Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/GVBmSlrV3jb_kHfBnIrIU80_dfI.roa
File:                     GVBmSlrV3jb_kHfBnIrIU80_dfI.roa (raw, json)
Hash identifier:          fIS8NoAUf3CKdg69i2gS1DVHuT2Q4m+cVcpvnScttsw=
Subject key identifier:   19:50:66:4A:5A:D5:DE:36:FF:90:77:C1:9C:8A:C8:53:CD:3F:75:F2
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       018F4E1C6DDE9A55B12C570E7F050790C9AD
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/GVBmSlrV3jb_kHfBnIrIU80_dfI.roa
Signing time:             Mon 06 May 2024 13:33:56 +0000
ROA not before:           Mon 06 May 2024 13:33:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     200239
IP address blocks:        185.121.132.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 15 May 2024 09:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4e:1c:6d:de:9a:55:b1:2c:57:0e:7f:05:07:90:c9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: May  6 13:33:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1950664a5ad5de36ff9077c19c8ac853cd3f75f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e7:05:36:9a:55:98:90:c9:79:1c:22:e4:0d:
                    e8:d7:3b:cb:3c:1b:1b:7d:23:7a:62:07:e2:09:5d:
                    5f:fe:f7:dd:e0:f4:0c:67:f7:a4:45:e8:64:cb:77:
                    7b:bb:78:f5:b8:b3:98:bd:9d:19:f5:34:1b:62:4a:
                    a7:4e:59:e9:7b:94:6d:b5:27:fd:dd:ab:07:b9:bf:
                    8f:07:ca:e8:e4:57:a7:d1:c6:16:9b:39:7b:3c:e2:
                    ab:09:2e:6b:9f:a1:72:02:7c:34:2a:00:65:06:57:
                    b3:dd:fb:62:b0:0d:08:83:29:82:4d:6f:68:5b:54:
                    21:fa:22:c7:90:49:f9:2a:2b:ad:92:6a:b5:7c:ad:
                    5f:14:c5:6f:e0:05:e3:4d:da:f4:a6:bf:e8:ed:69:
                    ba:b8:f0:2d:4f:89:5b:de:f8:37:89:02:73:fb:d0:
                    d7:65:8d:b8:17:5e:08:c4:31:1d:dc:4a:b3:2d:f3:
                    d9:7d:df:ff:92:1a:71:3e:6c:68:43:1b:59:ed:e7:
                    b9:20:ab:2f:c1:c2:a4:e7:27:ea:c8:4d:c2:69:85:
                    2d:71:e1:17:4e:a6:c8:5c:ee:29:11:9b:22:8e:34:
                    d3:06:0f:34:a3:7c:1f:c4:60:53:29:4d:69:c0:d7:
                    87:fc:75:a1:0c:ea:ad:4c:e4:21:da:d7:19:d4:ff:
                    64:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:50:66:4A:5A:D5:DE:36:FF:90:77:C1:9C:8A:C8:53:CD:3F:75:F2
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/GVBmSlrV3jb_kHfBnIrIU80_dfI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.121.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:f4:31:88:b0:5f:b0:4e:a7:37:c3:d3:05:f9:30:e8:63:76:
         80:5a:37:e3:83:ca:be:c4:76:7e:61:10:7e:fc:d4:62:cb:48:
         8c:d6:1f:3d:4d:47:52:fc:c5:7b:6e:17:1d:4a:b2:f5:08:29:
         f3:b0:a4:15:76:c5:bb:40:3f:b0:bc:89:7d:24:02:50:e3:ce:
         80:1b:82:ef:37:60:86:1e:87:4f:ce:0f:4f:b8:02:e8:33:e8:
         7b:7f:aa:db:5e:2e:55:e3:68:e3:5e:b7:c5:95:31:3a:e2:87:
         fd:89:28:95:6f:89:ee:ab:03:72:c6:77:5b:47:2d:db:cb:7e:
         21:9e:da:5d:1a:f3:0b:9a:bc:5a:82:c0:fb:dd:d4:23:99:20:
         8b:d9:a6:60:80:e6:54:4c:cf:9a:8b:a1:e7:d5:59:df:99:e2:
         69:40:02:f2:44:02:05:f7:b0:6d:0f:5a:66:ad:b5:c4:97:d1:
         65:d5:40:60:5a:df:7f:0d:1a:10:8c:76:20:85:d5:78:a4:ba:
         4a:26:64:16:11:b3:b5:aa:34:7b:cf:3f:25:1e:37:e9:cd:c1:
         3b:d7:a5:9e:98:7f:b5:16:44:f9:ca:47:0d:8d:d7:8c:8f:a7:
         25:8c:09:4c:4b:de:6a:74:f9:a3:ba:3e:44:21:ab:7c:23:fd:
         2d:8c:0c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:44 2024 by rpki-client on console-fra.rpki-client.org