Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/a1AB1d5RueyeO59o_I9NEXbxvAE.roa
File:                     a1AB1d5RueyeO59o_I9NEXbxvAE.roa (raw, json)
Hash identifier:          wdgvuWL/sHhSll6pa2qaHxtRVPwwF26OUe9FcUAilN8=
Subject key identifier:   6B:50:01:D5:DE:51:B9:EC:9E:3B:9F:68:FC:8F:4D:11:76:F1:BC:01
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       01887058C274242E8E78CE5C480C70F8EB9B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/a1AB1d5RueyeO59o_I9NEXbxvAE.roa
Signing time:             Wed 31 May 2023 05:47:25 +0000
ROA not before:           Wed 31 May 2023 05:47:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60849
IP address blocks:        82.115.208.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 28 Sep 2023 13:14:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:70:58:c2:74:24:2e:8e:78:ce:5c:48:0c:70:f8:eb:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: May 31 05:47:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6b5001d5de51b9ec9e3b9f68fc8f4d1176f1bc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6b:65:80:9b:f6:b7:3b:e0:be:98:cc:21:d4:
                    37:57:e7:97:c3:04:14:e7:9d:a4:c4:10:f6:b0:36:
                    48:97:60:a2:8b:48:4f:7e:da:01:43:3b:8f:b8:af:
                    28:65:78:3d:97:6e:02:73:61:c7:b2:d3:23:a8:f3:
                    78:98:21:6e:ed:b3:24:43:cc:64:c6:7a:e9:b2:df:
                    f6:67:e3:34:5d:2d:5d:65:bc:c5:6f:af:9a:35:b3:
                    04:8c:e8:af:47:18:e9:b3:5d:40:14:4e:82:d4:c1:
                    90:bb:f7:f0:e0:26:60:07:fd:42:9e:8b:55:8e:84:
                    03:b4:ab:f5:d0:31:f2:52:21:a0:5c:40:3e:3a:61:
                    b5:4e:33:d8:a3:e2:33:07:b4:48:c3:71:35:be:9f:
                    a2:77:63:cd:8b:69:40:05:b0:f0:e6:cb:54:6c:28:
                    f5:17:e6:46:55:42:8f:46:b1:6e:41:41:83:f9:bb:
                    ae:4c:6a:d2:05:e7:40:c5:3b:e2:7a:fe:75:ed:0c:
                    f4:e6:a6:db:59:8f:f5:d1:c6:e4:78:19:36:dc:84:
                    d9:58:23:a1:6f:69:a4:37:03:aa:86:f9:bc:48:78:
                    6b:a4:77:31:17:cf:2f:a5:a2:12:16:23:18:80:e4:
                    34:e2:de:2d:ec:e9:d1:40:84:f3:e9:4a:3e:44:6d:
                    0b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:50:01:D5:DE:51:B9:EC:9E:3B:9F:68:FC:8F:4D:11:76:F1:BC:01
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/a1AB1d5RueyeO59o_I9NEXbxvAE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.115.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:bb:da:1d:4a:60:ea:ae:6f:b2:89:15:f8:57:b3:c0:c7:ba:
         da:04:16:d2:6b:50:43:ee:fa:2b:0a:95:6e:a5:41:79:cd:cc:
         27:55:f8:4c:51:30:94:64:cf:2a:95:61:7b:c9:d1:80:8c:05:
         50:26:f5:9b:6c:a5:ba:e9:d9:4b:ad:d4:f7:ad:8f:af:ec:50:
         f3:30:58:3c:80:b7:6e:b2:7a:13:aa:27:71:af:90:4d:4b:63:
         63:2e:b9:59:39:4a:de:ba:f5:5c:47:29:c1:f5:1e:16:48:38:
         d2:25:a4:33:2d:7e:9a:81:b5:2c:64:9d:ee:53:45:63:3b:fe:
         f8:70:c3:8c:f5:f6:2d:09:5b:31:5f:87:ea:b0:ba:88:e8:67:
         1b:44:21:12:13:9a:4a:f4:e1:cd:bb:19:fd:8d:78:f6:fc:c8:
         4d:b3:ef:0b:4b:b9:06:35:cd:17:52:04:df:8f:3b:ea:bc:7c:
         2d:11:58:c0:f6:b7:76:32:7b:ee:7f:7c:64:4c:87:49:d5:9d:
         af:f7:1c:7d:ba:90:18:04:81:2c:5c:1f:b9:a1:fd:95:fa:e7:
         ac:8c:27:f0:f8:f9:6d:ed:7c:86:2e:af:0c:ea:8b:75:5b:78:
         ea:41:8b:b9:54:f4:42:08:ba:13:b7:56:92:12:da:5b:dc:c0:
         69:a2:9e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:14 2024 by rpki-client on console-fra.rpki-client.org