Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/8tqubBTsyOOmQRWUrPwkEfbj_bY.roa
File:                     8tqubBTsyOOmQRWUrPwkEfbj_bY.roa (raw, json)
Hash identifier:          W5J/+d8v11w6egoy7RQV/atLCjHPEuj1ZEvMwF5tOSs=
Subject key identifier:   F2:DA:AE:6C:14:EC:C8:E3:A6:41:15:94:AC:FC:24:11:F6:E3:FD:B6
Certificate issuer:       /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial:       01865EBB48EB4ED7101D9751222A524808EE
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/8tqubBTsyOOmQRWUrPwkEfbj_bY.roa
Signing time:             Fri 17 Feb 2023 09:36:17 +0000
ROA not before:           Fri 17 Feb 2023 09:36:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211936
IP address blocks:        194.36.32.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 17 Feb 2023 11:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:5e:bb:48:eb:4e:d7:10:1d:97:51:22:2a:52:48:08:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
        Validity
            Not Before: Feb 17 09:36:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f2daae6c14ecc8e3a6411594acfc2411f6e3fdb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f4:86:3b:28:fc:27:37:95:85:1f:4d:28:50:
                    da:db:98:89:76:b6:25:bb:93:99:ba:24:74:d2:99:
                    60:a3:71:ed:f0:a5:1b:62:a1:88:34:33:7a:08:35:
                    93:a2:e3:19:be:9c:e0:b2:7d:9e:4b:07:ab:8e:6b:
                    22:a9:45:a3:6a:71:9e:f6:31:f7:5e:2f:3b:7e:07:
                    11:cc:47:e6:16:b9:a6:30:79:e8:9b:25:94:17:60:
                    6d:ec:4c:c9:48:f0:51:83:f4:fe:f3:4b:01:20:c4:
                    5d:d0:06:e7:97:62:96:6e:35:8f:5b:cf:6b:18:55:
                    60:cd:2e:4d:e4:fa:76:50:ca:fc:f0:b0:37:03:c1:
                    8c:08:9d:5f:ec:67:7a:2e:a4:a9:98:15:72:e5:c2:
                    77:da:c5:03:79:c4:17:05:04:a5:4f:2d:7d:5f:59:
                    c0:2f:62:19:e4:71:54:58:5b:99:a2:df:ce:fb:57:
                    05:23:d0:1e:6b:c0:d3:3c:4c:74:d6:ab:87:bb:9e:
                    df:64:f4:21:18:37:b3:72:e8:6b:b1:08:58:f3:8b:
                    75:2c:a7:0c:30:3a:7a:e1:c4:90:93:ad:fe:bd:5c:
                    fd:a5:66:44:2d:f3:02:cc:2c:63:71:b9:9d:72:d4:
                    4c:48:df:13:36:f9:bb:e1:78:7a:f6:75:fc:96:70:
                    cf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DA:AE:6C:14:EC:C8:E3:A6:41:15:94:AC:FC:24:11:F6:E3:FD:B6
            X509v3 Authority Key Identifier:
                keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/8tqubBTsyOOmQRWUrPwkEfbj_bY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.36.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:8a:51:b7:eb:98:1d:24:7f:52:1b:37:dc:cf:0c:7f:90:0c:
         93:2f:69:15:5a:b6:1c:aa:a2:ca:c3:5d:ac:94:f9:e6:7f:70:
         38:89:ad:b4:db:1d:b1:84:35:3a:f8:3d:8b:87:d5:b5:60:9e:
         63:28:e6:06:64:4f:c3:4c:4e:1e:58:fc:53:f0:a7:82:fe:c2:
         29:e4:6c:5f:36:a0:65:7e:36:8d:6d:94:cd:86:81:12:3f:c0:
         6c:91:e0:89:69:fd:16:34:64:e4:69:36:6e:23:de:af:e5:4c:
         64:78:c7:45:7e:70:29:c7:73:24:67:49:77:60:bf:5c:57:2f:
         97:fa:6b:7e:53:8f:bf:8f:3e:84:e8:93:ff:20:20:bd:af:3e:
         d9:7f:a5:34:81:d9:00:0d:79:f0:1c:dc:36:f4:bb:05:73:dc:
         66:16:c3:95:2f:df:ce:e7:e1:db:85:dc:45:77:c3:3e:3a:a5:
         a0:30:06:85:f5:4f:b3:8d:d1:cc:cf:a9:d2:66:48:0f:f8:b9:
         10:81:86:e6:49:b6:ed:f3:fa:43:45:22:8e:a8:19:6a:53:ba:
         90:99:df:ad:e2:4e:75:d7:d5:30:fe:85:db:db:9b:07:6d:ef:
         23:1e:88:b7:77:63:99:97:4a:7c:bb:9d:9c:dd:b8:6d:21:16:
         4b:0a:b6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:38 2024 by rpki-client on console-ams.rpki-client.org