Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/p9szRe0biW_-8dI50TI_YA0-UPM.roa
File:                     p9szRe0biW_-8dI50TI_YA0-UPM.roa (raw, json)
Hash identifier:          zczfVFqheNTjDOBBBxKeAkQGvrOE/br1f5yUzCJCPPs=
Subject key identifier:   A7:DB:33:45:ED:1B:89:6F:FE:F1:D2:39:D1:32:3F:60:0D:3E:50:F3
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       01856BEEDDE9847483E25BCE4CBED223E318
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/p9szRe0biW_-8dI50TI_YA0-UPM.roa
Signing time:             Sun 01 Jan 2023 06:04:54 +0000
ROA not before:           Sun 01 Jan 2023 06:04:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207854
IP address blocks:        188.114.65.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:ee:dd:e9:84:74:83:e2:5b:ce:4c:be:d2:23:e3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 06:04:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a7db3345ed1b896ffef1d239d1323f600d3e50f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d6:8c:19:a2:b8:4e:3e:77:04:86:26:80:7f:
                    7f:85:de:1b:d8:11:c6:18:28:26:dd:af:83:ee:f9:
                    27:b2:83:31:55:1b:e8:cd:e9:31:62:e7:c7:24:cf:
                    fa:db:37:70:4d:b9:da:23:b6:52:9c:60:f8:ae:6c:
                    14:54:be:8a:53:b2:29:70:4c:02:ca:fb:39:d8:ae:
                    a7:4c:29:29:6b:b0:6c:52:c9:09:80:97:f0:39:e7:
                    b0:6b:d7:d6:a9:4f:22:a0:3f:56:fc:55:5c:a3:e8:
                    fe:41:84:29:be:e2:3c:d6:ed:30:7d:73:cc:44:ac:
                    d6:7d:44:cf:30:16:90:14:d3:e0:6b:ed:1e:0a:13:
                    85:04:3d:5c:0e:b2:e4:fd:d9:6a:33:e2:25:ba:aa:
                    62:9b:a7:41:aa:53:a1:50:d4:31:fe:4b:52:48:c4:
                    f7:72:ee:8a:32:9a:c7:dc:d6:c2:0c:a8:80:6c:f9:
                    0e:c2:04:74:4a:e0:ae:a1:b7:17:57:d0:25:df:01:
                    fc:a2:32:51:10:39:6b:4f:78:77:9f:c5:6e:23:94:
                    cc:97:12:58:df:7a:9d:69:af:bc:49:a8:9e:de:2b:
                    09:9d:6b:8f:62:f7:1f:a5:1a:ca:80:dc:b1:22:83:
                    87:8c:f6:20:9c:56:87:14:83:03:e0:b9:24:49:0c:
                    00:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DB:33:45:ED:1B:89:6F:FE:F1:D2:39:D1:32:3F:60:0D:3E:50:F3
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/p9szRe0biW_-8dI50TI_YA0-UPM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.114.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:74:78:87:30:60:63:ad:67:ed:d0:40:48:e9:1d:1b:15:99:
         a4:da:ca:b3:0b:f4:81:fe:c3:b5:fe:65:70:93:d9:da:db:ef:
         ad:80:bf:d3:10:86:be:20:73:c1:d9:de:3b:55:ab:6c:9d:76:
         41:b1:6d:b8:81:7f:86:5b:e6:fb:9a:ee:93:cb:62:1f:a1:69:
         3a:d9:71:51:35:8b:3f:5d:08:89:cb:75:ff:0c:7d:65:a4:83:
         bd:64:c5:e4:7b:db:2a:56:f3:72:f9:be:5d:9d:29:20:ba:4e:
         66:6e:be:30:ff:73:c6:bc:34:34:39:d6:ff:d4:2a:ba:f0:31:
         41:69:6b:b2:91:6a:01:9a:53:5c:32:d5:49:0a:0d:8c:8b:e8:
         3e:63:11:99:39:71:99:19:48:72:47:33:ce:18:76:de:6d:9b:
         d2:b0:3d:47:99:91:6e:67:e7:a9:c3:ff:c4:f9:35:4e:f5:75:
         55:24:71:fc:2b:c1:b0:5f:18:0a:e6:90:1f:5c:66:c9:63:25:
         08:a3:5d:34:a8:25:4a:5c:36:0c:0f:2c:ee:5e:33:ac:bb:0c:
         1b:06:ff:b7:64:cd:dd:68:49:49:b9:df:e3:c7:14:c2:c7:06:
         ff:7f:bd:c0:f2:7f:4d:68:44:87:7c:0d:a6:6a:ef:ce:c0:a2:
         29:ff:94:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org