Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/sUvccOfAe8T4OzyUCrJ4U2HzCSc.roa
File:                     sUvccOfAe8T4OzyUCrJ4U2HzCSc.roa (raw, json)
Hash identifier:          TsoWyUW21eOeq7BaVT9Kq6V7v6RWStlimHwwq+J0aTg=
Subject key identifier:   B1:4B:DC:70:E7:C0:7B:C4:F8:3B:3C:94:0A:B2:78:53:61:F3:09:27
Certificate issuer:       /CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Certificate serial:       018571D7C323F447CED7D761BF1C5F6A8111
Authority key identifier: ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/sUvccOfAe8T4OzyUCrJ4U2HzCSc.roa
Signing time:             Mon 02 Jan 2023 09:37:23 +0000
ROA not before:           Mon 02 Jan 2023 09:37:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51840
IP address blocks:        185.27.58.0/24 maxlen: 24
                          185.27.59.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:c3:23:f4:47:ce:d7:d7:61:bf:1c:5f:6a:81:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
        Validity
            Not Before: Jan  2 09:37:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b14bdc70e7c07bc4f83b3c940ab2785361f30927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:36:69:09:1a:7d:64:90:ce:52:39:bb:64:bf:
                    f9:41:54:92:92:1d:95:b7:71:f4:c3:3b:dc:95:5c:
                    9b:bd:e1:96:87:ca:01:a4:82:67:3b:df:96:b1:d8:
                    9a:86:9c:aa:3e:57:a6:04:fd:e9:89:ae:03:2c:66:
                    07:b7:40:b1:0b:35:d6:e8:e8:4e:eb:4e:31:04:94:
                    58:47:bb:b0:3d:a6:45:37:e4:3c:23:d9:cf:09:b5:
                    ee:d3:96:2e:46:4a:8a:83:3e:20:71:06:c6:f7:5d:
                    b3:4c:40:5b:e6:83:d7:44:90:47:9b:95:32:8f:e5:
                    63:25:77:6e:07:27:f2:fb:2b:71:ca:63:f1:d4:6a:
                    62:5a:d3:87:e8:13:1e:76:c3:6e:3d:7a:05:1b:e4:
                    47:76:18:cc:ee:07:9b:67:c0:32:ae:1b:40:a6:95:
                    50:99:39:f3:d7:70:17:83:96:87:5e:51:bb:53:04:
                    b8:74:fa:81:75:fc:b7:41:07:fa:5b:28:90:73:6b:
                    ea:f3:0e:a5:bb:27:de:f3:9f:db:d6:0c:34:d2:10:
                    44:ec:d9:39:d7:bf:9b:9e:c9:6d:ed:f6:a2:2e:cf:
                    11:a6:32:d8:41:89:be:dd:76:fe:9f:61:a1:2d:bd:
                    48:7c:43:b0:ce:17:e6:4c:2c:1e:00:31:dd:13:2a:
                    18:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4B:DC:70:E7:C0:7B:C4:F8:3B:3C:94:0A:B2:78:53:61:F3:09:27
            X509v3 Authority Key Identifier:
                keyid:ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/sUvccOfAe8T4OzyUCrJ4U2HzCSc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.27.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dd:28:95:eb:7f:96:c4:d0:86:87:50:51:78:b6:e6:09:a6:61:
         87:64:e8:d8:c4:99:54:a1:71:02:ec:06:bc:65:94:72:5d:be:
         69:b1:d0:1e:a5:a2:57:51:64:2a:6c:04:9a:d7:aa:1c:26:e7:
         aa:39:ac:b8:18:c3:ba:4d:28:c0:cf:64:4d:90:89:2b:e6:35:
         fc:20:f9:b9:22:61:96:c7:33:4c:ae:86:88:44:4a:ad:40:00:
         12:2f:e4:69:07:37:5c:81:75:37:be:6c:e8:32:04:4f:30:28:
         7d:51:36:f8:b6:00:a0:7f:45:a2:45:49:2e:01:78:a8:c5:39:
         36:43:d2:02:fc:a2:5a:64:4a:40:fd:e2:f4:61:46:d5:61:7e:
         bf:2a:9e:26:94:b7:1e:5d:90:f7:24:09:07:7b:60:9e:dd:bf:
         1e:c5:73:02:51:d9:30:3e:ec:c6:1e:13:4d:a1:62:dd:76:64:
         77:f6:fb:49:df:29:e2:2e:5e:d8:3d:21:ca:d3:39:6f:13:ff:
         6b:70:79:57:57:31:9b:f3:69:55:f0:68:2e:c8:23:cf:9f:66:
         8b:cd:f6:1b:6d:31:8f:77:bc:00:4a:6d:85:e0:11:cf:95:a1:
         2e:92:e0:2e:b4:1e:86:95:07:e4:b0:1e:4f:11:7b:e6:f8:1a:
         41:64:d4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:21 2024 by rpki-client on console-ams.rpki-client.org