Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/WYUEzj0ax5azsGdnIcpyUhSkPdI.roa
File:                     WYUEzj0ax5azsGdnIcpyUhSkPdI.roa (raw, json)
Hash identifier:          8QOUmFYaWwawzZ58eDiOB5L69pfC2PRFMRoCGxUZmY8=
Subject key identifier:   59:85:04:CE:3D:1A:C7:96:B3:B0:67:67:21:CA:72:52:14:A4:3D:D2
Certificate issuer:       /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial:       018991CCD394051F81157A1A6FDCA4299073
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/WYUEzj0ax5azsGdnIcpyUhSkPdI.roa
Signing time:             Wed 26 Jul 2023 10:44:27 +0000
ROA not before:           Wed 26 Jul 2023 10:44:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1200414
IP address blocks:        185.101.188.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 27 Jul 2023 07:38:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:91:cc:d3:94:05:1f:81:15:7a:1a:6f:dc:a4:29:90:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
        Validity
            Not Before: Jul 26 10:44:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=598504ce3d1ac796b3b0676721ca725214a43dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:ff:1a:e0:ed:be:ca:03:85:d2:c9:28:a5:
                    79:c8:1b:97:ce:1f:6a:a5:fb:fe:fb:cf:a7:12:ba:
                    60:47:6e:cc:8a:32:84:57:ce:2e:73:74:9f:a0:b0:
                    d8:d3:d4:7d:92:96:0e:b2:bb:84:a5:1b:41:6d:fc:
                    bd:63:89:9d:28:68:d9:fd:4b:23:99:d0:b1:37:38:
                    87:3a:b8:48:fd:1f:ad:61:4b:b4:bb:e4:06:9a:18:
                    ed:27:a3:01:ac:2c:06:6c:f8:3a:b4:ce:4f:1e:96:
                    aa:7e:ae:34:e8:80:bd:c6:a4:4c:7a:6b:ae:2a:34:
                    cb:12:2c:2c:20:ad:08:c5:d5:a9:92:9f:47:e8:ad:
                    12:11:81:4a:cc:99:49:91:1d:89:ab:04:b0:3c:50:
                    a3:ca:7b:2a:68:2b:ee:0b:dd:2a:07:31:4c:04:11:
                    ad:76:65:7f:c9:db:d6:55:04:78:b2:60:69:55:e1:
                    5c:8f:91:65:dc:93:09:b2:83:19:97:bf:b0:6c:91:
                    fa:7c:35:93:eb:17:74:a7:9b:76:10:18:cb:ae:0e:
                    52:cd:1e:f6:2c:54:bd:11:8d:1e:80:30:dc:f8:ce:
                    ba:82:ef:84:3f:6a:0f:9a:46:fc:40:20:c8:15:4a:
                    5a:49:98:ba:2f:87:21:58:b9:f6:8a:51:44:23:45:
                    1e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:85:04:CE:3D:1A:C7:96:B3:B0:67:67:21:CA:72:52:14:A4:3D:D2
            X509v3 Authority Key Identifier:
                keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/WYUEzj0ax5azsGdnIcpyUhSkPdI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.101.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:d6:33:bd:39:e6:a4:ec:47:e1:0d:c6:0e:8e:ef:98:60:59:
         d7:3c:87:fb:62:65:63:7c:05:09:b3:55:c2:00:6d:8f:fd:9d:
         64:91:52:0a:13:44:05:3c:a9:30:60:bb:58:e9:99:76:83:06:
         98:71:71:1a:c7:5d:64:6a:62:36:c7:5d:54:99:27:6c:94:28:
         f0:62:b6:04:67:87:06:ec:f2:22:02:9b:e5:58:61:31:fb:1c:
         2b:fc:9b:e4:2f:eb:77:89:08:50:00:b4:48:64:4c:57:2b:73:
         17:1c:7d:67:8d:09:07:0b:cd:8d:c1:9b:ef:83:75:96:53:03:
         4e:7f:a2:d8:a8:ee:ac:3f:2d:c3:3b:32:6f:48:b2:de:80:3e:
         db:d9:27:22:1c:07:f7:e3:3e:a0:3d:cf:b2:cd:c9:78:92:1c:
         ae:dc:ba:00:41:c1:e5:31:38:b3:9a:4e:40:76:ce:f8:bc:d6:
         78:1c:b7:0c:9d:0f:0c:77:1d:69:bb:d0:40:1b:ed:6c:5f:86:
         3e:de:53:04:42:e4:77:e2:f5:c9:22:b1:b2:cf:ce:21:40:a9:
         f3:49:9e:fe:d6:7c:dd:c2:eb:8b:94:36:ea:8d:9d:8c:49:bd:
         9d:47:7b:83:d1:d8:8e:ab:57:43:03:bb:46:67:0f:3c:a8:ee:
         04:fd:5b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:44 2024 by rpki-client on console-fra.rpki-client.org