:81:23:a4:
                    66:0c:46:10:71:63:c2:64:e2:53:53:96:1a:83:23:
                    b3:82:75:85:1b:1e:ae:8f:2f:75:c3:8c:bd:32:52:
                    49:07:b3:59:9c:14:f9:59:1d:de:22:cf:aa:f9:00:
                    32:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7D:46:59:6F:34:CC:48:2E:E1:29:FF:3A:C2:53:43:46:69:FA:06
            X509v3 Authority Key Identifier:
                keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/tH1GWW80zEgu4Sn_OsJTQ0Zp-gY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.23.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1d:b8:47:34:04:15:17:86:2b:17:3d:a1:af:81:98:dc:8b:90:
         45:d3:5b:76:be:ca:2c:7a:a7:ea:07:25:bc:4a:c7:e2:e2:4d:
         18:95:9f:d3:c5:92:72:48:01:b6:aa:7b:40:9a:ba:cc:b6:af:
         5d:b4:da:0d:c0:74:de:42:54:1c:b1:7d:99:c9:a3:db:16:0a:
         33:db:8d:38:a9:14:07:54:d3:7f:b9:cd:ca:c4:4f:46:28:b1:
         86:47:5c:a3:6c:82:14:1c:59:24:0b:75:55:da:76:29:dc:c6:
         21:b6:7a:cb:b5:d4:4f:4c:c7:4c:e2:9e:79:19:11:2d:08:e1:
         25:11:f2:5a:07:93:14:3c:d1:0e:16:80:6f:a9:91:7a:c9:3c:
         5b:fb:b7:eb:5c:a4:ce:59:50:cf:d8:39:03:0f:0b:bf:66:d5:
         06:8f:4d:9b:65:60:76:ad:74:80:01:6c:82:9f:bb:43:99:87:
         e4:ea:97:24:78:93:d0:ff:32:ab:a5:37:29:8e:17:dd:dd:dd:
         22:39:ff:e5:ec:cd:79:47:40:77:ef:fc:75:fe:d7:c7:f3:bc:
         74:57:30:33:0a:2a:58:bf:d5:70:8e:59:67:fc:5b:05:ec:9b:
         be:60:2c:70:79:68:25:d2:59:23:74:9c:f4:f2:c0:b2:d4:6a:
         ba:12:2b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:39 2024 by rpki-client on console-fra.rpki-client.org