Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/cGLymCTz1E9cRMN7jyIZro6iUHk.roa
File:                     cGLymCTz1E9cRMN7jyIZro6iUHk.roa (raw, json)
Hash identifier:          UQq5lA0l2qXv1mUoUwl+LB/mFNOs0S1bhraNe3x59a8=
Subject key identifier:   70:62:F2:98:24:F3:D4:4F:5C:44:C3:7B:8F:22:19:AE:8E:A2:50:79
Certificate issuer:       /CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Certificate serial:       018570CBEC098A64BA4B18D49BAFE9869D24
Authority key identifier: 9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/cGLymCTz1E9cRMN7jyIZro6iUHk.roa
Signing time:             Mon 02 Jan 2023 04:44:50 +0000
ROA not before:           Mon 02 Jan 2023 04:44:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47843
IP address blocks:        194.33.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:cb:ec:09:8a:64:ba:4b:18:d4:9b:af:e9:86:9d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
        Validity
            Not Before: Jan  2 04:44:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7062f29824f3d44f5c44c37b8f2219ae8ea25079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:af:d1:ac:af:2c:af:91:22:02:b6:f5:cc:f5:
                    d9:1e:f3:54:51:20:2a:ee:8e:f0:5d:62:15:aa:b0:
                    ff:8f:96:28:0a:c7:ba:f6:45:85:9e:31:48:27:a8:
                    25:10:d5:2c:ab:f3:90:ac:fc:e8:f2:09:23:a6:dc:
                    6f:78:05:42:9a:45:44:b7:37:f3:66:4d:f9:49:c4:
                    cc:2f:23:72:aa:2b:ab:b4:0a:3f:77:b9:d4:83:8a:
                    60:c4:5f:67:18:80:40:2f:b1:ed:76:a2:42:ab:26:
                    6a:e0:22:93:23:99:67:68:72:57:de:01:35:52:dd:
                    c4:f2:83:d5:79:0e:74:bb:f5:50:02:ff:a1:d3:1b:
                    2e:4a:81:13:72:b8:b6:08:d9:82:b1:32:1b:03:bc:
                    64:be:8a:c8:dc:1e:3f:99:60:2f:7c:7f:c1:f7:61:
                    18:45:1a:ac:5c:2c:41:7b:d4:77:a4:dd:79:3a:27:
                    7c:9b:59:cc:7f:fd:e4:2c:fd:69:db:1f:81:7e:ad:
                    e0:85:32:4d:2b:19:05:b0:c7:10:8b:6c:76:67:be:
                    db:2d:74:76:d7:dc:18:f5:c8:5a:b0:2f:fa:cb:de:
                    82:a8:2f:37:1c:b9:c5:68:4a:f9:58:16:1f:22:c3:
                    62:e8:49:b2:ae:83:27:8b:d6:dd:b6:d7:fc:39:c2:
                    62:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:62:F2:98:24:F3:D4:4F:5C:44:C3:7B:8F:22:19:AE:8E:A2:50:79
            X509v3 Authority Key Identifier:
                keyid:9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/cGLymCTz1E9cRMN7jyIZro6iUHk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.33.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:be:37:39:ca:4e:4f:ec:bb:54:81:1c:d1:a4:69:31:ea:0f:
         49:3f:72:cc:3b:69:9a:cd:ff:3a:4c:b3:61:50:35:b8:49:1d:
         55:6e:45:24:c7:77:f4:8a:29:9d:d8:0e:b9:b3:f8:d6:9c:f2:
         4b:7e:9a:43:4e:8f:a4:b9:b6:3b:d1:8a:2d:34:88:92:ee:b3:
         ba:d1:7e:77:41:82:70:22:77:e4:cc:4a:6c:9d:d1:1d:a9:3f:
         ce:cb:38:d4:6f:bb:58:49:c5:bf:38:56:57:00:e7:52:95:50:
         d6:d2:d2:ad:d5:7f:b4:8d:16:6b:70:0a:f8:24:65:41:30:c5:
         83:74:14:58:55:93:2c:9b:21:3f:6d:79:f2:4a:a7:2c:12:3c:
         8b:e1:16:c0:c1:81:00:d6:3f:51:7f:d0:31:a2:87:78:ca:ed:
         da:7c:9d:3d:bb:4c:7a:5f:fc:3d:7f:85:8d:5a:4c:26:6c:54:
         1f:cc:bf:63:12:89:5c:90:0a:d2:f8:09:f0:46:45:41:f6:e9:
         70:49:46:ad:35:be:d9:91:c9:c1:5e:53:69:97:9c:69:b4:8c:
         71:89:dd:13:af:b5:1f:50:a7:b3:bb:be:a8:8a:83:49:04:6f:
         17:e1:4d:b8:16:eb:a9:0a:1b:d0:56:97:0e:e5:2a:43:df:9e:
         93:32:b1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:39 2024 by rpki-client on console-fra.rpki-client.org