Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/UalSsRK-qVDonOYjWPKXbkJ6f44.roa
File:                     UalSsRK-qVDonOYjWPKXbkJ6f44.roa (raw, json)
Hash identifier:          BkAjNv0SbxxpP3nBs4UP3mr2CIo524g2e5zqZyedaGc=
Subject key identifier:   51:A9:52:B1:12:BE:A9:50:E8:9C:E6:23:58:F2:97:6E:42:7A:7F:8E
Certificate issuer:       /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial:       01856C25E99EAAB658D43811BBD04DE1ED51
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/UalSsRK-qVDonOYjWPKXbkJ6f44.roa
Signing time:             Sun 01 Jan 2023 07:05:01 +0000
ROA not before:           Sun 01 Jan 2023 07:05:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61003
IP address blocks:        185.39.51.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:29:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:25:e9:9e:aa:b6:58:d4:38:11:bb:d0:4d:e1:ed:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
        Validity
            Not Before: Jan  1 07:05:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=51a952b112bea950e89ce62358f2976e427a7f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d5:00:d9:0a:75:ad:a6:88:30:b4:ac:93:90:
                    b0:99:aa:9a:39:59:07:45:da:b7:65:08:30:89:34:
                    d7:10:68:f7:54:b9:f1:b8:09:db:b1:04:0e:6f:32:
                    3a:c4:68:08:f3:72:5c:f8:70:5d:ae:f9:63:77:62:
                    3d:31:d5:eb:27:27:25:7f:3d:9f:b3:de:33:b3:87:
                    f6:e3:16:33:cd:ae:df:d4:07:ba:c4:55:61:8c:ef:
                    43:be:d5:6f:7b:3a:91:3e:37:55:05:bb:36:05:3e:
                    59:e8:7c:0c:88:a6:51:25:bc:4c:18:e8:2a:41:cf:
                    b6:e0:a9:fb:9d:72:74:c4:00:81:51:5f:35:57:79:
                    34:36:05:34:7f:c4:f0:be:41:43:da:a1:d3:56:18:
                    51:97:54:b8:b0:bd:5e:0d:d8:4a:74:60:a2:ea:63:
                    87:0b:36:aa:21:cb:fb:78:62:d1:c9:fb:bb:6e:a4:
                    11:e2:1c:ba:55:6a:cd:aa:1d:0d:d8:11:b7:b8:9f:
                    13:6c:b9:01:ff:7d:94:8c:e3:19:3d:0b:9e:4f:7d:
                    3f:81:a9:af:3c:47:29:15:1a:ed:60:9f:f2:da:b0:
                    1a:5b:6d:ec:e4:8a:19:dc:6c:c0:9a:1a:42:fb:96:
                    3d:03:16:36:67:a9:7a:d0:da:4f:f9:9e:12:f7:96:
                    fd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A9:52:B1:12:BE:A9:50:E8:9C:E6:23:58:F2:97:6E:42:7A:7F:8E
            X509v3 Authority Key Identifier:
                keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/UalSsRK-qVDonOYjWPKXbkJ6f44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.39.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:e9:22:67:78:99:31:c6:e7:d8:8b:44:8a:f6:25:6e:b3:d4:
         92:7e:48:db:16:7d:04:39:74:a2:b6:15:d3:fa:62:c3:ea:35:
         f4:4d:fb:52:b3:b3:33:6c:6b:03:1e:57:59:47:66:fa:97:7f:
         b0:48:66:b6:e4:c7:6e:2b:42:d5:3f:68:7b:5d:1b:08:c2:65:
         ce:5f:97:2b:b9:1e:f2:09:0e:b0:49:f2:36:a9:69:1b:21:bf:
         d2:da:7c:af:fd:15:ee:02:9c:33:4e:28:38:b5:c3:b5:e2:ac:
         6e:07:ba:45:13:9a:44:16:73:e0:bf:bb:98:d3:db:88:02:04:
         d2:ea:26:74:25:14:04:aa:82:47:3d:7c:66:73:35:39:c9:bb:
         ce:74:a6:63:30:04:b4:ca:1a:ec:4d:a5:83:52:88:a9:62:3e:
         8d:15:13:4b:a6:4f:61:0f:b9:92:58:21:cc:f5:31:3f:7d:96:
         28:7a:82:d1:81:03:e4:9e:1d:27:b6:e8:0c:31:ac:1a:8e:56:
         89:61:3c:90:b5:76:3f:49:6d:db:e7:29:b4:e3:ea:84:ff:ff:
         40:ec:a0:17:f8:88:da:eb:5f:ce:71:51:84:f4:94:d9:e8:3c:
         07:d0:57:63:f3:24:24:57:0d:7b:40:e0:d6:21:ef:28:2c:39:
         7c:6d:cc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:07 2024 by rpki-client on console-ams.rpki-client.org