Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/SP24RYtSLkemGNI8ZuiScZa11kA.roa
File:                     SP24RYtSLkemGNI8ZuiScZa11kA.roa (raw, json)
Hash identifier:          EGqewC6TmaLyNHCxieEFNv9CqfIT8zXrBxPO97OYlWk=
Subject key identifier:   48:FD:B8:45:8B:52:2E:47:A6:18:D2:3C:66:E8:92:71:96:B5:D6:40
Certificate issuer:       /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial:       018573562745F94D13AB6EC5890348FABB00
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/SP24RYtSLkemGNI8ZuiScZa11kA.roa
Signing time:             Mon 02 Jan 2023 16:35:03 +0000
ROA not before:           Mon 02 Jan 2023 16:35:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57886
IP address blocks:        195.214.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:56:27:45:f9:4d:13:ab:6e:c5:89:03:48:fa:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
        Validity
            Not Before: Jan  2 16:35:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=48fdb8458b522e47a618d23c66e8927196b5d640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:38:e7:ca:55:ea:f5:e5:a5:af:78:b5:3a:67:
                    34:98:e9:d6:57:3f:a3:60:65:d3:53:69:45:68:f1:
                    8d:c1:61:e9:a0:be:c0:ac:a0:d1:95:b2:cc:f0:ff:
                    b2:1f:2c:ad:6a:6b:78:ea:01:10:6f:78:6c:f6:85:
                    89:62:61:3f:c3:81:d6:23:26:85:ce:ac:70:2c:7e:
                    bf:98:ac:9e:91:28:01:2f:e7:c3:94:74:e5:39:93:
                    4a:10:a7:4f:6e:2b:dd:19:43:a3:df:8d:bc:bd:2a:
                    fe:19:59:60:7b:de:2c:fe:bd:05:31:82:82:00:a6:
                    95:44:07:e1:f7:30:6b:2c:64:41:08:86:21:02:98:
                    b9:20:6a:c6:26:6f:a4:61:32:7b:ca:58:8d:39:c1:
                    2d:23:ca:b8:a1:63:f0:ec:03:5a:a3:8f:64:1e:09:
                    c5:94:67:0d:31:9a:cd:bb:ac:10:b3:ea:e4:32:b4:
                    cd:56:2e:53:08:bf:27:d6:66:5d:d1:ad:d2:b2:bd:
                    3e:f2:4b:59:26:47:35:c6:82:e7:88:5a:1e:5e:04:
                    44:61:92:31:7e:1f:5d:9e:5b:b1:e5:3e:2a:9f:c8:
                    72:9d:e1:9a:07:82:62:8b:32:2b:ea:12:dd:9a:c5:
                    08:20:0e:99:4e:29:83:54:26:2e:c8:23:6f:d1:b7:
                    5e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FD:B8:45:8B:52:2E:47:A6:18:D2:3C:66:E8:92:71:96:B5:D6:40
            X509v3 Authority Key Identifier:
                keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/SP24RYtSLkemGNI8ZuiScZa11kA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.214.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:83:51:aa:16:86:e9:56:0a:be:c2:d0:70:d2:44:92:02:90:
         4d:ba:34:6b:fd:5a:e0:d4:ee:14:2e:09:a1:40:ff:8c:b0:28:
         7b:4b:cb:8a:52:7d:89:29:c5:81:32:39:60:e6:50:3f:c6:f7:
         e7:04:80:aa:5d:46:94:c9:e6:d1:13:72:e0:56:a6:4c:09:d0:
         a6:43:ce:26:8a:95:f8:ea:75:eb:af:dd:48:17:7f:ae:d7:30:
         72:70:92:29:86:0e:bb:73:90:c3:fc:56:8a:39:a7:e6:7e:c4:
         3e:48:d6:27:dd:1f:08:69:2b:e1:9d:2c:d9:71:d0:94:d2:95:
         67:e6:75:be:05:16:41:ef:e3:f9:74:2c:64:6b:dc:7a:71:2b:
         5e:00:13:7d:a0:b0:ef:7d:d4:9f:65:1e:d3:9a:db:ea:6a:97:
         7b:fb:c2:9a:43:d2:6b:a7:b8:3e:96:43:84:dd:74:5e:67:bb:
         69:28:9a:02:8e:35:5b:b0:5a:f8:4a:24:57:99:4f:09:f3:b9:
         bd:f4:99:99:cc:c8:46:97:c4:2e:0e:e0:9e:51:5d:c0:a3:82:
         cd:bc:12:61:a7:b6:c8:f5:9e:24:94:23:c9:41:e7:18:58:65:
         88:3c:ca:e3:cb:27:d9:c4:01:91:8f:f2:da:6f:ae:f8:d9:2a:
         ba:83:fc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:35 2024 by rpki-client on console-fra.rpki-client.org