Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/zuYEouCedfmIC7x3SAjV2SZdWVw.roa
File:                     zuYEouCedfmIC7x3SAjV2SZdWVw.roa (raw, json)
Hash identifier:          QhSMOKZ35scsOXEhwnWeDLa2lT0qE59N6pF0Rt8hLEU=
Subject key identifier:   CE:E6:04:A2:E0:9E:75:F9:88:0B:BC:77:48:08:D5:D9:26:5D:59:5C
Certificate issuer:       /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial:       018601F7E4DD4F3215BA66F547A381805A9F
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/zuYEouCedfmIC7x3SAjV2SZdWVw.roa
Signing time:             Mon 30 Jan 2023 09:17:47 +0000
ROA not before:           Mon 30 Jan 2023 09:17:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200482
IP address blocks:        37.114.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 31 Aug 2023 16:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:01:f7:e4:dd:4f:32:15:ba:66:f5:47:a3:81:80:5a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
        Validity
            Not Before: Jan 30 09:17:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cee604a2e09e75f9880bbc774808d5d9265d595c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3f:57:eb:a3:99:a9:a4:17:0d:00:1b:65:21:
                    8a:3b:13:a2:81:bb:82:7b:d8:5b:97:04:ae:d3:75:
                    55:36:33:08:b4:7e:bc:65:28:22:ea:42:4e:98:f6:
                    13:ce:ef:e5:e3:2e:ed:a9:cb:84:37:06:1d:41:eb:
                    22:69:0e:b9:57:84:e1:fa:c3:32:a1:72:44:49:f9:
                    d1:3d:98:2b:44:98:aa:44:1d:87:36:25:ac:1b:05:
                    fc:a0:45:35:a1:57:48:02:77:0d:26:17:85:7d:93:
                    cf:7a:f5:76:b3:4b:7e:43:14:24:da:9c:e6:a6:c4:
                    3f:f0:ae:03:f1:6b:fe:4e:aa:3b:28:4e:72:38:cb:
                    0f:3b:06:a3:24:29:93:73:a3:8b:87:e6:3d:4b:16:
                    f0:65:5d:ad:7d:18:46:c3:6b:ef:c5:9b:b5:13:40:
                    a1:12:37:be:8e:e0:aa:da:e8:9e:d5:e4:05:6c:e9:
                    ef:0a:09:8f:17:7c:34:90:79:72:62:aa:4c:ba:4d:
                    76:f4:81:40:82:2e:31:81:b9:a2:a0:7d:10:ec:dc:
                    91:71:c8:05:da:54:89:16:d7:e3:f1:5c:4f:99:df:
                    59:f3:b1:88:b8:23:40:a3:ef:1c:c2:56:8e:12:37:
                    3f:40:d1:12:79:93:84:a5:de:7c:4d:32:4b:e8:bb:
                    96:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E6:04:A2:E0:9E:75:F9:88:0B:BC:77:48:08:D5:D9:26:5D:59:5C
            X509v3 Authority Key Identifier:
                keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/zuYEouCedfmIC7x3SAjV2SZdWVw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.114.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:84:c7:39:9a:2c:b0:7b:99:89:fa:c5:f7:2d:d8:6e:d3:c4:
         18:a5:45:bb:d8:de:c0:15:c9:60:26:c5:57:2b:a8:cc:ae:d3:
         1c:3a:56:6d:a3:ff:f8:ee:7a:a0:ee:77:92:50:22:33:c7:c1:
         56:fe:31:ec:a0:0b:ab:e1:40:eb:a5:89:22:54:73:e6:de:2b:
         01:1d:e3:9f:21:5e:f1:65:f8:ce:95:2f:01:29:00:11:96:41:
         07:77:1a:9b:fd:18:75:c6:20:13:9f:6c:73:ae:07:57:40:be:
         b1:a5:94:48:0f:00:7d:da:c4:de:e6:35:bb:09:b9:bd:a3:35:
         63:f0:8d:90:7b:d8:fe:3d:a0:0d:c5:df:48:9f:0a:56:0c:91:
         6a:3d:3d:87:d7:97:b6:0b:31:11:6e:3e:b8:ee:c8:9d:63:61:
         15:49:33:bb:40:27:c2:37:ce:91:ce:68:92:9b:c0:79:d5:e5:
         44:7e:14:a7:ac:66:ee:e7:ef:ac:3b:63:c8:69:4d:d3:31:43:
         13:63:09:47:87:49:02:34:37:ac:94:c8:a3:5d:03:9c:7e:53:
         67:48:53:e8:3a:3a:cf:74:3e:71:d1:8a:5a:05:81:60:d1:03:
         f4:d1:92:53:3f:6b:57:64:ea:18:ae:ec:1b:a5:d4:3e:a0:8e:
         dc:48:00:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:57 2024 by rpki-client on console-fra.rpki-client.org