Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/V7vGTuNQWGpPztcy8uum-AIa8MM.roa
File:                     V7vGTuNQWGpPztcy8uum-AIa8MM.roa (raw, json)
Hash identifier:          e+71grWF+LaZFKMur9uXaToldts0BCtoJwNuNXa9Kjk=
Subject key identifier:   57:BB:C6:4E:E3:50:58:6A:4F:CE:D7:32:F2:EB:A6:F8:02:1A:F0:C3
Certificate issuer:       /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial:       018891689D4EE412803BFA702FFA7756125A
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/V7vGTuNQWGpPztcy8uum-AIa8MM.roa
Signing time:             Tue 06 Jun 2023 15:52:12 +0000
ROA not before:           Tue 06 Jun 2023 15:52:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207778
IP address blocks:        188.209.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 21 Jun 2023 14:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:91:68:9d:4e:e4:12:80:3b:fa:70:2f:fa:77:56:12:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
        Validity
            Not Before: Jun  6 15:52:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=57bbc64ee350586a4fced732f2eba6f8021af0c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:83:4e:fd:0c:9f:d9:b5:94:00:9d:1f:8e:b0:
                    a3:1b:11:7a:8a:91:05:e0:6b:7d:83:06:f8:c5:a5:
                    bf:f8:32:35:3b:dd:aa:13:b6:10:b9:80:89:01:0a:
                    96:50:22:67:3b:da:3c:e5:7f:2e:cf:8c:de:00:27:
                    cf:55:6d:81:6a:d9:aa:14:3f:20:58:13:c8:e3:70:
                    48:bb:cf:f4:93:28:5e:09:19:47:20:77:09:d7:f1:
                    3f:5a:98:80:7f:2b:09:72:c5:9f:c8:90:42:d5:64:
                    e6:57:eb:c3:7c:2f:b3:db:7f:3f:30:47:d0:a6:26:
                    2f:3c:43:4a:b7:9e:63:6c:bd:b9:d7:29:0e:a2:59:
                    4f:e6:63:fd:df:cc:47:27:7a:e2:5b:33:8e:46:b8:
                    07:50:ff:6a:5a:4e:c0:f6:56:a9:44:f2:e9:b1:7a:
                    54:93:3d:b5:e9:20:08:c1:a8:aa:3a:07:25:61:3f:
                    4c:6d:35:86:dd:50:89:74:d7:24:63:87:a6:da:ca:
                    6e:af:f0:94:7c:7e:da:6d:dd:43:aa:64:51:54:c6:
                    c8:89:ce:cd:21:80:65:9c:b2:fe:29:9f:3c:71:6d:
                    58:26:47:2f:be:e3:48:bc:9a:a1:d5:ed:bc:95:9b:
                    0a:40:cd:0f:db:f7:68:08:53:a8:e8:02:17:4c:21:
                    b5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BB:C6:4E:E3:50:58:6A:4F:CE:D7:32:F2:EB:A6:F8:02:1A:F0:C3
            X509v3 Authority Key Identifier:
                keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/V7vGTuNQWGpPztcy8uum-AIa8MM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.209.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:3c:eb:48:39:a0:67:7a:cd:af:d7:38:7f:5a:8f:12:d0:ad:
         7a:b9:a5:92:14:e9:d0:46:97:67:45:11:46:89:1f:7d:ff:9b:
         b8:2d:65:93:e8:7f:8f:11:0c:58:21:ee:23:6a:7f:14:2a:c8:
         58:21:4d:f8:e6:46:f5:86:ef:ff:89:e0:0e:3d:81:cd:a5:f9:
         d6:47:78:0b:35:8c:2a:0a:79:63:ad:fd:61:24:06:08:b2:97:
         63:28:5f:bd:83:1c:56:86:ec:61:7e:a3:2d:54:48:f0:1d:8e:
         bb:21:d6:dc:b8:ec:fb:bb:86:47:aa:01:b5:75:4f:ae:fa:bf:
         27:32:ee:54:45:1e:b7:f1:1b:e9:c9:78:dd:0c:ec:47:73:9c:
         3e:d2:8f:59:59:07:ba:14:02:cf:f4:66:49:e6:4a:b0:20:d3:
         dd:8b:2e:b6:e0:76:ef:9c:27:11:6b:b4:99:96:a7:32:cf:9e:
         5e:04:88:29:c4:3a:10:34:9d:25:81:d9:a9:17:89:ec:39:2f:
         be:e7:18:18:2a:d9:86:6e:b8:95:15:57:80:25:ba:82:23:70:
         58:a8:98:e8:70:75:62:cb:48:ec:6f:6d:62:e5:e1:e0:a5:de:
         35:98:a4:ce:c0:31:dc:ab:31:cd:75:45:fa:70:5b:61:d1:a7:
         8e:9b:9e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:11 2024 by rpki-client on console-ams.rpki-client.org