Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/OuP_qJESWQ6_WdY4eLoKTsSR7og.roa
File:                     OuP_qJESWQ6_WdY4eLoKTsSR7og.roa (raw, json)
Hash identifier:          OyBukJaB2ttXKvA2Bm4EqE6znOlYHx6TKb8l8piw1v8=
Subject key identifier:   3A:E3:FF:A8:91:12:59:0E:BF:59:D6:38:78:BA:0A:4E:C4:91:EE:88
Certificate issuer:       /CN=332293d0399160788b31e438760dc3bd1ed882eb
Certificate serial:       01900648D379D9D2E3805E0B20E80227B990
Authority key identifier: 33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/OuP_qJESWQ6_WdY4eLoKTsSR7og.roa
Signing time:             Tue 11 Jun 2024 07:52:34 +0000
ROA not before:           Tue 11 Jun 2024 07:52:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     50188
IP address blocks:        95.215.192.0/21 maxlen: 21
                          95.215.194.0/24 maxlen: 24
                          95.215.196.0/24 maxlen: 24
                          95.215.197.0/24 maxlen: 24
                          95.215.198.0/24 maxlen: 24
                          95.215.199.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Aug 2024 06:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:06:48:d3:79:d9:d2:e3:80:5e:0b:20:e8:02:27:b9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332293d0399160788b31e438760dc3bd1ed882eb
        Validity
            Not Before: Jun 11 07:52:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3ae3ffa89112590ebf59d63878ba0a4ec491ee88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:24:3f:28:98:a8:a6:58:4f:e7:18:aa:88:
                    84:b6:8a:12:07:60:75:f0:bd:7a:af:f1:08:f0:6a:
                    38:a4:a6:86:37:92:44:09:fa:53:38:a0:bd:9b:3c:
                    dc:43:2f:7e:c7:9d:25:e4:cb:2d:48:14:6b:a0:e0:
                    e3:58:14:d1:69:62:1a:f4:30:ff:70:24:57:53:ab:
                    95:78:42:5f:fe:76:f8:89:7d:8e:eb:e8:7e:8e:66:
                    1e:08:f6:76:a4:2a:06:2b:b6:57:41:1e:59:3a:7c:
                    62:e1:61:89:d2:57:00:5a:1b:b0:6d:3a:6d:22:10:
                    8b:63:80:53:ab:8d:5a:5b:aa:98:4c:f7:63:c7:48:
                    5f:cc:d7:b8:be:d6:b9:ac:ee:21:00:0f:c0:83:bc:
                    38:62:1e:a3:b8:f4:e1:4b:9a:a4:5a:41:ae:f1:a2:
                    1d:92:ae:f2:08:d9:91:cd:89:55:b2:f6:b0:ac:f2:
                    c9:cd:78:a1:98:d9:1a:ef:cc:86:1e:21:80:52:38:
                    c4:f9:b8:62:66:80:f6:bc:f0:5e:99:e4:7d:13:d3:
                    22:06:c4:df:db:bb:54:7e:aa:bc:21:26:bc:5d:94:
                    f5:38:11:f6:70:67:ff:a9:fc:65:7c:7d:ec:3b:f5:
                    9a:ef:4b:60:de:50:f4:64:53:a3:ec:16:55:48:88:
                    66:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E3:FF:A8:91:12:59:0E:BF:59:D6:38:78:BA:0A:4E:C4:91:EE:88
            X509v3 Authority Key Identifier:
                keyid:33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/OuP_qJESWQ6_WdY4eLoKTsSR7og.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.215.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9a:e1:e3:22:ad:6b:80:63:8e:30:cf:fb:82:66:e4:56:dd:fa:
         75:8e:56:e4:ed:56:69:57:0b:c2:f6:5d:84:0f:94:db:69:3e:
         2c:6a:f4:a3:61:8f:0a:c8:bf:93:85:7b:69:77:5b:72:af:1e:
         13:b0:c4:92:e6:e8:dc:93:ad:cf:04:c9:ed:11:00:38:b5:2a:
         16:26:31:44:6b:23:ed:f6:4d:72:6d:d9:90:42:85:e7:b3:d9:
         47:6f:e2:66:a8:db:ad:45:c9:c4:ee:d1:32:92:c2:73:a8:54:
         d7:60:f4:5c:aa:38:5b:28:82:2c:85:bb:4c:9b:82:a6:8a:13:
         0e:46:0c:a1:fd:e3:6b:8f:c0:ae:68:12:81:70:48:36:76:3e:
         2b:9e:e3:c7:2a:cb:7f:5f:63:1c:ab:a1:62:61:c4:fd:c0:cd:
         5f:bb:30:80:f0:ab:cf:1d:2a:42:b7:56:14:a0:56:67:70:b9:
         6a:2f:bd:51:f4:9f:c2:e0:18:78:b5:e8:4a:c0:48:2e:91:ff:
         ff:00:e0:c6:21:42:37:1b:25:b4:10:2b:cb:e6:53:ce:0b:22:
         01:84:c3:f1:f3:3c:17:d6:90:d6:79:fc:31:a3:3d:24:15:9d:
         ba:87:fe:13:df:75:a2:f8:dd:73:63:fe:77:e1:fe:0f:ff:3f:
         3c:69:08:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 08:35:26 2024 by rpki-client on console-fra.rpki-client.org