Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/sfmd8HCeaB6iU8K2yZNtVTSxA0c.roa
File:                     sfmd8HCeaB6iU8K2yZNtVTSxA0c.roa (raw, json)
Hash identifier:          ZAbqM54FR4MOij7z3RxoDtykBdaeGO+5B1Jq6yyvsD4=
Subject key identifier:   B1:F9:9D:F0:70:9E:68:1E:A2:53:C2:B6:C9:93:6D:55:34:B1:03:47
Certificate issuer:       /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial:       0188201F68E3D39F4F517051FF641EC7E2D4
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/sfmd8HCeaB6iU8K2yZNtVTSxA0c.roa
Signing time:             Mon 15 May 2023 15:55:09 +0000
ROA not before:           Mon 15 May 2023 15:55:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     139341
IP address blocks:        86.51.92.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:20:1f:68:e3:d3:9f:4f:51:70:51:ff:64:1e:c7:e2:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
        Validity
            Not Before: May 15 15:55:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b1f99df0709e681ea253c2b6c9936d5534b10347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:19:e1:f5:a4:2a:ee:95:3c:39:c3:59:83:ee:
                    ee:62:99:bd:75:33:f5:ed:2e:df:1c:8c:83:6c:83:
                    30:33:fc:57:c4:51:97:6d:04:64:a6:5b:8b:42:44:
                    8d:05:1d:e4:1c:4d:cf:79:3a:5f:f5:d2:b5:6b:9e:
                    38:5b:b5:4c:51:dd:91:ce:70:fa:0d:6b:de:24:c6:
                    1c:33:cd:44:34:71:2a:12:3c:d1:2d:f2:b6:55:46:
                    06:d2:fc:66:89:7f:17:a4:43:8a:84:19:f3:e0:dd:
                    a1:3d:02:67:69:20:68:d7:ac:e2:b4:9c:bd:69:30:
                    6e:18:fd:61:7c:7a:48:3b:33:b9:b9:35:a2:8c:22:
                    9f:40:1f:aa:20:82:97:65:fa:6d:a2:b2:29:ce:13:
                    f8:cf:f8:38:51:11:82:6d:84:8e:00:ce:8d:0d:06:
                    5f:fe:1c:03:40:f3:d8:3d:96:c1:1a:6a:83:cd:85:
                    77:ca:46:f8:67:a5:b4:5f:0d:90:d5:75:8e:68:ce:
                    20:9a:96:bc:30:4e:04:a4:96:ee:28:60:5f:0b:9a:
                    01:fb:fa:75:08:77:f9:48:07:b9:af:14:d6:82:68:
                    ae:56:05:e5:b5:27:f9:62:06:b7:fb:87:c4:e9:8b:
                    6b:c5:2e:99:ff:de:8e:f2:c7:ab:42:c8:65:85:e7:
                    b5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F9:9D:F0:70:9E:68:1E:A2:53:C2:B6:C9:93:6D:55:34:B1:03:47
            X509v3 Authority Key Identifier:
                keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/sfmd8HCeaB6iU8K2yZNtVTSxA0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.51.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:2b:9b:6d:1d:28:9c:30:7c:71:53:3d:ec:17:93:16:c7:06:
         b3:d7:7a:15:5b:6f:4e:06:14:db:ca:b3:ee:55:33:21:0a:5e:
         ff:64:fc:c2:17:ab:f4:66:3a:7a:c7:4e:d2:40:3e:28:b0:83:
         aa:8f:96:b9:4f:ff:e8:4e:d2:dd:cd:79:03:74:87:01:b3:c5:
         fe:2e:15:27:53:45:99:50:ec:df:05:50:8f:da:be:01:b7:56:
         16:99:5d:dd:9f:1a:21:25:0b:61:38:ba:83:27:4e:df:15:b1:
         90:c7:8a:ea:41:1f:01:22:14:6d:ad:24:3a:97:27:14:53:a1:
         35:fc:f3:6b:54:74:b2:1b:95:12:d1:95:41:de:89:2d:81:57:
         d7:7f:98:09:1d:63:57:2e:eb:12:63:0f:b2:1a:95:d3:a0:3c:
         fc:9b:2a:7b:92:40:e9:e6:52:1b:63:03:3b:d1:7d:a0:8f:41:
         46:41:21:3c:b2:93:bd:2b:fa:f2:e2:21:81:83:c1:18:9b:0a:
         a9:ae:db:ee:73:dd:6b:f4:f1:a7:d2:79:77:fb:d5:63:9d:de:
         74:b7:e2:96:db:14:1b:93:b4:78:1e:92:ab:f9:c4:92:48:ef:
         28:23:9d:d0:e1:f7:6d:aa:ee:64:b8:d6:d5:03:ee:02:4f:76:
         d5:19:a9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:14 2024 by rpki-client on console-fra.rpki-client.org