Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/k7LEJ5u40ZPOX-8cGCfEIc9XMzA.roa
File:                     k7LEJ5u40ZPOX-8cGCfEIc9XMzA.roa (raw, json)
Hash identifier:          bSGj8oGC8hNS0iM1KrGZcZ9FhLrAJgNAv74nvh38mQc=
Subject key identifier:   93:B2:C4:27:9B:B8:D1:93:CE:5F:EF:1C:18:27:C4:21:CF:57:33:30
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       01924C7C521CD49316EF5D8D9D492CCA2BD9
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/k7LEJ5u40ZPOX-8cGCfEIc9XMzA.roa
Signing time:             Wed 02 Oct 2024 09:07:48 +0000
ROA not before:           Wed 02 Oct 2024 09:07:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214106
IP address blocks:        212.232.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 04 Oct 2024 20:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:4c:7c:52:1c:d4:93:16:ef:5d:8d:9d:49:2c:ca:2b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Oct  2 09:07:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=93b2c4279bb8d193ce5fef1c1827c421cf573330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:de:3f:fa:8a:f4:64:c6:c1:08:b1:41:f9:
                    59:53:37:42:a8:79:c9:2c:da:6b:7a:5c:0b:c6:3c:
                    0d:1c:fc:ac:15:e8:ec:b8:60:0a:52:19:a1:27:34:
                    6b:b7:7c:32:ec:e2:ad:a8:4b:28:a3:07:4a:de:2d:
                    1c:8c:30:20:20:14:29:63:86:ce:91:20:4c:06:2a:
                    40:79:46:a6:02:11:7b:47:af:98:0c:14:ca:50:cb:
                    d0:b5:e1:e6:c2:26:d8:77:6a:fb:0a:ee:4d:47:b7:
                    23:70:f7:01:3d:c0:de:c3:79:8f:39:de:dc:7a:18:
                    9a:fe:81:b0:04:e8:25:74:7b:9a:29:4f:21:05:0a:
                    3b:05:39:2e:98:dd:40:e1:23:d4:bc:10:7a:fb:69:
                    fe:eb:85:c6:c7:72:a4:a5:2f:a9:78:67:8c:06:68:
                    68:63:a0:a8:ec:09:3b:c9:96:31:ae:a7:9e:6e:69:
                    e9:df:22:52:23:36:32:98:59:7a:95:42:c8:52:80:
                    25:89:5b:4b:ad:0d:35:62:14:51:a7:d4:74:e9:f6:
                    48:b2:9f:2d:15:08:ad:54:f8:02:47:4b:29:3c:87:
                    d2:40:ce:f5:a6:41:0a:21:b7:28:1c:be:ba:30:4e:
                    67:27:e1:1c:33:db:46:78:a7:d4:4b:06:3d:2e:4e:
                    9f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B2:C4:27:9B:B8:D1:93:CE:5F:EF:1C:18:27:C4:21:CF:57:33:30
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/k7LEJ5u40ZPOX-8cGCfEIc9XMzA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.232.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:28:b1:da:99:5e:50:64:db:0b:dc:ba:f1:a8:01:77:9e:b5:
         be:9c:6f:e3:f0:1a:89:e2:00:d4:0f:4d:c8:f8:b6:17:96:95:
         1a:a5:ca:8c:e1:ae:19:49:15:ae:96:e2:27:46:8d:3c:14:ea:
         ef:b5:52:1b:21:11:7a:ed:2c:3f:d0:2e:7a:73:1d:85:8b:29:
         51:58:35:b9:28:d6:46:d1:46:0b:da:02:89:2b:f8:14:bf:d2:
         a0:2c:65:29:ee:e3:2c:ab:c0:81:88:c1:25:cd:0b:de:a2:59:
         86:a7:c5:d0:a5:3e:f7:29:96:e5:5d:c2:4a:90:ad:71:63:05:
         79:ff:3c:6f:09:9e:30:9e:4c:13:78:48:20:2f:6d:da:98:6b:
         eb:2d:55:9d:f1:bf:fe:50:b1:33:dc:59:3b:59:32:45:10:ae:
         4c:bd:4b:df:7f:d4:9c:29:27:fb:5c:db:93:33:8e:be:16:0d:
         5a:65:f3:49:a1:c6:43:22:61:b4:7c:c6:30:2c:ac:92:97:ad:
         47:10:4d:f4:19:e1:44:d8:11:8c:4e:85:bc:aa:96:65:48:f0:
         71:2b:10:d1:3c:70:c7:b4:0e:e1:5b:81:41:d7:24:a0:ba:0c:
         41:5e:28:d4:e9:38:1d:9b:10:ac:62:12:2b:77:70:f1:3a:df:
         4b:78:a4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 21:29:31 2024 by rpki-client on console-fra.rpki-client.org