Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/GRDhrSySmZNwYsTOdHpLmJvG_AI.roa
File:                     GRDhrSySmZNwYsTOdHpLmJvG_AI.roa (raw, json)
Hash identifier:          fg7qjfrtOyfHo8hgGca5fDlrqId6SpnV3BShZeKb/N4=
Subject key identifier:   19:10:E1:AD:2C:92:99:93:70:62:C4:CE:74:7A:4B:98:9B:C6:FC:02
Certificate issuer:       /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial:       018B1EF468EE8740BE2E3616D3F09904154E
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/GRDhrSySmZNwYsTOdHpLmJvG_AI.roa
Signing time:             Wed 11 Oct 2023 13:36:55 +0000
ROA not before:           Wed 11 Oct 2023 13:36:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     54252
IP address blocks:        185.81.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 13 Oct 2023 11:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:1e:f4:68:ee:87:40:be:2e:36:16:d3:f0:99:04:15:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
        Validity
            Not Before: Oct 11 13:36:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1910e1ad2c9299937062c4ce747a4b989bc6fc02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:24:c8:f1:2f:cc:22:68:f7:b7:67:de:3e:a6:
                    35:14:62:00:d8:1e:2c:95:a3:c8:7a:1f:77:69:ec:
                    7f:70:f1:12:63:0a:6f:7b:f1:ee:d8:d2:6c:36:54:
                    81:94:ec:5d:45:79:40:cc:00:61:b4:bc:6a:16:c2:
                    60:9e:96:19:56:92:24:df:2a:92:78:f9:1f:e2:93:
                    ff:9d:e0:1c:7f:96:07:18:15:21:4f:07:87:24:d3:
                    6a:80:33:b1:33:61:9f:32:30:ae:4c:f7:ba:cf:a0:
                    f0:52:d8:cc:17:e0:da:ac:68:76:f1:61:73:2a:b6:
                    ba:fc:38:c0:2b:38:80:f9:94:a1:b7:cf:70:88:7f:
                    14:46:f5:a8:91:d5:e5:3b:2a:46:09:57:2c:0e:6a:
                    76:1a:55:88:c8:4c:d0:59:ca:e0:23:f6:61:fd:4b:
                    75:fe:de:d0:58:38:e4:80:50:a4:22:a5:64:75:d6:
                    30:d9:df:cf:58:19:3b:24:cf:3d:b1:e8:ad:52:39:
                    f1:1e:1a:fb:d9:73:2f:3a:ab:72:96:ac:9e:52:c6:
                    30:c2:12:be:18:62:61:bb:e5:58:8e:e1:f9:d0:3f:
                    7d:a2:2b:43:8c:f0:57:d3:23:27:12:99:1e:bd:3e:
                    85:a5:c6:75:e2:84:c2:b7:39:7b:19:19:47:20:d0:
                    2f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:10:E1:AD:2C:92:99:93:70:62:C4:CE:74:7A:4B:98:9B:C6:FC:02
            X509v3 Authority Key Identifier:
                keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/GRDhrSySmZNwYsTOdHpLmJvG_AI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:98:16:06:21:c3:be:2f:c9:69:03:1e:34:4b:22:c1:f8:a0:
         b0:7d:d3:92:94:c6:f6:fa:58:bb:9b:1c:63:86:d6:a2:eb:af:
         28:e0:d1:7e:c5:f7:5b:bf:6f:17:61:f6:6c:ec:3c:57:26:e8:
         a9:36:47:02:b0:27:8f:b2:dc:66:0d:0f:2e:16:b7:a7:b3:32:
         19:5d:a5:4a:26:d8:d1:ef:a1:0d:59:eb:58:bf:73:a5:26:c0:
         fa:43:b9:dd:12:ce:35:a9:22:81:47:58:55:23:fe:73:b1:90:
         43:60:54:a3:a9:c4:57:5a:bd:30:ff:65:29:15:47:85:da:4d:
         50:db:b6:92:97:ee:e4:e9:3e:08:c9:a2:17:43:fe:2c:d1:23:
         fd:70:c0:40:2a:fd:f2:08:4d:5e:58:a0:bc:5c:67:61:3e:04:
         a7:80:7c:8b:c9:57:91:b6:7f:f8:02:fe:02:a2:03:b3:ea:13:
         1f:51:9d:89:89:fa:ef:f3:c6:36:1b:bd:78:fc:ed:a3:5f:8a:
         8d:87:22:9a:b5:76:05:0b:5b:6c:79:59:a2:7e:48:75:ce:a7:
         6f:bc:b0:b0:4b:92:fc:44:fc:2c:3e:65:6d:04:49:90:e2:92:
         71:cc:f9:7f:37:e6:5a:af:85:04:da:60:bb:db:be:4c:ea:f3:
         e0:05:f6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:12 2024 by rpki-client on console-fra.rpki-client.org