Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/tlV-VcpGRf9g8Y07omNMfOjirqo.roa
File:                     tlV-VcpGRf9g8Y07omNMfOjirqo.roa (raw, json)
Hash identifier:          m5l82Tuy4AePoDCDOW5i1arqaV2Obau1s3vSiMECvUk=
Subject key identifier:   B6:55:7E:55:CA:46:45:FF:60:F1:8D:3B:A2:63:4C:7C:E8:E2:AE:AA
Certificate issuer:       /CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
Certificate serial:       018871C406170D399FB434EED2C010091416
Authority key identifier: 02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/tlV-VcpGRf9g8Y07omNMfOjirqo.roa
Signing time:             Wed 31 May 2023 12:24:12 +0000
ROA not before:           Wed 31 May 2023 12:24:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207620
IP address blocks:        84.38.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 28 Jul 2023 11:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:71:c4:06:17:0d:39:9f:b4:34:ee:d2:c0:10:09:14:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
        Validity
            Not Before: May 31 12:24:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b6557e55ca4645ff60f18d3ba2634c7ce8e2aeaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:24:d9:a5:29:69:c1:0e:7c:28:23:1d:0b:99:
                    31:26:52:d1:69:8f:52:3b:c1:a1:c9:34:64:1a:07:
                    38:54:64:cd:31:c1:89:5e:85:64:1a:4c:29:83:f9:
                    da:83:5a:25:26:b7:1a:33:2b:ea:48:87:12:4e:44:
                    1d:70:9a:6c:bb:b1:f4:94:e1:c2:f7:e9:68:42:12:
                    05:fa:2e:ab:8d:4f:df:48:38:f7:86:74:23:7b:82:
                    2d:bb:c1:69:6c:7e:f5:10:66:52:13:2f:fd:d1:9b:
                    e6:c6:99:98:24:d9:c3:38:94:6a:f6:51:fc:d1:ed:
                    0e:b2:a6:cd:1b:bd:4b:1a:c9:14:74:35:b5:d4:15:
                    62:7b:15:48:46:09:40:77:1e:f2:d0:b5:2a:97:b6:
                    72:ff:28:6c:4e:bf:97:9a:7c:09:6a:19:f7:1c:4a:
                    67:0a:7e:0c:9a:8e:86:c9:33:8b:27:15:9e:40:ce:
                    88:42:7f:bb:e5:a1:ef:91:fd:fc:9d:5f:7f:1d:74:
                    56:d6:07:f9:32:53:46:86:25:01:3c:fb:68:d5:1b:
                    e2:0f:0a:85:98:5e:3c:9e:ec:d3:a0:1d:6a:8c:98:
                    a8:6e:22:3a:0d:2f:6e:90:31:1d:f0:db:5f:85:ca:
                    83:14:5a:9b:87:d3:0c:1b:fa:ab:b6:25:60:ce:83:
                    91:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:55:7E:55:CA:46:45:FF:60:F1:8D:3B:A2:63:4C:7C:E8:E2:AE:AA
            X509v3 Authority Key Identifier:
                keyid:02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/tlV-VcpGRf9g8Y07omNMfOjirqo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.38.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:6c:0a:79:cd:9e:b2:cb:45:2a:63:75:39:5f:43:97:85:0a:
         9e:b3:50:64:6f:48:7f:c3:58:56:2c:43:54:90:e2:19:c3:f7:
         74:43:17:c7:cf:7f:25:fc:95:e5:be:75:cd:f5:2d:87:ff:1d:
         5c:ea:f0:92:39:6e:d7:f3:f7:5a:38:6e:22:16:e0:bf:ae:7d:
         23:27:0b:a0:0f:7b:36:63:6f:b1:50:29:80:84:ef:0b:63:a3:
         34:23:37:46:6e:60:ba:11:be:11:a0:6a:ab:c9:4a:77:96:ee:
         b6:49:57:36:ad:f3:fd:d3:b6:5a:d1:a7:66:1b:46:6d:78:5b:
         33:07:57:a7:d5:2f:c5:3b:f9:8a:fa:db:2d:7b:9b:23:23:de:
         c7:cf:60:7e:f3:57:9b:44:03:62:13:a0:c3:95:8c:74:09:57:
         b2:2b:b2:bd:07:2a:5f:84:8d:83:3f:a3:09:5d:10:89:44:94:
         15:24:3c:dc:11:06:68:e4:14:56:f9:92:5b:64:f2:5c:54:1f:
         6f:7b:ee:e1:c5:4f:d0:e7:5f:ef:ec:a3:d6:da:00:de:0d:be:
         03:4e:d9:3c:81:c6:3a:27:a9:8c:b9:ca:52:0b:07:2a:f3:0f:
         0d:4d:37:03:74:87:eb:6e:0e:f4:e1:47:ce:ed:c4:4d:29:47:
         c4:da:6d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:53 2024 by rpki-client on console-fra.rpki-client.org