Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/LFyv8YCz6RmNPeeUboBuJ8MuGHc.roa
File:                     LFyv8YCz6RmNPeeUboBuJ8MuGHc.roa (raw, json)
Hash identifier:          WgKyUVzSzHKoer0O1JbqXyrMGKUsPdm5olj57FzQnXY=
Subject key identifier:   2C:5C:AF:F1:80:B3:E9:19:8D:3D:E7:94:6E:80:6E:27:C3:2E:18:77
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       01856FF9774701C1428642518B94721824E6
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/LFyv8YCz6RmNPeeUboBuJ8MuGHc.roa
Signing time:             Mon 02 Jan 2023 00:54:57 +0000
ROA not before:           Mon 02 Jan 2023 00:54:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51374
IP address blocks:        88.203.189.0/24 maxlen: 24
                          88.203.187.0/24 maxlen: 24
                          88.203.190.0/24 maxlen: 24
                          88.203.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f9:77:47:01:c1:42:86:42:51:8b:94:72:18:24:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Jan  2 00:54:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2c5caff180b3e9198d3de7946e806e27c32e1877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c8:54:ec:dd:b7:de:8a:71:4e:a9:ba:64:d1:
                    10:00:77:4a:a2:54:2e:26:19:53:a5:da:88:c4:06:
                    f3:51:ea:8f:af:59:6b:ea:0a:bd:60:3f:a0:54:38:
                    f7:92:07:09:47:c2:b4:4f:0d:57:d8:c7:96:b2:7e:
                    4d:01:b3:04:0a:e4:e3:1d:50:99:0c:47:e3:78:4c:
                    7b:88:76:66:23:8a:bb:e1:3e:c8:e9:fe:67:25:60:
                    f6:6c:06:5e:e1:bc:04:59:05:d8:ca:b4:11:45:62:
                    66:73:44:e2:1f:24:aa:bc:04:c4:73:22:34:1a:89:
                    05:cc:6f:c8:81:c0:4d:8f:06:8a:0d:7b:c3:42:3f:
                    41:b7:d1:a0:5e:91:cc:48:db:9d:1d:23:62:68:96:
                    7c:57:b1:0c:e3:4c:7a:d0:04:9e:a5:e4:06:af:b1:
                    c0:f5:af:e7:74:02:c3:7a:89:d0:e7:f4:79:e2:c6:
                    2f:61:26:9f:06:bb:e5:ae:2d:22:e4:d4:a8:b8:75:
                    c4:9f:6a:bf:9b:06:db:79:52:bb:0e:e1:fc:be:77:
                    44:ba:78:f7:15:dd:c2:b5:36:bb:1f:93:1f:84:e0:
                    96:f7:c3:ec:ed:13:56:fa:7e:04:a4:e3:82:ce:60:
                    08:7b:e0:cb:da:57:48:88:3c:0d:59:13:a4:e5:b6:
                    b5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5C:AF:F1:80:B3:E9:19:8D:3D:E7:94:6E:80:6E:27:C3:2E:18:77
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/LFyv8YCz6RmNPeeUboBuJ8MuGHc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.203.187.0-88.203.190.255

    Signature Algorithm: sha256WithRSAEncryption
         01:0a:39:fe:ef:94:90:3b:31:bc:ab:6a:0e:f6:f9:e3:36:3f:
         cf:71:d5:ac:ff:ef:2f:60:36:31:25:99:f4:57:90:ef:7e:d4:
         7d:a7:db:3e:f8:9e:85:3e:01:f3:64:2f:ba:16:4b:0a:55:1a:
         8a:19:3e:88:ff:ab:f0:91:8f:ec:bc:6b:25:2f:8a:3e:af:78:
         ab:63:d7:60:6a:80:b4:e2:58:77:ed:03:c3:58:16:4f:88:e2:
         ce:f4:aa:47:d1:75:b1:35:f3:df:9d:60:06:10:c6:8f:e2:ce:
         9f:46:ec:af:0d:dd:39:dd:0c:0f:39:2d:0f:0a:64:74:4b:6d:
         40:4a:19:f2:a5:e6:44:11:f4:27:91:7d:e5:f8:0d:1e:e9:7d:
         0d:ab:df:29:37:53:4f:43:9a:d4:a2:4c:6e:39:f9:36:98:6b:
         f5:08:a4:e6:af:6e:02:cd:20:c9:5c:4f:97:94:98:06:d0:04:
         9a:0d:96:4a:f9:82:25:36:f1:8f:9f:85:09:b7:17:f3:cd:b7:
         9d:01:b8:c3:46:21:3c:80:8e:1b:8f:c2:43:34:26:97:83:d7:
         b1:7f:29:eb:ef:5d:1f:31:c0:ae:93:bf:c7:ef:c2:1a:04:81:
         c6:fe:ca:6c:9b:6a:b1:08:56:bc:31:30:19:de:dc:94:99:48:
         62:27:3a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:51 2024 by rpki-client on console-ams.rpki-client.org