Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/uUh1BggJjGepFbYuybQHp7sUQdQ.roa
File:                     uUh1BggJjGepFbYuybQHp7sUQdQ.roa (raw, json)
Hash identifier:          zoRwaXGrJPDg8ilmZCmn+PcHy0oNXCq4GPyyqirC4cE=
Subject key identifier:   B9:48:75:06:08:09:8C:67:A9:15:B6:2E:C9:B4:07:A7:BB:14:41:D4
Certificate issuer:       /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial:       0185AA587F99B214CA8E18C487AC84424F89
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/uUh1BggJjGepFbYuybQHp7sUQdQ.roa
Signing time:             Fri 13 Jan 2023 08:56:44 +0000
ROA not before:           Fri 13 Jan 2023 08:56:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60721
IP address blocks:        86.62.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 May 2023 13:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:aa:58:7f:99:b2:14:ca:8e:18:c4:87:ac:84:42:4f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
        Validity
            Not Before: Jan 13 08:56:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b948750608098c67a915b62ec9b407a7bb1441d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:40:4e:d1:a5:3d:94:5d:09:9c:87:ca:32:22:
                    77:8f:af:4e:b6:77:53:4f:51:c6:fd:65:e2:42:52:
                    69:9d:44:e1:c1:85:4f:d3:41:a3:7a:63:fb:ab:da:
                    ae:72:48:5b:cc:54:b9:ae:7d:00:c9:70:16:e1:43:
                    2d:3c:e6:8b:e0:16:95:31:dd:08:27:a1:88:3c:cb:
                    8e:cf:4b:d6:79:0a:92:74:29:2e:54:35:bb:cf:2e:
                    f6:c9:82:87:10:0d:9c:86:d7:b2:07:26:1f:44:78:
                    4c:12:68:a1:b6:2b:f4:33:f1:28:99:fc:6f:7f:a5:
                    0d:9f:98:a4:ed:11:ca:83:c3:8a:a6:33:c2:4e:2c:
                    63:46:ad:71:a9:a7:ec:f7:d3:68:d4:55:24:08:7b:
                    3b:e1:2c:5a:6a:11:05:99:a4:4f:cb:38:4a:6b:7d:
                    aa:3b:13:b0:69:3d:9f:91:0f:71:65:c4:86:24:43:
                    45:19:6f:55:10:63:2d:8d:24:de:74:df:5a:55:c4:
                    1d:c1:75:be:2b:57:4c:28:c3:2b:05:f9:89:8c:16:
                    80:15:e4:f3:47:81:96:60:e8:af:00:6b:f4:39:99:
                    3b:a7:68:eb:95:ea:ba:29:e9:2d:b4:90:a8:4a:60:
                    0d:08:20:f9:82:55:bf:01:76:e7:ba:f8:98:47:d3:
                    d9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:48:75:06:08:09:8C:67:A9:15:B6:2E:C9:B4:07:A7:BB:14:41:D4
            X509v3 Authority Key Identifier:
                keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/uUh1BggJjGepFbYuybQHp7sUQdQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.62.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:89:97:ba:48:d5:96:0e:12:24:38:bf:b1:77:b1:f0:72:72:
         25:ae:55:e8:dd:60:43:32:52:38:7c:e9:dc:e4:78:70:61:fd:
         d0:a9:93:20:db:42:88:3f:75:bb:96:30:58:3c:7e:70:91:42:
         1c:07:4e:b0:1a:21:08:89:e1:ff:70:5f:8f:19:1a:03:b2:66:
         25:f9:da:26:31:22:d2:ba:25:d3:58:dc:8b:19:eb:68:15:96:
         be:3e:bf:4e:cd:dc:a3:9e:f6:4d:91:a1:a1:a7:03:69:f6:5b:
         0d:dc:6e:49:8b:18:69:2a:8f:68:a8:05:71:82:29:29:50:af:
         fc:1e:93:f7:23:19:f2:78:34:4c:4b:0a:36:d6:db:81:72:49:
         60:b5:f4:df:7a:52:72:3c:3c:e4:89:35:e7:ab:e7:61:81:1a:
         66:3e:87:73:7f:80:2a:9c:79:07:ad:47:c4:82:ee:d3:59:fa:
         05:83:85:70:2c:33:47:29:76:38:a5:d0:85:0e:12:cf:0c:dc:
         c2:86:fc:80:10:87:6e:f4:4f:04:7a:5c:91:bf:63:b1:0a:22:
         d0:44:58:c1:3b:ad:40:43:af:8c:af:ab:0e:4b:bb:e2:85:17:
         fe:5d:5f:4c:72:ce:c4:0b:99:97:fe:37:04:6d:7f:51:b9:eb:
         ae:a3:4d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:12 2024 by rpki-client on console-fra.rpki-client.org