Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/0El_OYowr6OlE9oenueC-VPV500.roa
File:                     0El_OYowr6OlE9oenueC-VPV500.roa (raw, json)
Hash identifier:          Fhkqk7NMpb8NUiauef86Z5+WsNYJu3Pwc6pwqsOHO9Q=
Subject key identifier:   D0:49:7F:39:8A:30:AF:A3:A5:13:DA:1E:9E:E7:82:F9:53:D5:E7:4D
Certificate issuer:       /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial:       01856EA699D94B3B1D8DC7E33831628DD041
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/0El_OYowr6OlE9oenueC-VPV500.roa
Signing time:             Sun 01 Jan 2023 18:44:50 +0000
ROA not before:           Sun 01 Jan 2023 18:44:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210292
IP address blocks:        160.238.121.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:a6:99:d9:4b:3b:1d:8d:c7:e3:38:31:62:8d:d0:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
        Validity
            Not Before: Jan  1 18:44:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d0497f398a30afa3a513da1e9ee782f953d5e74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1d:c7:46:16:86:f8:d3:2b:0e:c8:bb:d3:4f:
                    5e:c1:c7:a1:40:f6:d3:8c:93:01:16:8d:f2:e3:61:
                    e2:cb:4d:ae:cd:ba:cf:16:b7:56:5f:95:65:d0:54:
                    9a:2d:fe:30:73:5a:ba:ac:d1:0b:d3:4f:88:77:bb:
                    de:a5:1a:a7:96:68:ff:4c:04:88:a5:2f:f6:d4:2f:
                    6c:d1:c4:1b:fe:35:73:79:2d:d7:37:e5:6d:a9:f5:
                    77:f5:61:e3:a1:f6:89:2a:ed:e7:80:3e:3b:46:92:
                    93:6e:68:87:f9:0e:82:c0:69:db:19:a0:dd:dd:c3:
                    89:82:26:f2:93:21:f9:00:6a:60:25:9e:b8:5e:6b:
                    92:b9:3b:f7:62:af:83:dd:5f:2a:fd:bc:c0:53:a1:
                    48:8f:be:88:de:dc:e8:85:fa:6b:ce:c1:cb:79:94:
                    f7:07:b5:ad:33:ef:71:66:e7:62:19:6c:56:39:d9:
                    e6:6d:e0:91:e1:50:10:14:74:57:2c:af:31:c3:60:
                    ad:43:4a:a5:1e:f8:c1:76:12:8b:29:f4:a8:bf:8e:
                    14:2d:d4:ab:3c:98:f8:4d:05:3f:2e:1f:e9:dc:ec:
                    d5:15:ab:48:a0:b7:b9:06:29:72:1e:a0:24:db:c2:
                    57:cc:d2:b9:ae:af:66:c7:6d:ff:32:ef:58:6e:19:
                    68:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:49:7F:39:8A:30:AF:A3:A5:13:DA:1E:9E:E7:82:F9:53:D5:E7:4D
            X509v3 Authority Key Identifier:
                keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/0El_OYowr6OlE9oenueC-VPV500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:b7:0b:9f:22:f8:8e:64:d4:3f:87:d8:86:f2:fd:42:96:85:
         da:1e:14:69:b3:d2:cb:ab:e4:62:16:25:c4:34:0e:ab:7b:66:
         b2:09:99:f4:3d:3d:63:fe:76:a2:cc:f1:bc:de:ee:8c:54:de:
         e5:94:13:d5:85:6c:ba:33:b2:b3:20:e6:2a:9d:a5:73:d7:4f:
         ed:90:50:ca:d1:b2:97:de:bc:4f:cb:76:8a:00:ce:fc:41:18:
         d9:58:0d:36:05:c0:ad:37:e3:69:41:8e:a4:2d:90:86:b2:5b:
         61:47:98:95:34:f6:6a:fb:bd:84:e6:42:1a:a9:7d:d7:17:89:
         48:93:8e:e4:70:70:bf:b7:b3:f3:d7:2b:1a:55:62:38:42:7a:
         3b:b8:b4:7a:f4:26:bd:72:73:68:ef:27:75:cb:d6:8a:31:d3:
         5a:84:84:9c:39:88:c8:b8:68:c0:c5:15:5c:c6:89:d0:1b:d6:
         92:03:45:47:22:d0:05:fb:2f:a8:83:f8:79:b8:2f:75:23:be:
         09:d2:49:31:6d:90:f6:73:93:a6:35:d1:fe:c4:a2:c7:8a:9f:
         62:0f:a3:e6:1e:39:e2:81:18:87:e5:3a:91:c4:33:0e:a2:34:
         72:6f:84:67:75:5d:c6:0b:26:1d:f7:b3:ce:54:15:07:22:53:
         d6:6c:14:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:13 2024 by rpki-client on console-ams.rpki-client.org