Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/skarauNUF8NuaEwp470gjaUJ9Js.roa
File:                     skarauNUF8NuaEwp470gjaUJ9Js.roa (raw, json)
Hash identifier:          8NUpjnkP1eLjbmG0KR6J89+1tBh//tmIoDJWO+mAeTQ=
Subject key identifier:   B2:46:AB:6A:E3:54:17:C3:6E:68:4C:29:E3:BD:20:8D:A5:09:F4:9B
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       01884FA9C045519E94C98F9E6008012AD170
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/skarauNUF8NuaEwp470gjaUJ9Js.roa
Signing time:             Wed 24 May 2023 21:28:24 +0000
ROA not before:           Wed 24 May 2023 21:28:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204174
IP address blocks:        5.105.36.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Aug 2023 11:09:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:4f:a9:c0:45:51:9e:94:c9:8f:9e:60:08:01:2a:d1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: May 24 21:28:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b246ab6ae35417c36e684c29e3bd208da509f49b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:11:fb:3c:d1:64:90:0d:e8:25:a0:74:c9:03:
                    90:a1:4b:31:67:1e:ed:d5:1b:51:db:91:b5:98:27:
                    66:e3:07:ba:0b:5f:fa:72:d9:c4:55:4d:90:b0:66:
                    b4:66:b2:69:5e:40:38:65:59:c3:a4:44:f7:31:c0:
                    fa:87:fa:b2:a7:80:96:b2:90:26:de:08:9a:ba:19:
                    4b:cd:cc:c2:17:f3:1e:d8:bd:d1:e9:13:11:f4:87:
                    43:b4:46:8d:50:81:28:c9:d4:24:0b:df:eb:35:cb:
                    08:b3:54:37:48:8d:4b:e0:85:d6:12:64:f8:d8:4b:
                    c5:97:f1:60:8c:01:c0:d3:d2:59:85:c5:a5:71:a7:
                    68:df:17:1d:fd:7c:5e:40:bb:58:29:d6:c3:3f:96:
                    bb:79:8d:9d:7e:a7:84:00:fb:90:79:cc:c2:f1:46:
                    00:4a:40:e9:38:ff:5d:a9:c8:78:08:1b:8c:d0:04:
                    61:83:2f:b1:ae:52:b4:86:14:8b:56:51:7b:56:16:
                    c6:92:19:01:48:41:56:de:cc:46:81:31:87:1b:84:
                    ab:17:0d:ad:85:9c:ed:76:b8:5f:b4:3b:e6:e7:f6:
                    98:f9:96:64:2f:6d:6a:a4:92:89:57:03:7d:c9:79:
                    fd:d0:71:03:e1:ee:05:84:fc:cc:7a:f9:0c:f6:bc:
                    e8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:46:AB:6A:E3:54:17:C3:6E:68:4C:29:E3:BD:20:8D:A5:09:F4:9B
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/skarauNUF8NuaEwp470gjaUJ9Js.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:65:ab:49:6e:41:45:c7:10:b1:df:15:86:02:86:7f:3f:d2:
         95:9c:ea:52:7e:78:57:99:3a:36:22:29:5a:4b:8f:2a:43:73:
         f8:95:ea:96:84:5e:2b:33:d7:ce:88:0f:3e:bd:2b:c7:04:d9:
         f2:c5:15:12:5b:67:35:98:26:73:74:d1:19:b5:b1:57:a8:25:
         1d:87:e1:e7:c9:20:2b:5b:cd:03:4a:27:57:87:7a:c1:21:e7:
         c3:dc:73:71:10:d0:d0:21:6f:dd:01:6a:8d:99:e3:15:2d:fe:
         c1:3b:5e:56:b6:91:53:92:6b:19:1d:dc:2b:c8:8c:3e:ea:b4:
         c7:99:25:e9:66:bd:88:13:c8:bc:e8:46:86:20:e7:24:1c:fe:
         8d:76:30:31:91:c9:e4:ba:a9:b8:97:8e:ae:1e:d1:85:0c:08:
         dc:7d:cb:52:9d:f7:c6:3c:a9:95:eb:1d:0c:54:b9:72:93:26:
         21:8d:ce:64:c9:19:2d:4e:f1:9b:49:32:2b:ba:1d:83:98:16:
         94:94:28:eb:6f:4a:70:18:ba:f8:cf:32:b2:29:55:a6:ca:16:
         06:86:ba:e4:ed:91:f2:e5:ed:e5:b5:c4:99:c2:13:6a:bf:0e:
         20:d6:21:28:07:21:cc:54:fe:37:0c:37:a4:50:d3:a7:c8:9d:
         8a:f9:94:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:29 2024 by rpki-client on console-fra.rpki-client.org