Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J2ZYcoobnQ3LhvWjtKFgcZei8hw.roa
File:                     J2ZYcoobnQ3LhvWjtKFgcZei8hw.roa (raw, json)
Hash identifier:          TRHh4ZimIOSSVAmub0EyNig+INGNwaj8HMqJVSmuztM=
Subject key identifier:   27:66:58:72:8A:1B:9D:0D:CB:86:F5:A3:B4:A1:60:71:97:A2:F2:1C
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       018CCA2A85C771B8F1DC4EEBBEFB9CF67756
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J2ZYcoobnQ3LhvWjtKFgcZei8hw.roa
Signing time:             Tue 02 Jan 2024 12:33:53 +0000
ROA not before:           Tue 02 Jan 2024 12:33:53 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204721
IP address blocks:        212.192.220.0/24 maxlen: 24
                          194.87.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 10:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:85:c7:71:b8:f1:dc:4e:eb:be:fb:9c:f6:77:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jan  2 12:33:53 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=276658728a1b9d0dcb86f5a3b4a1607197a2f21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:98:50:fd:16:f2:92:48:7e:cd:12:fc:ce:07:
                    94:4b:4f:01:a0:fc:f5:12:1b:92:4f:24:9c:7d:20:
                    0f:90:d9:82:49:5b:24:e6:8f:aa:1f:3b:a4:e0:1c:
                    33:5e:1b:47:e8:d6:b2:52:de:41:86:09:e4:f0:9c:
                    12:ba:2a:03:96:22:3a:ce:7f:93:cb:cb:ff:59:9b:
                    b0:c5:a0:30:58:1f:1a:71:be:26:ec:23:d9:90:d1:
                    2b:79:4b:b0:90:76:4b:da:74:c6:46:0c:26:1a:4f:
                    b7:93:a8:76:e3:6e:5b:ee:00:1d:41:b7:c4:4e:53:
                    4e:20:a5:f1:c8:21:8c:61:7d:63:ca:09:4d:69:2a:
                    e5:38:6d:ca:a2:4d:fc:ee:c2:07:bc:ea:77:a0:ef:
                    8e:a0:fb:4f:b2:84:ee:06:4e:41:40:a5:a6:63:54:
                    4b:e0:96:13:89:96:bb:ad:e4:cd:c8:c7:8e:5a:ac:
                    48:49:92:01:4c:04:36:22:44:3c:41:01:54:3d:ea:
                    ab:6a:67:49:73:e9:94:c2:0c:c5:9e:4b:44:5d:8b:
                    4c:bf:f6:51:2d:86:e8:0d:2e:0f:a3:9d:b9:73:83:
                    5f:50:b4:ae:50:a1:47:1e:4b:60:27:08:d2:2d:19:
                    00:35:24:d9:15:93:41:3b:03:1e:ac:89:1b:ef:52:
                    97:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:66:58:72:8A:1B:9D:0D:CB:86:F5:A3:B4:A1:60:71:97:A2:F2:1C
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J2ZYcoobnQ3LhvWjtKFgcZei8hw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.87.75.0/24
                  212.192.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:1b:d8:49:84:fd:1f:cb:94:77:e6:6c:da:ab:0d:f8:24:2b:
         3f:68:a6:7b:76:38:06:e2:73:74:0e:f7:95:92:98:ca:4b:25:
         20:b2:e9:55:40:98:0d:39:12:40:d1:3a:c9:91:0c:f9:a7:8a:
         28:8e:91:a3:e6:00:96:36:8b:62:c4:25:eb:75:26:e3:7f:bc:
         3e:1b:a4:62:16:35:f7:fd:a0:36:60:5c:b1:99:ec:38:82:21:
         0b:16:20:1a:e3:e7:12:b9:b9:77:e3:8b:ec:b3:0f:7e:48:d7:
         f1:41:a4:8a:c7:c7:b8:8b:85:d1:f0:9b:74:a1:c7:1c:2f:ad:
         e0:57:96:38:50:1f:07:f2:f2:1a:01:a0:cb:ae:5d:fa:d9:b3:
         3f:fa:ab:f9:32:f4:5f:b4:ea:20:21:8f:cc:36:34:8b:6f:e0:
         85:a2:35:7d:5b:07:64:70:55:44:a7:a6:09:04:1c:15:32:2e:
         fc:63:3c:33:c2:71:b2:71:91:a6:15:d3:d9:a2:17:9c:2d:72:
         cd:75:ad:1b:ab:d0:f8:0b:e4:25:01:d5:a8:52:51:e3:ca:52:
         1e:4c:5e:32:24:68:10:ba:5c:2b:b4:bd:2f:80:a0:00:1e:b9:
         1e:c7:a6:07:79:4d:8b:09:fc:2f:bf:e1:47:16:84:9b:dd:06:
         8a:0a:e2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 15:22:07 2024 by rpki-client on console-fra.rpki-client.org