Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/pIr8P0gIJNPnOIWxr5px_xLn9nQ.roa
File:                     pIr8P0gIJNPnOIWxr5px_xLn9nQ.roa (raw, json)
Hash identifier:          X2ueUXH+XSuhXUzjhkkVGZMo2gUbA+EBDYpMSmHEaEM=
Subject key identifier:   A4:8A:FC:3F:48:08:24:D3:E7:38:85:B1:AF:9A:71:FF:12:E7:F6:74
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       01856FF9895FBA979EAC8E16F6B08731F1A2
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/pIr8P0gIJNPnOIWxr5px_xLn9nQ.roa
Signing time:             Mon 02 Jan 2023 00:55:02 +0000
ROA not before:           Mon 02 Jan 2023 00:55:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202357
IP address blocks:        78.83.234.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f9:89:5f:ba:97:9e:ac:8e:16:f6:b0:87:31:f1:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Jan  2 00:55:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a48afc3f480824d3e73885b1af9a71ff12e7f674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:dc:4b:cc:02:6e:d7:55:0f:35:2b:8f:8f:a4:
                    65:d5:ad:27:a4:96:3f:7e:73:e3:ef:01:e4:c9:13:
                    d4:96:f1:81:60:00:99:6d:02:93:7d:a4:f4:52:3f:
                    9a:40:a0:75:39:63:ee:79:ab:b9:9a:de:96:48:ef:
                    23:d7:1c:14:a8:b7:92:a3:be:8a:c2:62:ea:4a:d1:
                    fe:94:a4:0b:ad:3a:cc:21:4c:a6:24:f9:51:0b:71:
                    02:bc:73:92:7a:0c:b8:78:6a:e8:64:05:cf:32:6c:
                    d4:5a:c7:cf:da:0c:1a:1a:f6:a6:c7:e6:84:42:1b:
                    aa:01:fc:8f:05:f3:3c:41:7b:cf:95:2e:f3:f2:06:
                    3b:37:31:b6:a5:82:e6:75:93:44:15:29:07:12:6d:
                    5f:d9:8f:a9:92:49:6c:b2:f6:62:a8:f3:e7:60:62:
                    19:90:46:6d:af:c0:ee:7a:18:a7:c0:be:28:6c:ee:
                    99:ad:6b:14:b1:49:6a:36:83:79:38:f3:8b:f3:68:
                    06:1e:25:59:ec:ab:ef:ba:5d:06:16:8a:9a:c5:31:
                    f9:90:98:2a:44:6a:aa:00:69:98:24:06:ea:27:25:
                    bd:1a:a5:12:0c:e2:fa:f6:49:29:40:cb:9a:41:14:
                    9a:43:ee:7f:6f:85:df:ab:01:25:86:a9:a8:e5:9c:
                    a8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8A:FC:3F:48:08:24:D3:E7:38:85:B1:AF:9A:71:FF:12:E7:F6:74
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/pIr8P0gIJNPnOIWxr5px_xLn9nQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.83.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:c2:1d:27:1b:73:c2:65:18:db:eb:04:ee:b9:ba:b1:cf:fd:
         1f:99:80:ff:9c:58:93:6a:73:b8:2d:fd:c7:07:b5:9c:64:d1:
         bd:ba:30:fc:9c:a5:80:17:a4:d7:27:b2:31:b5:cc:e6:2c:a7:
         c3:93:57:b1:1e:ba:b3:09:63:ff:52:4b:99:32:01:44:72:a9:
         ea:08:57:b5:ee:f0:d6:0e:76:56:e2:14:d8:b0:14:b4:d8:44:
         c8:5b:98:86:fb:36:57:e8:a6:7d:b1:e6:c4:c0:02:66:33:74:
         61:6b:40:27:fb:27:94:f1:37:61:c0:65:3b:13:0a:aa:4d:2a:
         99:d1:6f:d6:70:f3:53:b0:d8:8e:4a:bd:3e:34:d7:c5:74:a0:
         a6:7c:38:ec:61:48:e6:9c:99:dc:dc:e5:a8:fe:25:b1:9d:20:
         ae:c1:e0:d5:13:f5:3d:3b:94:4d:9f:1b:44:aa:36:82:48:21:
         62:cc:a9:4b:43:b5:e1:f7:8f:e2:da:b5:a3:b6:83:1a:35:c7:
         15:92:21:4f:56:53:64:41:6d:15:22:6c:ba:79:b1:01:87:96:
         ef:bb:1a:61:02:35:a1:97:66:8b:13:b2:68:36:07:b7:3e:f2:
         f0:58:26:26:f6:aa:43:41:c8:1e:bf:f5:25:f5:c4:01:de:5b:
         3b:39:97:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:53 2024 by rpki-client on console-ams.rpki-client.org