Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/72l11PjlGNuzXTg-p3td1FOHXkc.roa
File:                     72l11PjlGNuzXTg-p3td1FOHXkc.roa (raw, json)
Hash identifier:          aEWWsVJFr9XMFBaBhwsXFxmOC+e/HqfHsoXnsp8o5dA=
Subject key identifier:   EF:69:75:D4:F8:E5:18:DB:B3:5D:38:3E:A7:7B:5D:D4:53:87:5E:47
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       01875A94EE2A083642FED01185AB2C528CB2
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/72l11PjlGNuzXTg-p3td1FOHXkc.roa
Signing time:             Fri 07 Apr 2023 07:18:42 +0000
ROA not before:           Fri 07 Apr 2023 07:18:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207083
IP address blocks:        195.178.146.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 09 May 2023 16:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:5a:94:ee:2a:08:36:42:fe:d0:11:85:ab:2c:52:8c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Apr  7 07:18:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ef6975d4f8e518dbb35d383ea77b5dd453875e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:47:f1:03:44:97:e2:67:c5:be:0e:96:27:81:
                    fb:2f:3c:18:49:8e:65:65:46:4e:31:0f:89:ed:b2:
                    b0:d2:41:6a:fe:c6:d7:48:fb:82:23:98:bf:08:aa:
                    8e:9a:e4:12:89:c1:42:e6:a0:58:5b:d5:c2:ad:90:
                    00:bc:51:b9:26:cb:5e:2c:50:86:8e:c9:a9:a4:bd:
                    5a:d3:65:66:67:47:93:e9:29:2a:c4:9d:4b:f3:5d:
                    76:cb:df:6c:a0:64:f5:22:ba:51:b6:fd:e6:4e:d5:
                    2f:84:4a:50:6c:a4:37:29:23:9f:55:d1:ef:00:66:
                    9c:64:40:53:04:80:9f:66:93:62:0d:19:08:6e:68:
                    a8:d4:90:e3:f6:96:42:31:69:13:1e:33:ab:dd:fe:
                    a0:78:4a:00:e8:af:45:c6:dc:0a:1f:78:4d:22:f1:
                    7c:8f:2a:9b:c1:cf:a9:1c:6c:5b:e7:9d:c8:4d:89:
                    87:35:3d:06:0c:6f:fa:df:89:dd:b4:f0:5a:b0:fd:
                    a8:82:6b:32:7d:ca:e2:89:20:58:77:58:62:75:66:
                    0d:05:2f:a6:73:51:45:5b:65:0b:c2:7d:ac:62:3e:
                    54:8e:ff:a5:4f:a1:36:ca:a7:e0:d4:6e:3e:72:94:
                    59:6f:86:e3:8d:9a:8f:c2:ab:7c:83:11:48:bf:2b:
                    35:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:69:75:D4:F8:E5:18:DB:B3:5D:38:3E:A7:7B:5D:D4:53:87:5E:47
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/72l11PjlGNuzXTg-p3td1FOHXkc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:f9:f0:54:31:ec:2b:74:31:42:ab:c5:1e:c1:2e:90:c8:ac:
         25:47:c8:d9:02:af:6e:a5:ae:c5:a8:05:23:7e:da:ad:40:e1:
         71:6c:4d:ab:6a:68:9d:42:b5:c9:80:6b:fb:c2:66:33:4c:34:
         93:92:80:2c:f9:83:94:a2:e5:1e:4b:5e:c6:91:29:ac:d2:3a:
         49:fd:3c:e1:52:71:c1:4d:3f:de:82:1a:a9:4e:c8:9d:60:dc:
         07:f7:75:61:12:9e:7f:5d:15:51:e3:f7:03:8c:a9:a9:d7:60:
         d3:75:d9:92:20:04:9a:84:72:fc:c3:80:17:ec:b6:7e:5b:17:
         65:c2:d7:42:e2:01:58:68:6c:b3:40:4a:8b:b4:71:2c:7e:15:
         49:89:cd:be:d1:6b:4c:f8:97:75:cd:b9:ae:51:a0:e8:cd:5f:
         94:d9:1d:22:b3:e5:d2:bb:36:c6:7f:79:26:44:53:ba:4a:09:
         b2:73:de:64:53:42:6f:f6:59:d8:a7:4c:f5:c3:22:14:92:bb:
         82:ba:97:4b:49:92:c4:e4:ee:61:f0:37:5c:be:7f:0c:37:67:
         b0:b8:27:4a:2d:3e:e5:68:0d:3e:6e:cb:42:24:f9:35:9e:7d:
         ae:17:00:d6:e2:0e:72:6f:36:80:6c:0f:28:88:c8:ce:e2:41:
         66:db:25:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org