Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/U8v-9Inyj4BDYOwB8q-JJiiqqiU.roa
File:                     U8v-9Inyj4BDYOwB8q-JJiiqqiU.roa (raw, json)
Hash identifier:          61K4LcHEcH59Xv8ZQqeCOOLG/0MSBgWWtrdO5Qo33gg=
Subject key identifier:   53:CB:FE:F4:89:F2:8F:80:43:60:EC:01:F2:AF:89:26:28:AA:AA:25
Certificate issuer:       /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial:       01864A1C37AEC782B7228BBF9460FDAEC819
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/U8v-9Inyj4BDYOwB8q-JJiiqqiU.roa
Signing time:             Mon 13 Feb 2023 09:30:08 +0000
ROA not before:           Mon 13 Feb 2023 09:30:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49188
IP address blocks:        95.169.197.0/24 maxlen: 24
                          95.169.198.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:4a:1c:37:ae:c7:82:b7:22:8b:bf:94:60:fd:ae:c8:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
        Validity
            Not Before: Feb 13 09:30:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=53cbfef489f28f804360ec01f2af892628aaaa25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ff:1a:27:40:82:f2:d9:55:1e:cd:a4:21:c5:
                    58:f2:ef:d3:89:ab:c3:f8:a4:ad:00:36:fd:39:95:
                    cb:98:bf:65:3c:87:4d:f2:32:c5:3d:cf:4b:be:df:
                    1f:87:59:95:d3:46:77:6f:65:c9:6a:bc:68:dc:a5:
                    2a:89:9e:97:24:eb:22:2a:19:f3:16:7b:a9:db:37:
                    79:cf:86:b3:62:29:df:b6:44:0e:94:bb:13:67:f2:
                    c2:50:1a:39:5b:4b:e2:b8:ee:5a:db:bd:34:63:73:
                    5b:59:ac:83:89:8a:36:5e:89:52:41:c4:e6:29:8e:
                    2c:44:b6:fc:7e:d1:98:40:85:da:2c:eb:fa:37:30:
                    0c:59:09:48:81:4b:68:69:2f:57:df:7c:73:12:e1:
                    13:d2:4c:0b:b8:16:2d:2f:bc:54:92:ba:c1:34:86:
                    af:5b:a3:f1:4a:02:b3:63:8b:8c:32:d9:c1:55:f2:
                    66:c1:29:33:a3:71:f5:9b:25:68:8d:d8:a5:2c:4e:
                    55:fa:47:62:47:02:75:dc:99:1c:29:64:51:29:fc:
                    fe:5b:4d:1a:30:cd:b0:9e:38:a3:f5:69:19:d8:4d:
                    69:0d:61:c1:d6:e0:eb:58:74:38:5e:3a:8d:03:0e:
                    a4:d7:a1:5c:bc:87:5f:b5:e5:f4:1a:48:23:61:88:
                    3d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CB:FE:F4:89:F2:8F:80:43:60:EC:01:F2:AF:89:26:28:AA:AA:25
            X509v3 Authority Key Identifier:
                keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/U8v-9Inyj4BDYOwB8q-JJiiqqiU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.169.197.0-95.169.198.255

    Signature Algorithm: sha256WithRSAEncryption
         80:ce:77:e5:89:0b:79:61:a1:28:0a:d9:d9:bf:2d:0a:43:86:
         81:1e:e6:98:f8:da:ad:cd:5a:11:75:75:bd:49:2d:c8:41:6d:
         f7:1c:34:57:18:e2:f1:73:81:c9:ef:9f:f7:ad:9c:ea:f8:d1:
         c8:d6:31:89:20:f7:d2:38:6c:6b:0a:0f:0b:41:04:51:46:ac:
         11:97:23:94:bc:b5:f3:8b:41:77:e2:47:cb:b9:f8:d8:58:c1:
         01:24:10:e4:f9:fa:81:d7:03:9c:05:32:74:8a:10:59:f8:3a:
         c3:c8:43:c5:37:e7:9a:aa:bc:34:77:10:90:48:16:6c:e4:49:
         91:ac:25:c2:11:09:55:2a:d4:1d:6b:ee:52:07:fd:cf:e9:cd:
         e5:e2:b0:23:ea:d8:fe:95:f1:b4:8a:8d:4c:ba:44:40:44:5a:
         5c:2a:30:fb:14:cd:81:63:4c:c2:c8:59:23:02:61:4e:fa:c1:
         5e:4c:ed:35:e1:c7:49:40:06:cb:d0:86:03:e1:27:f6:1d:b7:
         c9:33:9b:e5:c3:79:50:01:c8:d6:a7:85:79:e4:9b:1d:23:b5:
         00:ae:ff:2c:5f:e3:69:9a:57:8e:b9:5b:fa:15:30:27:53:c1:
         0a:15:71:ff:f3:11:b2:4f:ea:da:84:da:a2:02:05:e0:46:d5:
         18:7b:75:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:06 2024 by rpki-client on console-fra.rpki-client.org