Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/PPYV-OudrKZpoWdhAh90MUh6YwA.roa
File:                     PPYV-OudrKZpoWdhAh90MUh6YwA.roa (raw, json)
Hash identifier:          bi4ghM5EZMwDErB0nsyfUUK2VAEAR523WBpEV7Jpxow=
Subject key identifier:   3C:F6:15:F8:EB:9D:AC:A6:69:A1:67:61:02:1F:74:31:48:7A:63:00
Certificate issuer:       /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial:       0187107EEEC40E450DCB3D722BC5C43CD4D5
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/PPYV-OudrKZpoWdhAh90MUh6YwA.roa
Signing time:             Thu 23 Mar 2023 22:02:46 +0000
ROA not before:           Thu 23 Mar 2023 22:02:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209500
IP address blocks:        185.130.56.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:10:7e:ee:c4:0e:45:0d:cb:3d:72:2b:c5:c4:3c:d4:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
        Validity
            Not Before: Mar 23 22:02:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3cf615f8eb9daca669a16761021f7431487a6300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:32:70:58:82:b5:d0:fd:67:cd:0f:86:3f:20:
                    8e:8f:bf:ad:58:2a:8c:ea:37:04:11:69:da:d2:2f:
                    a8:f5:32:96:20:62:19:11:ad:e4:16:f8:53:db:0a:
                    37:c2:ed:5c:06:15:2b:b0:4c:b4:dc:42:b4:b9:da:
                    d0:c0:95:c2:cb:39:72:a4:47:4c:c1:98:00:61:53:
                    cd:9e:8c:12:7d:f8:0e:01:ea:4a:13:b9:1a:6f:c4:
                    a8:96:40:05:5c:1b:94:a2:ab:6e:29:a5:75:87:bc:
                    58:a8:a0:f7:72:27:26:3c:61:c1:e3:78:99:03:9b:
                    4e:f3:83:46:e9:e9:47:5d:71:c3:43:22:20:9e:79:
                    60:f5:a9:ed:96:ec:67:b5:f1:90:9c:8f:4f:37:6c:
                    3c:4d:9f:93:45:9f:d3:99:a7:13:43:5c:6e:f4:f1:
                    34:57:29:60:e0:02:0e:b3:a8:d8:4f:b5:0a:d4:e7:
                    73:32:4a:d3:71:04:50:6a:03:ee:be:3f:7a:a3:a7:
                    3e:56:23:08:23:a8:88:e4:9e:c9:10:3e:b3:cc:24:
                    4d:97:96:2a:46:e0:d6:69:6a:03:0f:da:02:46:49:
                    04:a7:6d:e3:d9:fe:01:67:26:09:fc:3d:5b:bf:2a:
                    12:cf:1f:01:0a:55:aa:58:9f:9c:e2:94:e7:f7:a4:
                    26:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F6:15:F8:EB:9D:AC:A6:69:A1:67:61:02:1F:74:31:48:7A:63:00
            X509v3 Authority Key Identifier:
                keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/PPYV-OudrKZpoWdhAh90MUh6YwA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.130.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:e2:b7:49:e7:ce:ba:38:09:be:18:b7:f4:1a:aa:6e:6d:04:
         20:e4:85:fd:b5:dc:34:0f:f5:67:b5:ab:08:f9:9b:d1:dd:97:
         44:7f:a4:1c:03:67:f7:a4:c3:2b:fe:f5:a6:a5:97:2e:08:1e:
         c1:36:02:49:76:b3:8c:42:36:52:64:a8:15:70:bf:05:c4:fa:
         7d:a1:c1:41:44:63:26:5a:8d:ec:84:12:ca:c6:9c:93:6a:93:
         00:70:7c:2e:c3:89:fd:76:55:86:b8:50:58:e6:19:41:77:ef:
         f5:ca:2c:7b:ae:e9:16:ac:1b:3f:23:f8:07:8d:90:38:20:79:
         8e:68:16:3a:3b:0c:86:6d:38:78:51:6d:42:74:ea:80:88:ee:
         eb:bd:81:af:7a:85:f9:8f:7c:2d:a2:1c:f4:6d:fd:46:96:0b:
         50:7f:81:aa:d3:2f:a9:b0:39:ba:f0:47:1e:b2:ee:47:94:eb:
         90:9c:ad:05:e7:5c:31:6d:4f:7c:43:ff:51:a0:5b:16:c6:d7:
         36:67:88:0f:ea:97:ca:a4:6d:70:5b:a3:c5:6e:ad:a7:a9:86:
         9d:63:6f:46:27:4c:5c:49:fd:e6:6f:7d:ea:f2:ff:60:db:c0:
         54:8b:87:4b:af:7a:a4:8a:e8:d7:c3:b1:bf:70:47:62:f8:ba:
         27:27:fb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:20 2024 by rpki-client on console-fra.rpki-client.org