Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/c1zcJc6E_qjlKJNO3jVWby0JWGE.roa
File:                     c1zcJc6E_qjlKJNO3jVWby0JWGE.roa (raw, json)
Hash identifier:          9xi7U0kUSYstAO3aJoMKHkRoysPwiEGaO90znJ9DMk8=
Subject key identifier:   73:5C:DC:25:CE:84:FE:A8:E5:28:93:4E:DE:35:56:6F:2D:09:58:61
Certificate issuer:       /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial:       01861652CB52E72C0143BB67113B88CDC9F2
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/c1zcJc6E_qjlKJNO3jVWby0JWGE.roa
Signing time:             Fri 03 Feb 2023 08:09:29 +0000
ROA not before:           Fri 03 Feb 2023 08:09:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208046
IP address blocks:        88.216.187.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Sep 2023 18:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:16:52:cb:52:e7:2c:01:43:bb:67:11:3b:88:cd:c9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
        Validity
            Not Before: Feb  3 08:09:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=735cdc25ce84fea8e528934ede35566f2d095861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b4:b1:2e:9b:0f:70:b4:ec:1c:f9:47:20:e1:
                    f8:7e:2e:04:28:e7:7b:9d:81:79:46:0e:73:4c:18:
                    1f:a1:ba:64:e7:27:82:66:56:5b:81:e5:6a:72:58:
                    5a:40:45:62:8f:c2:3c:c5:b1:68:30:0d:01:91:f8:
                    9c:64:2d:9f:7b:7a:22:be:42:87:b5:b2:32:8e:69:
                    28:f7:a9:7c:7d:13:3d:36:1f:0d:dd:de:a0:09:5d:
                    9f:ad:39:cf:a7:27:3a:7b:f0:c3:7b:e3:95:08:c3:
                    77:9c:75:b6:5d:4d:48:9c:20:49:6c:80:5d:51:0d:
                    a3:af:08:01:1d:50:d7:3c:43:bf:28:c2:8a:86:5d:
                    c4:92:fc:f6:62:9c:e0:1f:f3:a7:57:61:a9:9f:77:
                    e0:0a:af:ff:df:1e:0f:9c:31:6d:be:af:f4:cf:49:
                    c5:c2:25:60:0c:2e:d2:1a:af:64:a2:d3:16:7d:ca:
                    73:c7:c8:94:ee:5f:6e:c1:66:58:b4:41:9b:72:b8:
                    c3:de:24:d1:73:de:11:4c:b5:7d:f4:66:6d:51:fa:
                    07:de:99:fd:8f:29:71:90:b7:8d:68:c9:5d:89:fa:
                    36:49:63:d9:8a:91:4d:36:84:dd:e5:cd:c1:31:7c:
                    b2:7c:2a:0a:7c:ad:82:39:ff:11:05:93:39:e7:f7:
                    0d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5C:DC:25:CE:84:FE:A8:E5:28:93:4E:DE:35:56:6F:2D:09:58:61
            X509v3 Authority Key Identifier:
                keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/c1zcJc6E_qjlKJNO3jVWby0JWGE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.216.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:ea:84:b1:5e:65:07:87:3b:54:54:da:ed:71:9c:5f:1f:76:
         43:fc:df:bd:9f:a0:43:a9:b3:5c:55:dd:1e:1c:71:cf:c0:26:
         1a:d4:4e:2d:82:6d:83:93:76:57:cd:60:1d:48:54:6c:de:80:
         c3:71:73:2d:f4:ce:9d:51:bd:54:23:e9:db:fc:06:48:d1:a0:
         8e:51:69:08:a4:95:41:67:f2:50:11:1a:f3:1f:48:17:b6:63:
         04:d8:22:d9:24:69:82:c7:1f:cb:e8:ac:f5:15:7a:6c:52:1b:
         fe:03:2b:00:15:36:41:5b:31:be:2c:61:8d:ec:50:e2:1c:ae:
         93:04:16:09:a5:47:c4:d5:da:87:68:54:ef:f5:42:06:34:5f:
         3c:c6:bb:1e:bc:7b:d5:11:f2:d6:1d:e3:e7:be:0a:23:27:2b:
         dd:86:0c:ff:e7:e8:67:de:30:2c:f6:59:51:55:69:c4:3d:4c:
         5c:4a:b3:ac:2b:67:31:f1:38:96:b2:c1:5c:0c:0f:d4:6a:29:
         0b:61:aa:13:f7:ed:11:34:b8:9b:20:24:65:5a:d2:26:2f:55:
         84:f7:93:9b:e3:f4:c1:26:52:0c:54:90:dd:32:51:c5:49:fb:
         08:71:8d:35:c1:2f:d8:be:1d:ed:55:5d:47:62:66:1d:18:fa:
         05:a3:5a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:29 2024 by rpki-client on console-ams.rpki-client.org