Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/VWsoFSf04SKARTPU_bL582-2naE.roa
File:                     VWsoFSf04SKARTPU_bL582-2naE.roa (raw, json)
Hash identifier:          08wjMatL6bpIxfbgL1DMUdlmWF96cHfF9W94bl3gnyQ=
Subject key identifier:   55:6B:28:15:27:F4:E1:22:80:45:33:D4:FD:B2:F9:F3:6F:B6:9D:A1
Certificate issuer:       /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial:       018FAA6823DB280705041D1158C412CDF922
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/VWsoFSf04SKARTPU_bL582-2naE.roa
Signing time:             Fri 24 May 2024 11:41:42 +0000
ROA not before:           Fri 24 May 2024 11:41:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     201150
IP address blocks:        188.209.128.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 12:47:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:aa:68:23:db:28:07:05:04:1d:11:58:c4:12:cd:f9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
        Validity
            Not Before: May 24 11:41:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=556b281527f4e122804533d4fdb2f9f36fb69da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9e:0b:67:bd:f0:d7:be:0e:9f:d3:84:da:74:
                    81:c2:81:3f:79:3f:a1:3a:9e:06:33:eb:e8:85:c0:
                    eb:6c:08:63:17:76:9d:b6:64:09:1b:e5:3e:8b:2b:
                    5e:07:d9:58:d9:7c:a2:ba:51:19:bf:fa:0f:0a:d5:
                    c0:b7:ef:f2:5d:73:fa:c6:87:7b:9f:3d:e2:16:b6:
                    3d:ab:e6:bf:28:94:93:cf:77:00:b4:5e:8f:3e:48:
                    a4:65:17:29:d5:35:5f:47:0f:52:35:68:5c:97:37:
                    74:c6:bb:0b:9b:f9:9e:62:50:a5:2c:77:ad:4a:82:
                    8b:9a:49:b6:ba:26:5e:e5:f5:af:ab:75:ef:79:86:
                    97:22:43:14:26:81:62:d2:60:3d:13:ea:7a:4b:89:
                    c7:b2:14:de:c2:2c:a0:df:94:58:39:0a:94:88:95:
                    99:bf:71:86:08:a2:77:f9:8f:d0:88:34:df:9c:28:
                    9e:04:e4:76:a9:b3:02:22:ec:cd:d2:29:d5:3c:f8:
                    51:48:9e:17:f6:68:20:11:7d:7b:8a:ae:0a:04:0d:
                    70:79:e4:8a:a4:2f:bb:6a:32:7b:86:2b:99:da:c9:
                    6c:28:e1:f2:a2:3a:90:fd:c6:30:d7:39:26:09:c2:
                    3c:ef:9b:95:8b:2a:c2:c4:69:8d:dd:9c:8c:21:62:
                    75:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6B:28:15:27:F4:E1:22:80:45:33:D4:FD:B2:F9:F3:6F:B6:9D:A1
            X509v3 Authority Key Identifier:
                keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/VWsoFSf04SKARTPU_bL582-2naE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.209.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:5a:a8:1d:b5:4e:3d:eb:b0:5a:c5:e3:3f:5b:94:09:00:8c:
         17:39:7d:55:5d:d8:01:01:c0:5f:06:e6:f4:9f:ac:0b:a4:3e:
         79:17:4d:79:42:f3:b0:71:b2:5a:ba:f9:49:b9:4a:bb:a9:f4:
         70:4e:fb:4d:f2:49:21:b5:53:06:12:63:5b:d2:a3:1c:35:fe:
         f2:f1:31:1e:ce:7c:bb:ca:51:de:3a:b9:21:59:c2:9e:ad:4d:
         0b:38:8e:7a:82:32:9f:ba:dd:07:57:22:fd:4a:7e:f8:14:7b:
         f3:d4:3b:7e:a0:92:37:44:e7:b0:cf:71:d4:cc:9b:cc:55:4e:
         cf:85:e8:c1:fe:1a:ad:89:38:7a:b6:7e:1e:16:11:b5:fb:4f:
         c0:8c:4e:8a:88:89:7c:ce:1d:3e:d7:45:fa:f1:15:e4:f1:68:
         a9:c7:d3:cb:26:f6:39:b5:22:66:06:82:3c:b7:10:ca:cd:e8:
         e1:66:b4:0e:7a:34:cd:00:e2:c5:2e:ea:38:47:ec:46:03:09:
         a3:c9:20:24:d4:23:b5:e3:f6:7c:dc:ea:55:f7:9e:29:d5:3f:
         13:42:25:1c:cb:9f:73:bc:53:ac:4c:24:83:db:a8:28:63:3b:
         60:f1:f5:77:1a:6e:25:e4:99:f0:c5:43:82:ac:ce:74:ad:92:
         30:43:cb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 19:38:34 2024 by rpki-client on console-ams.rpki-client.org