Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/b57IfzU5GE7KR5EDbTcfiFI7CsA.roa
File:                     b57IfzU5GE7KR5EDbTcfiFI7CsA.roa (raw, json)
Hash identifier:          ovDdp0zkSzEz1JkoWGvGEruFdIoT89UzdG576FplMl0=
Subject key identifier:   6F:9E:C8:7F:35:39:18:4E:CA:47:91:03:6D:37:1F:88:52:3B:0A:C0
Certificate issuer:       /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial:       018A087F2789C6385CAE172C587F2E188C81
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/b57IfzU5GE7KR5EDbTcfiFI7CsA.roa
Signing time:             Fri 18 Aug 2023 11:54:25 +0000
ROA not before:           Fri 18 Aug 2023 11:54:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        84.32.44.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 21 Aug 2023 05:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:08:7f:27:89:c6:38:5c:ae:17:2c:58:7f:2e:18:8c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
        Validity
            Not Before: Aug 18 11:54:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6f9ec87f3539184eca4791036d371f88523b0ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:79:66:a4:3d:41:0a:93:6b:17:1b:a0:cf:9b:
                    a4:65:76:15:31:2f:91:43:c2:9f:70:79:59:6f:61:
                    75:df:42:63:29:0f:3d:cb:10:7d:10:06:a7:2b:3c:
                    50:f0:f2:a1:4e:b9:00:03:c7:11:6f:8d:1d:c7:6f:
                    ee:93:32:ed:f6:fb:08:ff:a2:0e:fc:8b:e3:a6:12:
                    1a:d1:c1:03:e1:7e:76:94:24:85:ac:af:a8:39:23:
                    4e:01:01:16:36:6f:66:c4:27:3d:ec:62:f4:eb:ce:
                    c3:e2:eb:4e:6a:51:06:7e:cc:9e:1d:b4:95:02:45:
                    47:c9:53:ce:a2:e6:2f:19:56:2b:a2:80:ec:08:92:
                    ae:8d:24:bb:bc:c1:3c:b0:1c:ff:51:80:07:4b:f8:
                    d4:cf:5f:18:84:89:03:98:16:7a:04:72:e3:37:5a:
                    99:79:d3:49:a1:09:26:a4:c0:4f:ac:92:ed:46:84:
                    07:51:62:d6:d0:bd:47:4e:40:b0:ed:af:37:97:d6:
                    ad:f8:dc:a5:b9:d2:44:9f:76:71:37:32:2d:83:b1:
                    ff:0a:ad:9c:ab:bc:0a:77:44:a3:28:f1:66:20:05:
                    ce:77:a8:14:81:14:24:34:1c:d7:3a:1e:33:23:bc:
                    68:e8:c2:6c:46:20:f9:02:75:00:41:72:fb:66:bb:
                    a7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9E:C8:7F:35:39:18:4E:CA:47:91:03:6D:37:1F:88:52:3B:0A:C0
            X509v3 Authority Key Identifier:
                keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/b57IfzU5GE7KR5EDbTcfiFI7CsA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.32.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:ec:92:40:0d:d4:0f:71:ec:be:71:5f:b1:e0:93:67:22:28:
         60:cb:46:29:72:67:27:f0:f3:20:00:8e:4b:f7:0b:04:1c:8d:
         57:ec:66:26:66:0a:3a:ed:0b:a0:15:43:86:32:ad:ae:1f:4a:
         98:d3:9a:53:f3:18:3f:f4:fb:55:5d:2f:35:5e:fe:ac:7f:90:
         32:54:62:86:df:34:1a:ff:df:11:57:1a:de:80:7b:a2:48:db:
         cf:d7:29:59:da:83:6b:56:13:3f:de:db:4c:9d:3a:3b:e0:ef:
         b0:0c:30:a7:e3:be:13:1f:a4:60:73:3b:65:e4:cd:aa:14:68:
         12:77:6a:c9:8a:52:41:6b:d6:95:58:f1:2d:b8:e0:9f:3d:88:
         7a:b7:07:ef:72:f9:64:d2:d1:3b:1b:23:f2:08:26:6c:4d:ab:
         3b:16:62:c5:b7:73:af:41:f8:85:24:d7:97:c3:14:fe:ef:30:
         5d:6a:b3:96:8f:a8:0c:00:12:8a:32:ed:21:60:16:19:32:44:
         92:0d:a7:dd:01:bd:37:1e:cf:37:13:3f:1c:b2:c3:cd:83:c9:
         07:28:04:dc:e7:44:2b:1e:06:79:9c:09:7c:01:9b:92:4e:ff:
         46:83:f7:49:b0:11:1b:6a:8c:18:fc:19:f5:96:bf:b7:41:58:
         62:7f:6c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:29 2024 by rpki-client on console-ams.rpki-client.org