Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/TC_A7vubip6KBLNV-DzvtMcrsuU.roa
File:                     TC_A7vubip6KBLNV-DzvtMcrsuU.roa (raw, json)
Hash identifier:          4nlS2130uqBVaWAY0s00erBp2oX8li5H4t89Afgtqn8=
Subject key identifier:   4C:2F:C0:EE:FB:9B:8A:9E:8A:04:B3:55:F8:3C:EF:B4:C7:2B:B2:E5
Certificate issuer:       /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial:       018D3A8539821BBA715BF6E591D4B2402C06
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/TC_A7vubip6KBLNV-DzvtMcrsuU.roa
Signing time:             Wed 24 Jan 2024 08:10:25 +0000
ROA not before:           Wed 24 Jan 2024 08:10:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     25717
IP address blocks:        193.221.56.0/24 maxlen: 24
                          193.221.57.0/24 maxlen: 24
                          193.221.69.0/24 maxlen: 24
                          193.221.70.0/23 maxlen: 23
                          193.221.72.0/24 maxlen: 24
                          193.221.74.0/24 maxlen: 24
                          193.221.75.0/24 maxlen: 24
                          193.221.76.0/24 maxlen: 24
                          193.221.77.0/24 maxlen: 24
                          193.221.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 29 Jan 2024 07:40:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:3a:85:39:82:1b:ba:71:5b:f6:e5:91:d4:b2:40:2c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
        Validity
            Not Before: Jan 24 08:10:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4c2fc0eefb9b8a9e8a04b355f83cefb4c72bb2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:20:53:b9:35:c0:87:2e:b7:2b:8f:70:46:b7:
                    58:07:ed:62:84:db:fd:b6:2f:33:ef:d6:4e:7c:4f:
                    c3:4d:bd:a4:4c:3b:7b:b5:9f:95:1c:a3:2d:08:79:
                    e0:1b:e5:52:a8:1b:75:35:dd:2c:dd:73:17:98:bb:
                    24:c7:63:04:66:b4:df:b0:25:61:93:d5:f3:a9:7b:
                    4f:fb:4d:fb:39:88:17:18:1d:c6:b9:29:93:46:e6:
                    0a:f4:7b:24:58:d9:c7:71:1f:16:70:b5:80:08:20:
                    59:84:22:87:c8:d0:d8:7b:d4:be:4b:9a:ec:f5:59:
                    67:1b:1b:27:5c:1b:0f:6d:9c:6f:3f:07:c3:2f:1f:
                    4e:95:a7:f1:62:04:e9:cb:0d:f5:f0:ca:f6:5c:c3:
                    f1:de:d8:20:75:37:76:bf:ad:fc:d4:b3:51:3f:89:
                    fb:f2:0f:60:6e:c0:89:e4:c7:99:11:bc:c6:5a:3a:
                    35:e6:fe:38:45:a8:d5:73:59:51:c6:76:61:d4:6b:
                    18:c5:d9:21:a7:6e:31:d1:4e:a2:e9:53:cd:6e:09:
                    78:af:68:84:8f:3d:b3:e3:e4:a8:4f:40:54:79:8b:
                    fa:45:c0:c1:52:80:0c:06:e5:56:15:c4:e6:ab:82:
                    78:28:9f:a2:2e:54:ab:56:63:59:4a:f7:aa:5d:30:
                    26:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2F:C0:EE:FB:9B:8A:9E:8A:04:B3:55:F8:3C:EF:B4:C7:2B:B2:E5
            X509v3 Authority Key Identifier:
                keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/TC_A7vubip6KBLNV-DzvtMcrsuU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.221.56.0/23
                  193.221.69.0-193.221.72.255
                  193.221.74.0-193.221.78.255

    Signature Algorithm: sha256WithRSAEncryption
         84:be:b6:5d:7f:8b:1a:60:7f:6a:12:a5:98:cb:31:34:e5:44:
         3b:40:cf:f6:9f:d1:13:15:93:bf:ff:b4:71:c0:74:09:b7:6c:
         8e:fc:d0:98:cf:69:05:2d:95:d2:96:d8:1e:7f:96:38:f0:8c:
         67:a0:11:37:25:cd:5d:8c:84:25:05:cb:25:5c:b8:1c:28:ba:
         bc:76:86:87:5e:b7:b2:af:1a:04:5b:ea:06:16:3e:f9:30:24:
         bb:de:e3:72:d2:88:7c:fb:81:e8:99:bd:b6:c2:1a:13:d9:9c:
         c6:41:26:91:6e:af:e1:04:75:65:7a:66:63:04:97:b9:ea:c3:
         e6:63:7e:e1:0c:fb:92:12:c5:fc:87:4c:38:2a:25:03:6d:f7:
         63:ce:67:76:6b:8c:da:39:67:1d:0e:d4:b9:f5:a7:e2:60:ae:
         9a:a2:c0:4a:5b:e7:47:cb:9e:78:60:50:89:14:84:22:a8:c2:
         91:ea:30:f4:3b:10:0b:c3:b0:e9:67:15:6d:12:a1:9f:5a:4d:
         a3:44:cc:9e:3d:ef:bc:6c:d4:73:e1:a7:8f:47:b3:f0:b0:b6:
         56:dd:94:63:6b:88:18:48:35:64:6f:df:f2:26:5a:a9:b5:fe:
         ec:d4:1d:78:2d:c2:db:57:e9:39:6f:6d:4e:5a:2f:0d:ef:43:
         f2:08:c4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:39 2024 by rpki-client on console-fra.rpki-client.org