Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1Zdcv4qSSu5PWFORP2RfmqGHuOY.roa
File:                     1Zdcv4qSSu5PWFORP2RfmqGHuOY.roa (raw, json)
Hash identifier:          jOBOet04QI+5YoXTko9h7xaV5Zs1V3uw0Wev8Vg1Gcw=
Subject key identifier:   D5:97:5C:BF:8A:92:4A:EE:4F:58:53:91:3F:64:5F:9A:A1:87:B8:E6
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       018747120067576A15ACC6B64825C9983448
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1Zdcv4qSSu5PWFORP2RfmqGHuOY.roa
Signing time:             Mon 03 Apr 2023 12:22:54 +0000
ROA not before:           Mon 03 Apr 2023 12:22:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42831
IP address blocks:        194.56.226.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 23 Apr 2023 12:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:47:12:00:67:57:6a:15:ac:c6:b6:48:25:c9:98:34:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Apr  3 12:22:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d5975cbf8a924aee4f5853913f645f9aa187b8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b5:52:98:d7:6f:ff:b4:8f:9a:88:28:54:0b:
                    fb:db:86:ad:01:bd:f0:45:59:95:b0:33:1d:a7:75:
                    ea:94:88:a4:56:9c:96:b6:1e:af:f2:57:87:b9:31:
                    a0:fe:40:0e:a2:13:42:30:08:c6:a1:7f:8f:ec:ca:
                    83:f4:5b:9b:de:0a:19:1f:15:ed:52:28:e4:a7:69:
                    f2:43:1c:31:7c:22:22:59:f1:96:da:f9:53:6f:16:
                    db:80:3f:88:88:71:4e:52:c5:c3:2b:87:88:5b:00:
                    04:8b:c6:fe:e7:37:6a:da:9c:17:ef:bd:86:a3:c3:
                    c6:ba:e3:63:d1:36:c5:e4:7c:49:eb:d4:9d:2b:cb:
                    16:41:ae:a7:45:d2:4a:a6:15:b0:0e:9a:c8:c8:29:
                    b8:d9:21:d1:de:e8:e5:61:85:be:05:ea:f5:6f:51:
                    83:5b:33:c6:88:f0:de:c1:f6:c2:3d:6b:22:37:5d:
                    6c:ec:8e:de:9e:25:ca:37:65:71:5c:b9:59:e8:ff:
                    ce:24:b2:3c:d9:6a:dd:0c:30:5d:1b:fb:8b:8a:24:
                    79:92:c5:8f:69:2a:ca:96:ea:12:14:f1:a3:6d:b0:
                    55:73:ab:8c:b0:6f:62:fc:63:16:4b:05:0c:06:59:
                    e3:78:8e:f4:d5:44:2b:6a:d0:2a:65:a9:a1:ca:4c:
                    27:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:97:5C:BF:8A:92:4A:EE:4F:58:53:91:3F:64:5F:9A:A1:87:B8:E6
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1Zdcv4qSSu5PWFORP2RfmqGHuOY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.56.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:9e:8c:28:3b:b5:7a:4d:65:94:5f:ab:7a:2d:34:c0:90:94:
         2e:54:f0:66:37:df:bf:12:3a:60:e3:7a:8f:f4:52:88:71:9a:
         e8:91:a4:a8:08:8d:ed:fb:c5:76:41:a5:ca:61:4a:dc:cf:f2:
         54:e2:36:a7:02:70:76:4f:10:f1:31:f3:72:81:ba:9e:b7:32:
         21:ee:27:4e:b3:9d:2e:93:45:d4:be:01:c3:0d:71:b8:dc:ad:
         fc:82:12:f6:f8:d1:e2:30:1f:7a:d7:4e:18:ea:e4:a5:c4:7f:
         7d:f0:b8:09:0f:16:2a:34:fa:06:4c:40:a8:8f:04:a6:33:dc:
         c4:7c:de:75:e1:95:fe:32:e5:d4:a8:55:4c:8a:b7:7a:30:a9:
         54:76:66:40:c7:bc:c2:86:77:88:58:05:9c:c6:24:34:fe:9f:
         83:9c:70:8f:72:e0:46:84:73:60:8f:cb:e6:a8:fa:72:e6:73:
         4d:71:4e:7a:67:4d:ba:b4:23:ec:74:fc:00:b5:0a:6c:6f:9a:
         ec:3f:ba:14:b2:78:e3:e8:3b:81:b3:c7:da:fd:79:22:e4:72:
         c9:4a:72:4f:d2:4a:bc:b7:88:15:ca:ff:74:dc:4b:37:b4:25:
         ff:f5:48:20:4d:2c:50:9b:9a:4d:3e:ea:95:73:1d:c3:11:ab:
         47:af:74:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:39 2024 by rpki-client on console-ams.rpki-client.org