Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7dyvkjxa946DzMWfcXiwPFvzdA0.roa
File:                     7dyvkjxa946DzMWfcXiwPFvzdA0.roa (raw, json)
Hash identifier:          F/NNT0QvfbeZr1s6scs+9rgt/GGjBnrv8nSq2K0yjT0=
Subject key identifier:   ED:DC:AF:92:3C:5A:F7:8E:83:CC:C5:9F:71:78:B0:3C:5B:F3:74:0D
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       018B38107C2DCB205CE49C23A6DDC49FC027
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7dyvkjxa946DzMWfcXiwPFvzdA0.roa
Signing time:             Mon 16 Oct 2023 10:38:06 +0000
ROA not before:           Mon 16 Oct 2023 10:38:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205965
IP address blocks:        204.11.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 03 Nov 2023 10:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:38:10:7c:2d:cb:20:5c:e4:9c:23:a6:dd:c4:9f:c0:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Oct 16 10:38:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eddcaf923c5af78e83ccc59f7178b03c5bf3740d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:56:5c:b8:aa:44:be:98:06:0e:05:ad:f0:0c:
                    ee:4d:81:3e:a9:e8:b9:b3:b4:35:3a:54:71:9b:90:
                    6f:08:6c:1f:78:33:8f:40:0f:47:2b:cd:0b:2f:fc:
                    5d:88:44:52:e0:53:62:bd:c5:0e:ae:a0:d2:3e:57:
                    ac:2a:49:6c:2f:5c:3a:aa:fe:de:84:8a:86:ee:74:
                    f3:c3:d6:fb:b9:5f:f8:16:bb:8d:f3:6c:9b:26:39:
                    c6:be:87:0c:38:f2:c4:cf:be:01:03:30:fc:49:5e:
                    80:73:66:c1:72:a3:dc:8b:cf:0e:cb:ff:29:7a:14:
                    0c:c8:bc:d2:cd:76:0e:ce:6b:73:3c:04:3a:3f:bc:
                    09:4d:bf:15:e4:7c:9b:9f:4b:a3:ee:75:99:60:09:
                    ad:7b:43:fb:3f:11:ee:e9:ee:bf:5a:3c:d7:3b:40:
                    34:e0:f1:53:7e:1e:3b:da:23:70:4c:f6:3e:90:f1:
                    32:ec:75:7b:8d:88:dd:92:15:b1:de:5e:9c:e7:e3:
                    f2:06:db:d2:15:78:be:5e:cf:b8:60:7b:f0:0d:21:
                    ac:4e:cb:a1:9a:50:3e:0b:69:b5:3a:a6:e2:48:36:
                    6a:d3:82:46:3a:0f:01:10:e8:ed:05:38:dc:f5:6b:
                    ff:c5:e8:0f:b0:ae:d6:d7:3d:f4:b7:8f:08:c2:34:
                    e9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DC:AF:92:3C:5A:F7:8E:83:CC:C5:9F:71:78:B0:3C:5B:F3:74:0D
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7dyvkjxa946DzMWfcXiwPFvzdA0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.11.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:d7:63:b5:bc:d5:7a:97:9c:52:bb:e1:85:51:73:41:6e:43:
         57:a9:66:7b:fd:0c:61:49:de:d9:2c:89:06:8b:23:7c:3d:a3:
         f5:e4:45:98:bb:bf:b9:09:5d:49:a3:1c:d6:51:34:24:f9:36:
         e7:ae:a1:9d:e6:af:70:0e:da:e5:94:89:5a:db:eb:0b:e0:71:
         5e:4f:18:66:a2:1b:a1:c5:cc:db:04:3d:1a:a2:44:89:1b:1f:
         36:3c:a1:ba:ac:5c:3a:91:d4:18:18:c1:37:71:91:32:f8:3d:
         f3:90:82:ac:92:15:0b:c3:5e:a0:53:3e:1d:f9:8f:92:96:45:
         56:bc:96:a3:bc:7c:51:00:8f:42:53:58:69:f9:b2:d6:67:56:
         fa:8c:ff:9b:6d:5f:31:c9:20:16:5b:a0:c9:50:6c:a5:7a:58:
         5c:ad:71:5c:6a:d8:ce:83:61:d2:88:9c:f3:90:c3:37:40:03:
         cf:9d:ac:3f:bd:07:9b:b4:ab:40:64:61:f8:58:d6:11:88:d3:
         8f:20:be:a3:6b:46:41:91:95:ca:5d:de:13:8c:5f:7d:94:80:
         08:04:aa:ea:15:3a:23:4f:86:9d:07:24:31:50:4d:4c:5f:c8:
         9d:5d:fd:57:11:6a:ef:c0:b2:45:ab:2c:f7:90:09:32:7b:5f:
         23:fa:8b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org