Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ZVrsjGTYAM_vrrkoqYpoTEXJ8TM.roa
File:                     ZVrsjGTYAM_vrrkoqYpoTEXJ8TM.roa (raw, json)
Hash identifier:          PhMOH2RuOYK0D8NAZKNj6pH4RwzuLdDHu7MmpyBWVFc=
Subject key identifier:   65:5A:EC:8C:64:D8:00:CF:EF:AE:B9:28:A9:8A:68:4C:45:C9:F1:33
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       018BB46B10725369953B7BE6A69B552BAD67
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ZVrsjGTYAM_vrrkoqYpoTEXJ8TM.roa
Signing time:             Thu 09 Nov 2023 14:09:57 +0000
ROA not before:           Thu 09 Nov 2023 14:09:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58052
IP address blocks:        194.15.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b4:6b:10:72:53:69:95:3b:7b:e6:a6:9b:55:2b:ad:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Nov  9 14:09:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=655aec8c64d800cfefaeb928a98a684c45c9f133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1d:ae:1e:85:ae:f9:8b:c0:fa:b8:7f:20:1c:
                    9c:22:0d:92:89:90:3a:36:0a:c9:39:2f:22:a2:36:
                    f0:ab:f3:4d:75:0f:ba:c5:e5:02:c8:aa:b4:74:52:
                    73:b3:6c:73:91:fd:41:73:d8:18:76:a3:90:1e:28:
                    b0:46:f0:01:86:4e:53:d5:2e:d2:87:1f:59:64:23:
                    e7:46:17:9c:92:e1:35:c6:ee:8b:a9:3c:da:41:d6:
                    24:5e:c1:5e:41:48:c4:2c:a4:5f:62:13:5e:cb:72:
                    a1:82:5b:21:bf:24:e3:a9:5f:0c:1a:9b:73:3b:5b:
                    93:d0:fa:7b:51:ec:45:d9:2e:87:a4:7f:bb:e4:50:
                    66:2a:d1:3b:9b:31:38:68:a8:36:71:73:8a:fc:e5:
                    03:28:6e:37:82:a2:27:5c:c9:48:b9:f5:61:bb:3b:
                    3f:97:7f:1c:7e:c4:29:0f:20:22:d9:80:0f:9c:b0:
                    0e:41:88:81:7d:a8:17:58:e0:6f:21:f3:d2:f7:1d:
                    67:9b:f9:84:24:3f:2c:96:62:41:56:98:d6:92:f3:
                    e7:43:79:fb:2f:7d:69:30:2e:fe:d0:b5:9b:e2:04:
                    89:10:0c:bf:9d:5c:79:36:7a:97:a1:94:74:84:79:
                    1f:e4:bf:0f:14:84:80:ea:96:0d:60:c8:c8:21:63:
                    f4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5A:EC:8C:64:D8:00:CF:EF:AE:B9:28:A9:8A:68:4C:45:C9:F1:33
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ZVrsjGTYAM_vrrkoqYpoTEXJ8TM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.15.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:94:1a:be:0d:0c:a5:0b:da:fa:1b:74:6a:c3:a8:2f:82:cb:
         a2:a7:54:8b:0a:99:40:61:3d:e6:bf:fd:32:9b:2f:85:26:37:
         34:22:43:89:21:c4:e4:ae:d3:cd:a6:b5:a3:b6:4f:f3:16:02:
         fe:41:97:f7:ce:2e:ea:7e:cf:45:86:30:e4:51:d2:5f:f8:66:
         7e:10:fe:40:35:6d:62:8c:ce:af:2a:49:1c:c2:bb:e1:bb:e5:
         97:bc:f3:ca:c8:0d:6b:11:8d:ea:8b:e7:f5:16:c7:0d:b4:64:
         7a:66:ae:82:69:65:08:82:64:69:92:fe:7d:97:54:24:74:2c:
         0c:34:a9:95:2a:cf:43:42:19:34:53:5d:19:2b:5b:f9:78:e7:
         ba:80:79:94:91:2b:6f:db:28:09:d5:bf:84:7f:ca:3d:ce:48:
         fe:81:21:13:be:ad:57:a6:10:75:28:22:5d:f3:54:ad:e6:f2:
         ea:10:7d:cb:c3:68:41:4c:63:11:01:de:ba:a6:45:bf:6a:04:
         3e:a6:eb:2d:f9:0b:d0:26:b8:88:b3:3b:61:5b:59:e5:61:d6:
         2c:ef:b1:8e:d4:55:2b:6d:00:40:8b:e7:da:66:59:b3:7e:de:
         e7:18:4e:79:01:f8:8a:3d:e8:63:80:41:b8:20:55:9e:54:4d:
         89:e7:71:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org