Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/o-50mI5CPfo3bdODyrtlprFePMY.roa
File:                     o-50mI5CPfo3bdODyrtlprFePMY.roa (raw, json)
Hash identifier:          JadHE/0CPhZpcVJ/yZSzeXZ17o40I6UoxUnmFDMT3IM=
Subject key identifier:   A3:EE:74:98:8E:42:3D:FA:37:6D:D3:83:CA:BB:65:A6:B1:5E:3C:C6
Certificate issuer:       /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial:       018732262989EB06DCFA2FA8FC31795306FF
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/o-50mI5CPfo3bdODyrtlprFePMY.roa
Signing time:             Thu 30 Mar 2023 10:52:54 +0000
ROA not before:           Thu 30 Mar 2023 10:52:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51082
IP address blocks:        185.177.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 13 Apr 2023 08:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:32:26:29:89:eb:06:dc:fa:2f:a8:fc:31:79:53:06:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
        Validity
            Not Before: Mar 30 10:52:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a3ee74988e423dfa376dd383cabb65a6b15e3cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:c8:b4:c1:65:b8:c9:76:b7:26:03:e7:c5:
                    ea:c0:ae:d2:f8:ae:1d:5b:ba:39:b7:b6:51:a7:c2:
                    0c:63:c2:2d:6c:af:ed:18:e5:ee:6d:34:05:1d:75:
                    52:49:55:16:c3:9a:f8:79:16:a4:01:0f:8c:41:8c:
                    a4:74:54:79:70:e7:01:32:91:98:45:79:ca:fa:89:
                    9f:19:71:31:c7:da:3a:56:93:c8:64:ff:52:fb:09:
                    ab:ca:96:9a:44:d6:14:f1:a5:2a:5e:57:0a:b4:5a:
                    a9:65:7f:93:b0:24:9e:2c:1f:2a:b1:0d:69:d6:62:
                    ac:16:42:f6:6f:02:c7:92:6d:0a:39:56:4e:c5:d8:
                    f9:9d:10:e9:34:9a:09:1d:47:e9:79:50:6e:ea:76:
                    a2:f9:90:ff:7e:ee:e2:3c:a5:17:c1:92:e4:12:55:
                    0e:d0:f0:3e:79:6d:7a:62:02:17:90:31:dd:18:2e:
                    d7:ac:f4:96:ff:a4:eb:db:ac:d2:e3:e3:f8:35:ed:
                    b0:26:6a:02:d9:a8:9f:d1:c0:a9:c7:c4:19:7e:d3:
                    2a:82:67:cb:06:16:ac:ab:0a:17:f8:fe:b1:33:6a:
                    49:e3:09:50:e5:44:94:54:d0:aa:b7:d2:2f:9f:c6:
                    18:54:48:cc:ef:a1:60:dd:41:d1:1f:ea:fa:bc:29:
                    0c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EE:74:98:8E:42:3D:FA:37:6D:D3:83:CA:BB:65:A6:B1:5E:3C:C6
            X509v3 Authority Key Identifier:
                keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/o-50mI5CPfo3bdODyrtlprFePMY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:bb:3e:fd:fe:10:51:d5:8c:29:44:81:61:0e:e8:54:37:6a:
         af:a6:a4:50:6f:6d:29:e6:01:75:f6:25:f5:ab:a9:84:7d:c7:
         a7:5a:8a:72:e8:10:6b:50:0e:a4:06:3e:bd:8c:8b:0a:08:26:
         2e:ec:b9:cc:38:09:96:89:00:04:ec:4e:e4:7f:c1:b2:6a:8e:
         77:90:a4:4c:6a:eb:8a:2a:ce:d8:0f:3e:05:10:4f:2d:b2:f0:
         a8:b0:11:69:49:ca:9f:e3:bf:6a:cc:de:62:f6:af:61:50:c0:
         17:9c:cd:4c:bd:06:ad:94:19:77:9a:1c:65:4f:5d:be:43:26:
         4b:7e:3d:6b:54:82:37:20:8f:26:51:b3:e0:74:f2:82:d5:14:
         f7:72:f8:e2:d1:55:d7:4a:ed:39:53:d3:8a:94:b1:b8:78:3a:
         d7:8c:58:e9:a4:5f:12:33:21:f0:57:19:55:19:3d:eb:e7:82:
         86:2c:bc:67:ce:d6:5e:50:ff:f1:2c:13:68:4d:6d:31:ca:ee:
         c7:30:52:30:50:44:96:f5:d2:98:61:a8:f3:c9:61:3d:95:e5:
         01:bf:74:11:47:a0:18:fb:62:88:4a:fd:5e:02:0d:42:ea:95:
         03:2c:61:07:03:2d:f7:12:30:a7:b4:58:71:c7:e1:aa:80:22:
         35:74:f8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:30 2024 by rpki-client on console-ams.rpki-client.org