Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/d1umJsP-t_YbjhFU_ra3poR874w.roa
File:                     d1umJsP-t_YbjhFU_ra3poR874w.roa (raw, json)
Hash identifier:          GQAPqDohRVlWEZ1kWXLpinkxs5TTaNn73fvCQyQeaNA=
Subject key identifier:   77:5B:A6:26:C3:FE:B7:F6:1B:8E:11:54:FE:B6:B7:A6:84:7C:EF:8C
Certificate issuer:       /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial:       018E19F17FEDD436A80479BD35AEA641721A
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/d1umJsP-t_YbjhFU_ra3poR874w.roa
Signing time:             Thu 07 Mar 2024 17:24:01 +0000
ROA not before:           Thu 07 Mar 2024 17:24:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     21267
IP address blocks:        195.26.32.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Mon 11 Mar 2024 16:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:19:f1:7f:ed:d4:36:a8:04:79:bd:35:ae:a6:41:72:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66df7742890173927935206a28efbf48123e787c
        Validity
            Not Before: Mar  7 17:24:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=775ba626c3feb7f61b8e1154feb6b7a6847cef8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ad:47:4b:73:35:a4:05:c2:ff:68:15:6e:bf:
                    da:c4:b0:31:c4:3a:34:28:a1:0a:b4:ae:be:74:0b:
                    2b:63:fb:1f:86:67:ae:84:2d:ac:1d:e7:96:29:00:
                    c5:18:19:07:bc:30:60:89:98:92:38:ce:af:67:ef:
                    f3:a2:68:82:0c:36:d3:1e:ee:84:f9:ca:17:4f:26:
                    93:60:da:f4:b8:55:a3:f1:a4:b3:22:3f:b7:4c:0a:
                    c4:72:92:c3:c6:00:fb:86:73:28:97:ec:84:37:c7:
                    d2:f1:2d:a0:00:8f:b1:e2:bb:0a:29:bb:fa:77:cc:
                    89:22:36:38:6c:a0:c8:5a:d9:5b:0c:67:cb:cf:8a:
                    65:15:57:d4:e0:f1:d8:c7:91:7a:07:3b:42:5e:c5:
                    7e:31:65:bf:16:c1:5c:05:a8:9a:c2:1f:30:78:71:
                    f7:cf:ec:ee:f0:9c:88:67:be:b3:14:e7:4e:fa:33:
                    81:c5:b8:f1:c9:85:55:93:54:93:17:e3:d8:d9:8c:
                    15:6f:66:2b:e5:6c:3d:50:32:23:19:05:3e:2a:be:
                    bc:9f:41:99:23:28:0d:b8:8c:f6:e1:05:cd:8e:ea:
                    00:c2:43:cd:7d:cf:1c:f8:c4:c7:65:f1:91:29:49:
                    e6:c8:c7:53:12:86:42:dc:5e:1c:c5:bd:f0:db:44:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5B:A6:26:C3:FE:B7:F6:1B:8E:11:54:FE:B6:B7:A6:84:7C:EF:8C
            X509v3 Authority Key Identifier:
                keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/d1umJsP-t_YbjhFU_ra3poR874w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.26.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6e:0f:8a:7f:75:60:ce:3f:e0:89:f0:de:cd:96:12:7f:0a:5b:
         97:6b:a8:5b:7a:e2:c0:cb:a5:64:79:89:2d:74:ef:df:11:a1:
         ff:fe:10:6a:2b:12:04:ca:77:8a:5f:6b:6e:c1:99:e5:19:17:
         a3:2c:d7:5b:29:a5:6e:71:82:f7:71:a5:97:00:05:72:11:f5:
         7f:c3:58:18:e5:a4:9a:e9:54:cb:c3:68:bc:70:1e:de:2f:fb:
         60:de:bf:2e:36:be:9b:db:1d:63:df:4f:40:27:b2:58:f7:78:
         34:95:25:38:87:d1:ca:3e:b6:fc:a9:1d:b4:22:88:ca:2d:1e:
         df:61:92:74:18:80:b3:17:60:49:c7:5d:0b:65:2e:cf:37:98:
         59:a0:cb:80:eb:12:87:64:9b:e4:b0:d4:6d:23:27:b7:b6:f8:
         a9:e6:61:f6:50:a6:99:8d:bd:23:90:80:2a:ff:a3:0a:c4:70:
         ce:61:84:cf:7f:fd:4c:82:80:c3:9a:73:e9:af:63:5f:1a:b8:
         1a:bc:73:ac:b7:b6:bd:7d:b7:dc:0a:ce:e6:21:d3:b4:bd:d1:
         c4:34:4e:8d:b5:a5:be:a6:dc:22:a7:b7:e5:ce:d1:e5:01:73:
         46:d6:b1:09:ab:2d:89:c2:4c:52:1e:65:a3:6b:49:db:b3:75:
         09:b7:53:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:14 2024 by rpki-client on console-fra.rpki-client.org