Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/5IAN4BaYzENW1Qz99rK8iMBOcG4.roa
File:                     5IAN4BaYzENW1Qz99rK8iMBOcG4.roa (raw, json)
Hash identifier:          Ylkcr8jPkRC3a7ievYwg0vGjOhQg4TzUG8ARNVEnkvs=
Subject key identifier:   E4:80:0D:E0:16:98:CC:43:56:D5:0C:FD:F6:B2:BC:88:C0:4E:70:6E
Certificate issuer:       /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial:       0188DD94306FFBB9A231ACAC845AAEF39450
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/5IAN4BaYzENW1Qz99rK8iMBOcG4.roa
Signing time:             Wed 21 Jun 2023 10:50:56 +0000
ROA not before:           Wed 21 Jun 2023 10:50:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198065
IP address blocks:        185.164.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 21 Jun 2023 12:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:dd:94:30:6f:fb:b9:a2:31:ac:ac:84:5a:ae:f3:94:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
        Validity
            Not Before: Jun 21 10:50:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e4800de01698cc4356d50cfdf6b2bc88c04e706e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:30:6d:3a:62:af:a1:22:e5:a9:8e:b3:19:d2:
                    41:a3:52:9f:84:fe:ed:72:b8:7d:95:56:ab:8d:83:
                    8e:48:b5:e3:4b:f1:dd:7c:9a:5e:79:7c:49:59:35:
                    53:d6:cf:6c:f5:63:00:8d:69:44:14:7b:0c:b7:a0:
                    e0:9c:02:c5:9b:62:f2:ba:ca:bb:24:56:09:df:38:
                    49:38:45:ab:e1:cb:0d:90:7c:f7:f0:be:ea:91:97:
                    0a:83:55:2f:8b:fd:33:3d:d9:78:bb:9c:2d:14:c5:
                    6e:5e:58:fd:91:a5:a5:dc:6d:ec:75:94:2c:c3:d7:
                    59:c3:16:41:3f:0a:cc:1d:6f:d5:bd:1c:0e:0f:01:
                    bd:eb:a3:95:8d:2c:64:d4:b0:01:82:41:ea:d5:b5:
                    b2:65:d1:2c:2c:23:b2:10:7b:dd:ae:f8:ad:de:2f:
                    e4:d4:9b:4c:bb:50:d8:ad:05:76:a4:7f:ed:39:bd:
                    09:ea:62:19:a2:bd:be:ac:7b:e9:b5:82:fa:d4:50:
                    bf:cd:45:c1:1d:49:b0:9b:87:88:af:a4:d0:23:bf:
                    94:7e:b5:65:66:9b:fb:8a:ff:f6:6d:fc:83:c8:73:
                    4b:fc:05:10:45:11:bd:fb:83:e3:7b:fe:0c:f0:f5:
                    a2:fb:db:01:47:5f:7f:48:ce:0e:82:7a:22:c9:1a:
                    a8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:80:0D:E0:16:98:CC:43:56:D5:0C:FD:F6:B2:BC:88:C0:4E:70:6E
            X509v3 Authority Key Identifier:
                keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/5IAN4BaYzENW1Qz99rK8iMBOcG4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.164.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:cf:13:82:ca:81:b5:96:28:70:1b:35:49:20:8d:46:10:12:
         30:56:9a:52:9e:77:fd:bf:17:3e:c6:be:bc:0a:91:a0:d1:44:
         7c:62:64:01:00:49:7a:be:90:a9:6b:9f:65:3a:3b:2d:29:74:
         43:50:7d:68:bf:4f:e2:cf:e2:93:89:d9:fe:42:43:09:d2:1e:
         17:1b:cf:29:5f:36:5e:2f:bf:1d:70:f3:b1:09:b0:a1:08:ec:
         d8:e0:63:b8:96:ca:df:62:86:ea:f4:2d:3f:6d:1b:66:ef:56:
         24:42:de:94:81:5a:d9:2e:c5:b7:d1:b5:01:86:dd:cf:c9:ea:
         39:88:53:f7:f2:0d:a8:57:3b:6e:8e:b2:a4:42:fc:be:b5:c3:
         c0:ee:5c:68:de:b6:bf:f8:d3:5a:0e:94:b9:95:db:28:64:42:
         26:ef:52:e8:36:d9:97:94:14:f3:01:b3:ef:8b:ec:2a:a4:4e:
         86:be:4b:35:d7:30:fb:30:94:ab:bd:8e:8f:ce:f6:a2:8f:2b:
         8b:23:c2:b1:ed:30:43:71:19:33:63:b8:bb:9c:99:f6:8b:d3:
         14:3c:fa:7a:a6:8d:73:bc:5d:c7:29:2e:2a:8e:bc:db:a9:0f:
         c2:a7:fe:1a:dd:b6:26:37:be:a5:4f:1a:61:78:eb:61:0f:ca:
         a2:09:4d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:29 2024 by rpki-client on console-fra.rpki-client.org