Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/0NPmYL7KHJuvCmzdBpoAq_Xp7Ig.roa
File:                     0NPmYL7KHJuvCmzdBpoAq_Xp7Ig.roa (raw, json)
Hash identifier:          XSGwcT0qQDJb3NEOagxO0mLKXnC2DOIZuecfUd15liY=
Subject key identifier:   D0:D3:E6:60:BE:CA:1C:9B:AF:0A:6C:DD:06:9A:00:AB:F5:E9:EC:88
Certificate issuer:       /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial:       019037C7BA15EA77B751702B253362DF52FB
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/0NPmYL7KHJuvCmzdBpoAq_Xp7Ig.roa
Signing time:             Thu 20 Jun 2024 22:32:34 +0000
ROA not before:           Thu 20 Jun 2024 22:32:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     201925
IP address blocks:        94.246.179.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 05 Jul 2024 04:40:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:c7:ba:15:ea:77:b7:51:70:2b:25:33:62:df:52:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
        Validity
            Not Before: Jun 20 22:32:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d0d3e660beca1c9baf0a6cdd069a00abf5e9ec88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ca:06:6e:8a:89:f5:f2:a8:eb:a9:d6:12:a2:
                    af:c7:db:58:51:d3:20:4a:5d:6c:ef:3e:e7:94:6e:
                    85:55:de:b1:67:d2:47:68:1e:8e:ff:53:37:eb:3e:
                    8c:89:74:4a:73:1c:ef:be:88:41:fd:88:a5:96:4f:
                    00:37:55:dc:47:22:86:87:9e:6b:57:ec:b5:d7:63:
                    db:6d:db:41:12:65:a3:c1:9a:53:5e:f1:b5:9b:dc:
                    25:f5:cd:a9:d0:a7:93:7c:98:ec:8c:c6:c6:ff:52:
                    cf:90:10:80:cc:69:47:ad:ef:35:79:43:ed:4d:53:
                    ea:eb:26:dd:7c:5c:0f:a1:59:b8:69:6d:93:c6:3e:
                    ef:20:be:09:f3:51:9a:de:49:f5:2d:bb:0f:48:a5:
                    83:e6:90:31:f8:6c:24:58:06:c4:b7:b4:9c:16:16:
                    9e:0a:bd:55:7a:be:ad:11:98:ee:c2:61:fc:a0:ad:
                    fb:bd:42:67:12:ae:b1:ef:97:d4:f0:27:ed:2c:86:
                    03:98:83:82:0b:43:c3:f6:e4:84:94:04:ad:f9:30:
                    7c:fa:14:dd:65:7a:e1:26:2f:42:60:98:f6:02:2d:
                    45:1f:29:e4:e6:e2:85:7c:46:83:7f:49:ef:df:18:
                    91:09:8d:d6:3f:44:f2:5b:e2:6b:d3:d1:a1:b1:82:
                    f0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D3:E6:60:BE:CA:1C:9B:AF:0A:6C:DD:06:9A:00:AB:F5:E9:EC:88
            X509v3 Authority Key Identifier:
                keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/0NPmYL7KHJuvCmzdBpoAq_Xp7Ig.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.246.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:52:de:a0:0f:91:81:a7:30:52:73:d1:b1:80:bd:87:01:53:
         fc:e3:69:b4:d8:53:e5:22:49:7d:50:5f:c5:50:19:6f:17:b8:
         6e:78:98:1f:4e:4f:28:30:2d:d3:b3:be:7a:c1:7e:9d:8b:03:
         9c:dc:e1:22:06:85:5b:fa:1d:78:b8:6c:a4:64:01:ea:72:e2:
         6e:47:88:72:29:81:62:f8:ff:bc:5e:e1:f0:89:0f:96:64:73:
         b5:86:fa:d5:83:59:7e:55:e7:93:8e:19:31:0d:47:8b:a7:3e:
         5e:b1:62:4f:8e:fa:8a:f6:40:8f:5a:e8:b1:f4:43:7f:87:40:
         1a:bf:13:97:2d:2d:92:22:a9:5b:ee:10:74:63:4b:85:c0:1c:
         1e:dd:3a:fd:87:34:c8:c3:d9:66:aa:47:13:9f:70:7e:48:6f:
         bb:fd:9a:0f:0f:c2:5a:53:78:e6:9c:e1:80:c0:58:f5:11:db:
         91:65:d8:5e:dc:44:c7:57:15:66:09:5d:6f:96:7f:05:3d:ad:
         c7:99:61:08:f2:07:20:0d:22:ec:5c:7e:09:e3:c7:e5:14:01:
         cd:7a:41:b3:c7:40:b5:24:e9:6d:4d:62:76:59:ac:97:86:29:
         90:2d:8c:89:38:83:34:68:61:61:31:ac:72:5b:f1:9a:ac:16:
         bf:dd:75:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 06:18:42 2024 by rpki-client on console-ams.rpki-client.org