Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/5N67LC-uNi3UXAfrTDc4w2Aoeyg.roa
File:                     5N67LC-uNi3UXAfrTDc4w2Aoeyg.roa (raw, json)
Hash identifier:          sICInGqNgyDKsfJMYdvwn8FHwqxcB9fCVS3LySINLzI=
Subject key identifier:   E4:DE:BB:2C:2F:AE:36:2D:D4:5C:07:EB:4C:37:38:C3:60:28:7B:28
Certificate issuer:       /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial:       01856B936214EA78B881E0CCBABB37911C75
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/5N67LC-uNi3UXAfrTDc4w2Aoeyg.roa
Signing time:             Sun 01 Jan 2023 04:24:58 +0000
ROA not before:           Sun 01 Jan 2023 04:24:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     40934
IP address blocks:        82.98.199.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:93:62:14:ea:78:b8:81:e0:cc:ba:bb:37:91:1c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
        Validity
            Not Before: Jan  1 04:24:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e4debb2c2fae362dd45c07eb4c3738c360287b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:96:8d:5e:73:70:81:54:ba:07:e7:c4:e3:
                    c3:2b:17:d0:85:bd:42:b3:a2:25:5a:ed:28:72:e4:
                    ca:df:6c:ea:17:e0:fb:fb:24:2f:6e:31:93:17:9b:
                    b8:27:3d:e6:2f:d5:48:41:ef:74:63:6f:34:b5:99:
                    75:b1:85:a4:dd:df:e1:65:d9:b8:4e:1b:62:46:c7:
                    d7:1b:da:62:b0:1d:48:81:e8:73:d9:8f:4f:60:ad:
                    c1:3b:a4:d8:52:1f:bf:d3:f5:1e:db:ea:19:6b:95:
                    9a:86:00:ef:36:c8:5b:28:9c:43:8a:9f:33:d5:64:
                    16:b6:49:e3:97:b0:74:6b:7f:cd:be:43:f9:e8:50:
                    eb:31:47:ef:65:53:0e:08:e4:21:a8:89:20:78:fb:
                    07:8a:83:9f:a8:f7:f1:aa:de:ee:7a:cf:9f:15:31:
                    ac:bf:ac:b6:df:c2:7c:34:0f:39:82:d6:32:e2:e3:
                    ce:41:cc:1d:a4:79:f4:33:fe:dd:8c:85:ec:05:4e:
                    df:37:6a:bd:2e:ef:fd:b4:64:b2:be:c1:c6:fb:7d:
                    3b:d2:e8:59:1d:41:86:ec:89:9b:ce:0a:c7:fb:3f:
                    99:08:bd:1e:c0:dc:38:d0:3c:1a:43:9f:0d:bd:ce:
                    38:ff:9e:06:3c:70:2d:ee:ac:62:ad:de:31:c0:be:
                    88:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DE:BB:2C:2F:AE:36:2D:D4:5C:07:EB:4C:37:38:C3:60:28:7B:28
            X509v3 Authority Key Identifier:
                keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/5N67LC-uNi3UXAfrTDc4w2Aoeyg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.98.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:f4:fe:34:d1:91:46:e5:2a:cf:8e:b7:e6:4a:79:60:d8:14:
         c6:cf:a0:93:8b:8f:e2:55:96:47:6d:f7:1a:ef:10:24:98:73:
         53:d6:6c:a7:0f:7e:7b:c9:f2:01:7b:6c:60:a8:73:57:9b:d1:
         fc:90:b6:29:a8:78:89:b9:d7:11:dc:6b:f6:e5:5e:01:cc:9a:
         00:3d:99:d1:ba:84:86:7c:c5:35:dd:42:83:06:b4:5a:f3:8c:
         17:85:94:6b:df:94:2b:17:0d:ca:cd:df:bf:8f:a8:8a:4b:d3:
         6c:99:06:af:f3:a2:ec:68:51:2a:65:09:f5:0c:37:3c:98:a1:
         1e:d1:a8:90:8b:d9:82:51:4a:27:4c:81:dd:b1:d4:e6:34:23:
         e7:f6:b8:f0:98:32:72:28:c9:96:4d:7a:bd:69:ed:25:1c:2b:
         6b:7d:f5:11:a1:fc:68:dd:68:82:e4:e0:5f:10:e2:fc:eb:e9:
         61:49:c8:75:82:d8:e9:67:43:9a:c9:f2:d2:dc:3f:0f:cd:21:
         fd:f1:40:35:f7:02:a5:83:70:9f:ab:28:89:22:d9:63:3b:0a:
         60:ac:1b:22:a0:14:46:01:76:f2:21:dd:0b:48:4a:55:ba:d2:
         54:87:96:2d:af:44:c1:58:b1:84:ac:c1:38:a0:f1:c0:4e:bd:
         3c:5a:6e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:18 2024 by rpki-client on console-ams.rpki-client.org