Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/DX1SIRJebDcBKt9jA5c5KdnRU0U.roa
File:                     DX1SIRJebDcBKt9jA5c5KdnRU0U.roa (raw, json)
Hash identifier:          H2w9b8tINy7XTgyOjU7vqhHZlUL225ixe18Dqrz9byw=
Subject key identifier:   0D:7D:52:21:12:5E:6C:37:01:2A:DF:63:03:97:39:29:D9:D1:53:45
Certificate issuer:       /CN=fd261d45319e8375187436da44bf5b9adb044a7f
Certificate serial:       0185E9CD701CA8F2AFF87C45A6AF74B9BCD4
Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/DX1SIRJebDcBKt9jA5c5KdnRU0U.roa
Signing time:             Wed 25 Jan 2023 16:40:32 +0000
ROA not before:           Wed 25 Jan 2023 16:40:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207733
IP address blocks:        178.250.134.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e9:cd:70:1c:a8:f2:af:f8:7c:45:a6:af:74:b9:bc:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f
        Validity
            Not Before: Jan 25 16:40:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0d7d5221125e6c37012adf6303973929d9d15345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:c1:4f:5e:4a:fc:d7:a1:0e:68:99:d0:96:
                    f8:6f:03:ae:fc:0d:1e:85:71:1b:a8:b2:50:a8:d9:
                    39:ff:55:b4:03:d2:10:ed:85:b9:69:65:10:96:51:
                    b4:3f:29:a5:03:0d:d5:e1:7c:6f:b7:45:09:90:97:
                    18:35:ef:bd:3f:70:ab:d5:56:ec:0a:e1:dc:be:6c:
                    41:70:36:62:06:9e:d5:a4:d8:95:8b:ef:7d:39:75:
                    5c:59:33:e0:6b:20:ed:a5:e7:f5:72:69:36:7f:1d:
                    10:09:72:53:82:6e:cc:fe:c4:dd:86:99:2e:4c:e5:
                    a0:8f:9a:e7:1d:73:a4:bf:14:e8:ce:8f:f0:46:99:
                    38:d8:c0:c7:37:bf:6d:c6:e8:86:49:34:f7:99:4b:
                    3b:74:a8:30:dd:58:92:00:83:a7:a1:1b:e6:6b:68:
                    2b:05:4f:02:dd:8e:fb:b1:15:cc:0f:36:22:5a:5d:
                    52:39:7d:46:12:1a:71:b0:d7:81:f1:27:65:96:a9:
                    b0:e1:1e:fd:34:b3:ef:43:57:f2:f3:c9:5f:1a:bc:
                    a1:fb:25:fc:6a:4f:8d:ae:29:0a:44:4b:9c:70:1c:
                    53:ce:0f:e6:4e:43:93:bf:be:30:29:e9:45:2f:73:
                    41:06:71:ef:b2:8a:60:94:e6:19:59:31:e7:ef:93:
                    9a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7D:52:21:12:5E:6C:37:01:2A:DF:63:03:97:39:29:D9:D1:53:45
            X509v3 Authority Key Identifier:
                keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/DX1SIRJebDcBKt9jA5c5KdnRU0U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.250.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:bb:33:97:18:8f:46:d7:69:00:c4:b8:27:3a:e6:59:bb:c5:
         88:e7:68:a4:89:ae:02:a0:4b:41:17:de:a6:50:c1:fe:a3:4b:
         a6:7e:f1:fc:c3:83:36:c6:fc:96:2e:13:f9:b5:e6:32:1c:f7:
         8e:24:c6:ff:3b:f3:43:c8:4d:b8:4f:b2:28:c8:14:09:94:c5:
         65:9a:be:08:ba:97:25:17:16:86:f1:95:0f:d0:ed:4d:31:ba:
         d5:fd:80:c4:48:6a:6f:56:e5:9d:77:32:b7:87:2c:49:94:2e:
         d2:dc:79:74:5d:cf:8e:69:86:c9:f2:12:62:e7:06:8e:df:ca:
         67:9b:99:31:a9:d0:8b:c1:36:cf:f4:84:3b:40:98:d9:e1:06:
         39:92:7a:5f:19:94:5e:ff:e4:e4:35:78:a9:29:09:f2:c5:0f:
         a0:a4:c4:6b:bc:d0:af:0a:3a:ed:50:a0:d1:9c:fc:89:29:d7:
         6b:05:df:41:3f:86:09:e4:86:3c:ee:52:bd:f2:c8:91:9d:73:
         99:ad:6e:4b:e4:ba:63:ad:28:83:4b:a4:3b:07:28:27:91:dd:
         97:0f:26:c5:ac:e0:8d:2b:ce:6c:9b:6e:35:ac:ad:b6:cc:79:
         8e:79:29:e6:46:51:95:68:c3:42:0b:f8:ca:7b:91:7f:0e:fc:
         01:e1:1c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:10 2024 by rpki-client on console-fra.rpki-client.org