Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/uEwEo--magX1By5jLH6jEg0eQ9w.roa
File:                     uEwEo--magX1By5jLH6jEg0eQ9w.roa (raw, json)
Hash identifier:          VVAB7z1E5whfwVxqxoCRsWNpGp5z//VwU3HgDuSuMSw=
Subject key identifier:   B8:4C:04:A3:EF:A6:6A:05:F5:07:2E:63:2C:7E:A3:12:0D:1E:43:DC
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       01857390092159EF4375046DD1A3D913DE7C
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/uEwEo--magX1By5jLH6jEg0eQ9w.roa
Signing time:             Mon 02 Jan 2023 17:38:17 +0000
ROA not before:           Mon 02 Jan 2023 17:38:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210715
IP address blocks:        78.108.218.0/24 maxlen: 24
                          193.31.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:90:09:21:59:ef:43:75:04:6d:d1:a3:d9:13:de:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  2 17:38:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b84c04a3efa66a05f5072e632c7ea3120d1e43dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:66:04:65:c6:14:7b:54:8f:29:74:78:9c:ab:
                    2d:86:2b:a0:2f:57:85:7d:61:fb:02:8c:26:b8:26:
                    ff:14:56:2f:31:70:7c:27:75:df:92:01:b3:74:b2:
                    68:3f:9e:cd:e1:2c:b7:fd:83:d7:09:80:8d:ef:c8:
                    a1:06:b7:e2:4a:57:94:6a:2f:16:19:aa:a6:34:a6:
                    f4:1e:d3:88:f6:2e:b4:59:07:3a:e2:22:df:2a:72:
                    76:0d:ac:e6:1a:8e:be:f7:50:4b:a2:c2:66:25:f3:
                    35:a8:88:b6:87:cd:68:72:94:ec:7e:d3:2f:ee:86:
                    cb:93:d4:48:df:57:6a:a3:27:c5:f4:81:9e:37:e1:
                    4b:c4:c3:dc:9c:31:0f:39:5b:13:08:48:1f:98:c1:
                    20:6e:c6:1f:ee:03:b1:59:b5:74:86:db:1b:26:82:
                    b9:86:02:f5:4e:58:02:2e:ab:25:c1:a4:59:bd:65:
                    d3:c3:1c:9e:0e:8d:6f:b6:67:10:89:71:54:8a:d0:
                    10:54:2d:9f:26:6a:07:d2:c3:b1:33:b5:02:93:9c:
                    9e:d2:74:cf:18:01:04:12:a0:d9:68:89:44:7f:d0:
                    62:76:39:04:71:58:1a:e4:33:0a:3d:d8:bb:9b:49:
                    14:d9:17:f0:42:c9:17:7f:32:2f:04:b4:08:71:09:
                    56:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4C:04:A3:EF:A6:6A:05:F5:07:2E:63:2C:7E:A3:12:0D:1E:43:DC
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/uEwEo--magX1By5jLH6jEg0eQ9w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.108.218.0/24
                  193.31.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:57:18:9b:e3:77:95:c9:e0:63:7f:6f:04:8d:9f:00:20:61:
         7e:5d:69:76:82:d5:c5:4c:78:73:0e:35:ff:ea:0c:56:9e:34:
         f4:8b:7c:14:8c:54:8f:af:5f:44:f6:ca:9f:67:d4:f6:dc:47:
         ef:c4:28:f0:37:a1:9e:56:35:a3:a8:fc:90:52:4c:71:0b:ba:
         69:6e:99:c4:94:9e:79:dd:f2:ca:e0:2b:9d:e6:54:95:f9:3e:
         bb:a6:aa:1e:26:39:cb:54:05:a4:a5:38:58:d7:47:14:4f:c2:
         99:1b:f3:20:1b:3c:cf:2b:a3:78:63:ef:64:64:c6:5f:32:97:
         02:47:7a:72:bc:8a:81:13:42:66:c8:49:7b:fe:a6:03:49:ae:
         29:39:cc:3f:b1:5a:46:30:ac:48:ea:85:5b:5e:d9:56:61:66:
         a0:b8:e5:54:c5:0d:97:48:0e:f7:30:b4:bd:d6:0b:a7:0f:26:
         d7:4a:47:4e:1f:6d:13:6b:09:c7:32:cb:2f:c9:a1:94:08:e7:
         0c:c0:1e:85:43:6d:3d:11:6c:d1:60:06:12:a7:c9:4d:a8:46:
         58:58:c1:48:bf:ab:77:d6:5f:5d:e6:ad:3e:4b:62:d5:b9:d9:
         23:3e:02:55:5a:95:da:86:a8:42:7a:33:a5:24:1c:34:1c:62:
         00:9b:9f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:40 2024 by rpki-client on console-ams.rpki-client.org