Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9NLcNhdIG_u-ZKKobKG07h8ZIG4.roa
File:                     9NLcNhdIG_u-ZKKobKG07h8ZIG4.roa (raw, json)
Hash identifier:          ELuE7t3FwAua3OPuugvich89B13wzN/exk/beC4JRig=
Subject key identifier:   F4:D2:DC:36:17:48:1B:FB:BE:64:A2:A8:6C:A1:B4:EE:1F:19:20:6E
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       018C821643338CD971385C2F436A184A1019
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9NLcNhdIG_u-ZKKobKG07h8ZIG4.roa
Signing time:             Tue 19 Dec 2023 12:39:06 +0000
ROA not before:           Tue 19 Dec 2023 12:39:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42790
IP address blocks:        81.181.131.0/24 maxlen: 24
                          193.231.197.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:82:16:43:33:8c:d9:71:38:5c:2f:43:6a:18:4a:10:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Dec 19 12:39:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f4d2dc3617481bfbbe64a2a86ca1b4ee1f19206e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:07:44:e9:4b:aa:da:ba:50:47:20:f6:c7:b2:
                    d5:62:b0:ce:c2:af:ea:c6:6a:2f:15:d3:8e:3b:4f:
                    eb:11:71:09:94:31:a9:36:8f:66:4b:05:e6:32:2b:
                    55:0c:a8:03:d2:91:04:d1:e1:84:5b:92:d1:c8:35:
                    60:b7:0e:fe:09:2e:9e:bc:b3:de:e2:14:86:1f:c3:
                    5d:0d:e3:d4:39:97:b8:d6:4d:2f:45:38:7b:c9:73:
                    62:6b:4d:2c:3a:ad:13:cf:70:50:82:c4:8a:27:af:
                    46:b5:88:41:36:f3:6c:d4:70:cb:a1:e3:69:5a:67:
                    26:e9:06:df:4a:6f:df:6e:18:f7:ab:40:3c:b0:71:
                    78:69:35:7e:13:20:18:75:10:71:42:6b:d8:40:c9:
                    8d:5d:f3:10:24:90:ed:9a:6c:e5:4d:43:1c:f0:80:
                    e6:44:fc:9a:82:0e:54:cf:fc:75:a0:51:51:21:48:
                    35:62:3c:ab:c9:b5:cb:c0:68:3d:2e:c4:bc:01:44:
                    b5:2c:4d:97:fd:22:b9:b9:71:95:67:98:40:c2:be:
                    88:22:70:80:3e:2c:4d:e1:16:25:2f:01:bb:53:a2:
                    62:52:81:28:e6:48:d7:9f:ce:19:1c:8e:fe:6b:fc:
                    60:9e:23:1f:f7:09:0a:7c:e3:e6:33:c0:7f:22:95:
                    88:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D2:DC:36:17:48:1B:FB:BE:64:A2:A8:6C:A1:B4:EE:1F:19:20:6E
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9NLcNhdIG_u-ZKKobKG07h8ZIG4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.181.131.0/24
                  193.231.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:21:a2:23:46:b9:d6:46:89:de:18:bf:eb:f6:87:ad:3f:d6:
         1e:f2:d9:25:c5:02:fa:45:17:c3:23:da:77:ae:cd:d4:5e:75:
         ba:55:a6:0f:45:a4:ca:67:a1:f8:57:a2:90:49:26:48:84:55:
         5b:9b:63:97:0a:66:83:b3:2f:21:58:ab:aa:e9:6c:d5:3d:3d:
         0f:e9:e3:59:c0:88:1e:88:e5:12:7c:00:88:8a:b5:d8:7c:b8:
         fa:4d:6e:22:4c:89:38:35:4a:2d:66:ed:1f:d6:9c:6b:7b:21:
         3b:a6:04:e2:8a:0d:e9:30:cb:7c:a2:12:0e:1e:90:f4:9a:a8:
         8d:4e:27:58:c8:0f:19:be:00:f2:e9:08:46:65:db:7d:d2:a4:
         8e:fa:1c:1f:c3:c0:21:15:92:16:6d:81:04:43:12:d0:fa:44:
         a8:c0:02:70:c3:a9:b0:e5:11:e0:7b:50:5a:e1:cf:10:5c:44:
         60:56:bc:72:28:20:48:5f:8f:d4:1c:7f:14:7a:95:cf:41:c2:
         87:25:5a:66:c7:51:d3:2f:dc:1f:3b:6f:76:e4:61:bb:2f:51:
         00:98:7f:8a:90:41:92:2a:f0:1b:73:93:f3:e0:90:18:54:9b:
         94:50:93:1a:0c:74:0e:0b:cb:ac:52:ec:65:c1:cc:5c:7e:29:
         98:92:2a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:04 2024 by rpki-client on console-ams.rpki-client.org