Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/xUkvNciSU4yx6WznQ1T-6IL56EA.roa
File:                     xUkvNciSU4yx6WznQ1T-6IL56EA.roa (raw, json)
Hash identifier:          tvys12P5lRdb50X8XCkFwuc5NJHr3qVzXTkTQ0Fydfg=
Subject key identifier:   C5:49:2F:35:C8:92:53:8C:B1:E9:6C:E7:43:54:FE:E8:82:F9:E8:40
Certificate issuer:       /CN=7c1bbb08037a876230406fa67379f980b5ab3276
Certificate serial:       01856F0B415BDB0AB0D7913A84DB5B0B70C2
Authority key identifier: 7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/xUkvNciSU4yx6WznQ1T-6IL56EA.roa
Signing time:             Sun 01 Jan 2023 20:34:46 +0000
ROA not before:           Sun 01 Jan 2023 20:34:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51088
IP address blocks:        46.175.131.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:0b:41:5b:db:0a:b0:d7:91:3a:84:db:5b:0b:70:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c1bbb08037a876230406fa67379f980b5ab3276
        Validity
            Not Before: Jan  1 20:34:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c5492f35c892538cb1e96ce74354fee882f9e840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1b:e3:ab:ca:66:9f:41:48:1e:9f:34:0f:4e:
                    db:c6:f4:c8:67:82:46:4b:8e:e1:a1:fc:9c:03:77:
                    a6:32:22:ff:1e:de:37:70:d5:1f:a4:f9:fd:60:0b:
                    da:a9:89:5c:db:80:e7:52:b9:df:7c:88:7c:49:03:
                    0f:67:8d:17:a1:37:bb:19:76:e9:2b:fa:50:81:f5:
                    81:19:06:d0:a0:de:46:0a:95:ea:38:51:f8:9e:0b:
                    d5:e1:7a:c7:50:34:37:b3:71:6d:59:38:3e:ea:59:
                    d4:a8:75:bf:88:a5:fd:d0:25:9d:c5:3c:ae:5f:bf:
                    91:9a:c9:1b:ab:d8:9e:cf:7a:db:88:37:6a:7f:e3:
                    a0:e3:d7:62:9e:1b:ba:a4:31:67:55:2c:3f:65:a6:
                    05:88:f4:6b:44:69:c8:82:6c:21:cb:2d:0a:c4:10:
                    4f:e2:fa:49:4d:61:9e:df:56:df:41:6c:d5:6c:6a:
                    63:1f:5c:1d:0c:11:86:82:4b:20:53:d2:a1:9b:b4:
                    e3:50:d1:74:31:e9:06:9c:a0:7c:b9:6c:00:dc:46:
                    77:c7:5e:92:35:8b:d2:79:da:f8:b0:83:06:cd:96:
                    4f:be:c1:74:d1:ec:51:73:0c:78:32:c5:06:58:3f:
                    a3:9e:71:45:57:92:1d:82:c5:83:1f:bb:19:7a:34:
                    74:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:49:2F:35:C8:92:53:8C:B1:E9:6C:E7:43:54:FE:E8:82:F9:E8:40
            X509v3 Authority Key Identifier:
                keyid:7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/xUkvNciSU4yx6WznQ1T-6IL56EA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.175.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:93:19:41:70:11:9d:cc:0c:68:8b:46:98:fe:33:9c:cf:7c:
         ef:f2:3a:66:f8:fc:c9:76:27:9a:fe:a5:44:70:ad:1d:d5:d0:
         70:d9:5a:66:b9:33:0d:8b:c4:64:d0:62:d7:3a:c9:09:bb:01:
         ee:b3:9e:74:3a:51:fd:43:8f:cd:c0:ff:bc:6f:b7:8a:58:08:
         57:75:38:18:45:ac:a8:66:52:b4:01:b6:9a:c1:98:96:dc:88:
         15:87:00:30:69:97:80:9c:28:2e:fd:a7:6b:f8:f7:b6:7f:2f:
         ab:07:6e:f5:c8:63:03:45:47:75:c0:7a:9a:15:94:8e:52:d6:
         f0:f3:46:60:d1:31:20:d4:ad:98:ca:71:48:eb:10:48:98:ff:
         ee:44:f0:57:75:3e:24:ca:fa:d4:4e:fb:79:93:87:31:12:16:
         da:05:6e:75:65:27:ce:77:3f:37:77:75:19:60:1c:9b:d2:5a:
         b3:65:e0:44:8c:07:7c:cc:c2:70:4f:36:0a:ea:30:42:09:76:
         bb:ef:6c:56:8a:1f:7f:49:fd:0a:85:14:5c:52:e0:22:f3:23:
         7f:e2:a4:d8:52:bb:1a:06:5c:78:a7:44:40:9f:49:b9:f5:c2:
         fb:59:72:05:f3:16:1e:29:3a:13:ed:ba:d4:6c:97:b3:1a:09:
         3c:ca:11:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:16 2024 by rpki-client on console-fra.rpki-client.org