Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/VwdRePlDopY7vtWO_rEJOwFPl94.roa
File:                     VwdRePlDopY7vtWO_rEJOwFPl94.roa (raw, json)
Hash identifier:          zn1SUxK0kQIFXVlxgB7Vrw6NEyVYkwKhDTGhcDxl6Yg=
Subject key identifier:   57:07:51:78:F9:43:A2:96:3B:BE:D5:8E:FE:B1:09:3B:01:4F:97:DE
Certificate issuer:       /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial:       018CC94E061C43266EFDE193B743F8594800
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/VwdRePlDopY7vtWO_rEJOwFPl94.roa
Signing time:             Tue 02 Jan 2024 08:33:02 +0000
ROA not before:           Tue 02 Jan 2024 08:33:02 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206092
IP address blocks:        188.215.95.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Jul 2024 07:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4e:06:1c:43:26:6e:fd:e1:93:b7:43:f8:59:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
        Validity
            Not Before: Jan  2 08:33:02 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=57075178f943a2963bbed58efeb1093b014f97de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:09:4f:d6:58:4b:00:a3:9d:4a:0a:14:a5:39:
                    a5:8a:12:fe:0a:1f:9a:fd:d9:04:06:e8:a9:88:94:
                    69:92:01:3a:ae:2c:30:1d:3c:d9:56:f9:9b:4b:ca:
                    6e:4a:3c:83:56:18:dc:c4:2c:b7:ca:c2:31:9d:b3:
                    be:b3:72:10:b9:ff:9b:7c:71:be:4e:4e:02:7c:83:
                    40:59:a5:2a:1a:77:b9:b4:45:78:c5:ed:b1:5d:b4:
                    8a:d0:67:c6:4c:43:09:bd:1d:9b:b2:97:9a:9e:e6:
                    a8:34:04:50:b2:22:fd:46:34:16:77:38:58:7d:95:
                    96:10:f1:7f:da:46:f6:9a:ff:c7:df:0e:4d:87:3d:
                    d9:eb:67:65:d9:37:6e:0e:39:2d:01:fd:a4:d5:59:
                    4e:a9:40:13:21:80:2e:56:ac:3a:23:f6:f9:92:cd:
                    5c:ac:a0:4f:88:7e:85:ba:3a:d7:8a:bf:88:5c:1f:
                    7f:12:00:37:59:5e:8e:e0:bc:61:30:68:9a:65:50:
                    f4:8d:7e:5c:e4:25:d5:b1:11:41:81:2d:3e:7a:be:
                    b2:23:d7:73:32:2d:ac:e9:41:cd:46:4d:4d:9e:2c:
                    4e:7d:c7:6f:5f:7a:fb:cf:74:2b:f4:84:91:b9:b0:
                    a2:c1:6c:27:4a:b5:df:17:1e:60:ae:48:87:66:8b:
                    b1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:07:51:78:F9:43:A2:96:3B:BE:D5:8E:FE:B1:09:3B:01:4F:97:DE
            X509v3 Authority Key Identifier:
                keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/VwdRePlDopY7vtWO_rEJOwFPl94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.215.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:15:08:8a:86:c1:46:fc:cf:0a:aa:13:f9:5b:a1:49:06:00:
         40:65:ba:0e:c5:f5:64:8a:be:6f:e3:3d:82:0e:30:20:a3:3c:
         52:89:8f:13:cc:68:7d:d1:b2:cc:8d:c1:ad:37:62:19:18:c9:
         11:f5:fd:49:f7:94:7c:94:d6:9b:e6:81:3f:d9:27:e1:ae:e2:
         27:35:a8:69:7e:12:0e:6a:b0:f8:d8:73:38:88:66:d2:ce:fc:
         5d:de:3a:90:82:49:db:94:d3:d5:77:ea:07:90:b6:94:d7:e7:
         a7:2d:cb:16:09:9c:f8:cd:83:56:d4:0c:96:cf:bd:a6:ac:dd:
         03:63:b7:5d:64:34:81:15:5b:5e:17:5a:06:3f:65:fb:b7:e8:
         ef:ea:d6:87:9c:4a:55:cb:71:13:76:c4:a7:f2:24:bf:b1:a9:
         c4:86:d5:5d:ac:07:8a:d5:26:51:1c:fa:7e:96:0f:3d:e9:b4:
         80:6b:c8:18:c3:b5:df:9a:6c:5c:92:0b:69:e3:21:8b:df:f8:
         3b:0f:91:61:da:e3:8a:aa:40:88:11:5a:1d:d4:a9:86:70:f3:
         1f:e4:5d:20:9a:55:b8:2d:de:30:0c:b0:42:e4:b9:f7:74:9f:
         11:d8:c0:9f:4c:b5:a3:1d:0c:6f:c4:34:77:fe:09:64:7e:67:
         3f:38:36:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 10:06:40 2024 by rpki-client on console-ams.rpki-client.org