Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/3ULnY_BR--LwFClugykvsMnO2Rg.roa
File:                     3ULnY_BR--LwFClugykvsMnO2Rg.roa (raw, json)
Hash identifier:          IHZ4sSt8Se+UcPUo+AYDLHrLMP+kf24O4b+aebLLqZI=
Subject key identifier:   DD:42:E7:63:F0:51:FB:E2:F0:14:29:6E:83:29:2F:B0:C9:CE:D9:18
Certificate issuer:       /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial:       018570029262C5FA32707220902DFC968A74
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/3ULnY_BR--LwFClugykvsMnO2Rg.roa
Signing time:             Mon 02 Jan 2023 01:04:54 +0000
ROA not before:           Mon 02 Jan 2023 01:04:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206050
IP address blocks:        188.132.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 20 Oct 2023 09:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:02:92:62:c5:fa:32:70:72:20:90:2d:fc:96:8a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
        Validity
            Not Before: Jan  2 01:04:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dd42e763f051fbe2f014296e83292fb0c9ced918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cc:af:19:f5:b3:49:4e:25:4d:b4:58:68:d6:
                    7c:f7:2b:50:c7:43:26:df:de:6e:3f:16:c5:9e:33:
                    a3:39:da:92:db:7b:f0:66:ad:da:30:a5:64:b5:c8:
                    67:dd:69:29:22:6c:66:1c:7d:1b:b8:77:5a:e1:0e:
                    1b:76:e2:f5:ed:1d:f9:f0:6b:45:70:9f:4f:95:97:
                    bc:f7:1f:d0:63:13:61:28:35:f6:a7:2f:a9:e9:3f:
                    81:7b:27:d5:5f:17:f1:06:46:6f:e7:7c:a5:d4:e6:
                    87:79:e0:17:89:de:f3:20:38:85:5f:a7:54:80:0b:
                    96:99:5d:64:27:59:f0:14:3b:21:d9:a2:43:52:a2:
                    29:4f:9c:e5:4c:29:3a:72:89:ea:11:19:86:5d:80:
                    2e:27:77:47:1f:b9:0e:ff:f3:93:86:4b:11:db:7e:
                    97:b2:33:3c:80:58:95:73:c9:96:24:44:49:06:58:
                    7e:2e:18:e1:a2:57:5e:99:bb:a6:3a:3b:17:12:31:
                    7b:bd:5f:46:3c:25:3f:23:08:10:ea:fb:bc:43:b7:
                    2d:9c:fe:78:e8:e1:5a:e4:26:7b:04:65:59:56:97:
                    c2:f0:62:dd:69:5a:77:d7:c9:38:39:3a:ee:5f:10:
                    ff:43:2e:e6:87:59:e9:75:85:6d:03:c3:3e:1d:2b:
                    86:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:42:E7:63:F0:51:FB:E2:F0:14:29:6E:83:29:2F:B0:C9:CE:D9:18
            X509v3 Authority Key Identifier:
                keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/3ULnY_BR--LwFClugykvsMnO2Rg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.132.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:a9:f0:cd:42:54:48:b6:ab:ef:f3:2b:ac:96:80:7e:15:b9:
         87:9d:bf:c5:7b:60:a5:6e:78:d7:89:ab:14:c4:b1:72:6c:c8:
         8b:d3:8f:a1:bd:4c:16:d0:30:ad:5c:35:47:20:7d:0c:46:28:
         18:3f:4d:88:11:74:e5:3c:0a:88:86:3a:13:81:12:38:a0:6a:
         eb:53:ac:35:fb:d7:4b:38:74:33:60:ea:f4:2e:ca:83:05:f6:
         85:27:2a:99:1b:ad:3a:18:df:59:a2:be:53:f5:51:91:b6:7f:
         39:d7:0f:66:74:73:3f:21:b8:b2:af:00:56:1b:bc:f4:55:81:
         eb:05:5b:ef:a3:e9:04:8c:e6:ec:9e:64:51:1d:e1:8f:eb:e7:
         d2:01:4f:c3:ef:72:be:d5:7b:16:d0:f7:1f:f4:ee:35:23:42:
         e0:f3:ca:f6:10:5a:66:28:13:3e:cf:d4:46:09:50:54:db:b3:
         c3:98:99:8c:23:75:c4:ef:1f:fd:29:fa:25:38:7a:a9:86:2a:
         1a:f8:f8:1b:d2:ec:4d:66:60:26:b1:62:b2:b0:e8:e0:1d:c9:
         db:51:b1:33:2d:08:da:e8:25:d0:c5:5f:7b:b0:30:bc:17:95:
         0b:84:8b:57:ff:45:bc:69:eb:43:1e:7b:d5:ea:57:51:88:5b:
         48:65:e5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:43 2024 by rpki-client on console-fra.rpki-client.org