Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/9xLsvzzuWxexb6aZ2Ez-Sgcd41o.roa
File:                     9xLsvzzuWxexb6aZ2Ez-Sgcd41o.roa (raw, json)
Hash identifier:          LwdHiPx9U/07uPbt03HQVnOF8dGtZc3wQoePoycvaeQ=
Subject key identifier:   F7:12:EC:BF:3C:EE:5B:17:B1:6F:A6:99:D8:4C:FE:4A:07:1D:E3:5A
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       01856C53D8D2945ADFD3FDCCAA27EBDE449A
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/9xLsvzzuWxexb6aZ2Ez-Sgcd41o.roa
Signing time:             Sun 01 Jan 2023 07:55:12 +0000
ROA not before:           Sun 01 Jan 2023 07:55:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212369
IP address blocks:        193.35.154.0/24 maxlen: 24
                          185.88.174.0/24 maxlen: 24
                          193.223.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 16 Oct 2023 07:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:53:d8:d2:94:5a:df:d3:fd:cc:aa:27:eb:de:44:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Jan  1 07:55:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f712ecbf3cee5b17b16fa699d84cfe4a071de35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:42:ba:d1:82:85:7b:67:c1:a8:db:4e:ef:59:
                    32:28:20:7c:99:66:cd:a8:55:b3:a6:07:27:ad:36:
                    66:8f:0e:99:bb:29:73:83:98:de:ee:b1:20:c1:0f:
                    28:d1:17:c2:b8:d4:3f:71:d9:26:96:e9:06:4d:35:
                    55:f3:1b:a7:02:10:6e:b2:bc:9d:37:3e:bc:c1:b4:
                    8f:0d:4c:2a:a6:27:9c:e1:de:74:d6:24:2b:17:4b:
                    05:45:92:e5:6e:59:11:4f:e5:ea:e5:b3:31:e4:0c:
                    9d:71:61:93:0b:3b:93:cc:80:7e:76:bd:33:cc:05:
                    90:e1:36:d5:7a:e2:7d:af:20:a4:28:16:ac:59:b3:
                    33:f3:25:67:74:54:2e:47:1b:c1:d7:f0:21:2c:b2:
                    9e:96:2e:3c:00:c3:b3:b8:5c:80:b5:bd:fa:02:fc:
                    66:ff:f2:1f:89:fa:fb:40:93:c6:f0:9b:3a:cc:94:
                    8e:94:c6:ac:96:55:d3:fa:f6:dd:9a:35:4c:59:ad:
                    9e:66:c0:0f:62:e6:eb:5f:0d:0c:f0:fc:c9:c2:90:
                    f9:07:7d:33:11:1d:eb:ea:58:68:7f:fe:6a:10:40:
                    cf:b8:da:eb:5d:ab:10:66:59:92:57:fb:ec:00:a5:
                    0b:f2:a8:c7:4c:be:7c:d3:da:f6:93:dc:58:65:23:
                    5a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:12:EC:BF:3C:EE:5B:17:B1:6F:A6:99:D8:4C:FE:4A:07:1D:E3:5A
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/9xLsvzzuWxexb6aZ2Ez-Sgcd41o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.88.174.0/24
                  193.35.154.0/24
                  193.223.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:f9:c6:33:9e:99:2d:e1:5c:87:f1:13:a5:a4:dd:79:15:b0:
         ad:8b:e2:9b:cd:5b:58:be:98:f8:44:68:ab:1e:20:40:cc:87:
         27:07:98:93:55:35:f5:35:1a:86:af:e0:c1:dd:62:fe:58:5c:
         a8:09:83:8d:58:66:72:2c:c0:5b:bb:13:b6:37:e6:ff:68:8e:
         45:ef:44:b0:64:ff:3a:d2:81:f9:f4:07:66:be:d3:9d:84:a4:
         4f:5f:cc:ad:3f:68:00:52:7f:52:d0:44:51:aa:ea:10:bf:94:
         06:64:d7:f0:38:14:3a:8a:2d:c1:61:2f:ee:6b:a9:71:36:92:
         5b:3d:c1:f3:ec:a9:42:9f:b4:82:bd:ea:d5:92:5f:b4:92:f6:
         5d:85:66:61:b7:57:d2:9e:7d:c2:b9:5c:0e:fc:97:a4:a8:e4:
         c4:59:08:ca:1e:56:42:66:50:a3:98:41:ca:75:d1:55:a2:43:
         99:d1:62:b3:58:17:07:df:13:1d:c7:b2:a7:09:48:a1:7f:fe:
         bf:61:0e:5d:db:3b:f7:32:e0:cb:92:d7:3b:75:2c:5c:db:10:
         20:3a:a1:10:76:6b:cb:32:99:ea:c6:50:2f:98:fa:92:6d:72:
         c7:00:9e:ae:c4:85:f6:62:aa:a4:87:da:90:07:15:90:91:af:
         c1:b9:f5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org