Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/DRIp5ct2-Et0Z0vrupTLGoY7FFE.roa
File:                     DRIp5ct2-Et0Z0vrupTLGoY7FFE.roa (raw, json)
Hash identifier:          AisH0QGGOo+f9ZM2KNtXCFNoTHWxQar/WmMUZ+Q3WCo=
Subject key identifier:   0D:12:29:E5:CB:76:F8:4B:74:67:4B:EB:BA:94:CB:1A:86:3B:14:51
Certificate issuer:       /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial:       018CC2DB4248D7038959C07D353688921BA7
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/DRIp5ct2-Et0Z0vrupTLGoY7FFE.roa
Signing time:             Mon 01 Jan 2024 02:29:58 +0000
ROA not before:           Mon 01 Jan 2024 02:29:58 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     11325
IP address blocks:        139.28.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 09 Feb 2024 08:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:42:48:d7:03:89:59:c0:7d:35:36:88:92:1b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
        Validity
            Not Before: Jan  1 02:29:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0d1229e5cb76f84b74674bebba94cb1a863b1451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e0:07:e2:96:48:20:1a:67:c2:27:30:32:6f:
                    e7:3b:f2:49:ca:3c:14:79:49:f3:8a:1b:15:f7:d2:
                    0c:01:1f:44:61:28:b9:f2:b0:a4:c8:18:f9:c0:4f:
                    69:39:fa:8e:3c:72:1d:61:0c:52:40:bb:21:96:95:
                    f1:5a:8a:7d:37:23:b9:21:70:11:26:bd:15:27:2c:
                    97:ab:c8:77:ef:fb:e4:1c:a8:b2:69:76:6f:56:8c:
                    02:d0:67:34:e7:50:dc:3e:45:67:65:e1:9f:d1:08:
                    5e:f7:c7:01:53:a2:99:58:dd:3f:2f:32:8a:9e:67:
                    53:78:9d:52:d1:8c:3e:45:16:51:bb:d9:a4:d3:81:
                    a3:43:af:63:47:02:b1:39:10:57:22:bd:fd:37:ed:
                    c5:53:fc:cc:0a:33:4b:ac:0b:1c:6b:49:62:08:02:
                    df:19:ff:2d:49:f7:1d:8b:ea:20:1d:f3:b1:52:31:
                    fc:41:1a:8b:15:5c:eb:19:c4:dd:5a:9c:64:c0:0b:
                    e7:0e:d5:24:51:c8:44:e0:a0:8e:64:bb:91:95:74:
                    37:54:52:af:ed:5a:8d:59:6d:4d:60:19:7e:10:45:
                    d8:7b:94:e2:cd:01:18:67:44:e3:09:f4:55:ed:9f:
                    26:1d:b8:74:92:d4:b9:04:1b:7c:8f:05:0f:ef:66:
                    9b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:12:29:E5:CB:76:F8:4B:74:67:4B:EB:BA:94:CB:1A:86:3B:14:51
            X509v3 Authority Key Identifier:
                keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/DRIp5ct2-Et0Z0vrupTLGoY7FFE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.28.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:65:dc:d6:72:c9:53:54:d6:aa:bf:66:09:21:53:60:91:18:
         7e:ea:a8:48:b3:60:81:e6:49:5a:34:84:bf:f6:e1:cf:8d:1f:
         60:bd:23:9a:98:00:78:dd:94:1a:0f:c2:13:0b:71:a0:0e:40:
         76:3d:14:3d:44:18:b8:dc:28:06:99:86:7a:ff:6a:ab:60:08:
         be:f7:a5:44:35:d5:f4:de:71:fc:df:58:ed:93:cf:b2:82:63:
         45:6b:f9:fa:5b:ea:f4:59:85:4c:d0:fe:20:af:3d:3b:f5:ec:
         7d:be:ce:fd:94:29:0c:32:4c:51:d0:25:fd:a7:93:66:c7:3d:
         cb:70:92:09:db:2e:14:20:ea:1f:47:f6:6d:94:79:07:4a:d8:
         b7:d9:cd:ba:20:26:ec:70:a1:e6:2f:7a:65:f0:f3:36:0f:5c:
         29:5f:f6:ff:2d:e6:05:20:54:48:08:b1:75:97:34:2d:5a:b7:
         44:8a:6b:6e:2e:c1:9d:da:ef:1f:8b:58:f1:f7:9a:39:46:17:
         36:9f:a6:91:9d:d1:48:c7:fb:78:2f:38:63:0a:c5:d6:7c:b4:
         c2:fb:6f:88:e0:15:27:71:7e:c6:35:db:38:e2:43:83:a3:b2:
         65:a5:30:a2:31:a0:47:bb:f7:2c:c8:de:69:5d:95:ba:ef:36:
         02:38:4f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:30 2024 by rpki-client on console-fra.rpki-client.org