Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/RPiVMVxfVTUBhO-P5VQ6ycbSRI8.roa
File:                     RPiVMVxfVTUBhO-P5VQ6ycbSRI8.roa (raw, json)
Hash identifier:          7Q7eeUhgR/CnXt4fn+0Sg6jljNTemWV2IxhrCrVHDXQ=
Subject key identifier:   44:F8:95:31:5C:5F:55:35:01:84:EF:8F:E5:54:3A:C9:C6:D2:44:8F
Certificate issuer:       /CN=186590ee4a796301c422e033f944d263d6adeebc
Certificate serial:       01856D6F761595C2EADF5D1E245A48A90A9B
Authority key identifier: 18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/RPiVMVxfVTUBhO-P5VQ6ycbSRI8.roa
Signing time:             Sun 01 Jan 2023 13:04:59 +0000
ROA not before:           Sun 01 Jan 2023 13:04:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212536
IP address blocks:        194.8.74.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:6f:76:15:95:c2:ea:df:5d:1e:24:5a:48:a9:0a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186590ee4a796301c422e033f944d263d6adeebc
        Validity
            Not Before: Jan  1 13:04:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=44f895315c5f55350184ef8fe5543ac9c6d2448f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:07:07:0b:e6:3e:2d:b6:9f:79:ac:2c:52:
                    53:43:71:e6:dd:f6:76:25:d4:d2:0b:37:63:ad:df:
                    bc:10:eb:b4:4d:32:a2:ca:8f:1d:52:bf:4d:27:c9:
                    b3:12:1e:0c:33:95:fc:74:34:eb:30:b1:49:d1:ef:
                    01:76:5b:da:bc:33:ca:ff:2c:ca:f5:4b:28:74:d3:
                    1d:d9:b4:a9:75:ab:90:6b:88:eb:23:2f:f8:d0:a4:
                    4d:47:08:45:05:56:53:cd:c9:17:6b:f3:ff:d0:3f:
                    b5:8e:71:35:32:f0:96:7c:15:98:b1:39:a5:b5:bf:
                    7c:32:db:fd:b0:7c:5d:d0:6e:d4:ed:03:2e:65:55:
                    58:98:c2:02:93:84:45:de:30:09:ff:1c:2e:2e:32:
                    f8:3f:fc:17:1e:88:58:75:a7:3d:d2:54:13:a8:de:
                    2d:02:67:ec:23:01:33:7b:0f:d4:a3:c9:9b:01:d0:
                    fd:fe:ce:4e:4c:52:a4:07:a9:47:53:b9:c8:5d:19:
                    f4:7c:58:dc:f2:75:a3:06:93:87:78:5a:12:74:72:
                    01:18:45:9b:ab:83:c8:a6:86:fe:36:e1:88:da:b1:
                    6c:39:67:64:c7:40:22:d1:0f:14:f7:b3:18:7c:ba:
                    63:f5:57:fb:b0:a1:37:f1:fc:95:67:c8:4a:bf:b8:
                    2f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F8:95:31:5C:5F:55:35:01:84:EF:8F:E5:54:3A:C9:C6:D2:44:8F
            X509v3 Authority Key Identifier:
                keyid:18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/RPiVMVxfVTUBhO-P5VQ6ycbSRI8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.8.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:94:14:ba:e3:3d:ab:91:ba:83:64:c1:56:90:03:79:bc:e2:
         34:1e:46:2e:40:e9:49:88:69:7c:fe:c6:0d:f7:ac:df:29:d5:
         d9:e0:17:e9:54:b1:08:3e:90:b1:51:4a:55:11:9e:f5:3c:a3:
         44:41:74:e3:43:67:e1:70:2f:99:28:77:69:85:a8:dd:7c:c9:
         65:cc:34:1d:af:7f:f6:fb:97:6e:78:09:29:6e:b2:22:fc:35:
         6b:19:5b:9c:15:6a:d3:6f:e0:09:2b:9e:7b:db:11:da:13:c5:
         7f:6e:17:80:1d:18:61:6a:a6:20:73:e1:22:09:33:34:4c:3c:
         1a:c1:e6:dd:09:60:ce:f7:1f:18:39:c7:8d:39:d8:ef:fb:25:
         36:a1:b7:6c:fa:f8:41:79:13:46:13:50:f0:b8:88:8b:bc:75:
         9c:04:e9:54:20:2e:68:53:cc:e3:98:b4:25:f8:a1:e7:f5:fb:
         51:ec:39:97:bd:77:d7:51:f6:74:87:07:87:25:af:28:bb:d4:
         86:db:66:ba:5e:72:30:ed:bd:14:dc:fb:a7:b0:4a:ee:ed:bc:
         94:7c:29:7c:d4:b4:cd:da:d2:89:bd:46:b9:cf:53:9d:5d:2f:
         2f:60:d6:d5:e5:56:27:05:74:5b:9b:d9:76:62:b9:28:17:67:
         3c:80:6e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:52 2024 by rpki-client on console-ams.rpki-client.org