Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/VI-6N7ef_A9TxBMjiC9Q59YPrdY.roa
File:                     VI-6N7ef_A9TxBMjiC9Q59YPrdY.roa (raw, json)
Hash identifier:          tIt9aZOfggTCkyQfsKvAZNpO6MbdLz4NXm/i/DmVsm4=
Subject key identifier:   54:8F:BA:37:B7:9F:FC:0F:53:C4:13:23:88:2F:50:E7:D6:0F:AD:D6
Certificate issuer:       /CN=c38c3a1c05c899ebfe15d2361909a63597c68078
Certificate serial:       018CC5DC427E30BC2FEA84C32A7AC544821B
Authority key identifier: C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/VI-6N7ef_A9TxBMjiC9Q59YPrdY.roa
Signing time:             Mon 01 Jan 2024 16:29:55 +0000
ROA not before:           Mon 01 Jan 2024 16:29:55 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     42871
IP address blocks:        185.202.7.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 12 Sep 2024 09:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dc:42:7e:30:bc:2f:ea:84:c3:2a:7a:c5:44:82:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c38c3a1c05c899ebfe15d2361909a63597c68078
        Validity
            Not Before: Jan  1 16:29:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=548fba37b79ffc0f53c41323882f50e7d60fadd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:52:3a:ae:78:2b:0f:62:0e:81:78:2a:71:66:
                    4f:18:4d:3a:c4:aa:cc:45:81:09:a7:e3:01:7b:a1:
                    3d:2d:b8:60:8c:1b:51:bb:5a:36:b4:a5:de:17:2c:
                    c0:01:22:77:0f:b4:d8:12:a2:76:4e:52:e9:9b:10:
                    ab:99:c3:ca:4e:4f:2f:c3:fe:8a:63:77:1d:4b:00:
                    72:9e:8c:c9:d1:82:e7:2c:8e:81:e6:a7:8b:e5:0a:
                    ca:d9:04:a1:83:07:00:6e:5c:4f:ae:f7:72:d9:ac:
                    78:f8:36:23:e9:37:ea:5b:71:aa:1a:89:52:9a:80:
                    7c:53:c9:33:ac:07:e2:4f:22:c5:3c:b2:f4:62:0c:
                    6c:44:8d:38:c0:ca:14:08:19:43:c6:b5:97:e4:d0:
                    dc:76:8d:30:35:78:47:f9:bd:84:c7:07:63:a0:b0:
                    81:56:a5:51:55:2c:09:fc:20:71:e4:c5:69:9e:92:
                    e2:dc:f3:0b:08:22:7f:2c:8e:04:34:05:52:97:d2:
                    d9:3f:4c:73:fe:55:44:8d:a3:77:ac:9f:68:d0:08:
                    28:1b:ed:42:31:28:f6:6a:cc:46:b9:a2:06:50:ae:
                    01:47:3e:95:18:34:bb:d7:43:c1:95:22:12:72:ac:
                    78:79:2a:71:99:26:65:b6:a4:23:50:32:fa:75:b3:
                    e2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8F:BA:37:B7:9F:FC:0F:53:C4:13:23:88:2F:50:E7:D6:0F:AD:D6
            X509v3 Authority Key Identifier:
                keyid:C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/VI-6N7ef_A9TxBMjiC9Q59YPrdY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:ea:4f:1c:96:30:65:21:44:d7:ec:73:c6:83:a1:aa:b2:d6:
         58:f8:da:70:e4:94:05:09:19:0a:9d:32:40:08:1c:58:ee:9c:
         84:b3:66:2a:df:dc:ee:71:bb:71:64:c9:47:63:fe:cc:8c:18:
         40:e9:c2:2a:cc:11:ce:48:b4:11:b3:a6:ab:96:2c:4d:1e:a4:
         7f:f6:25:5c:f5:39:f8:00:0b:5d:f5:75:d3:78:f6:f3:a0:71:
         83:31:db:f1:69:a2:18:cf:0a:41:1f:ff:3b:b0:9c:9f:61:7c:
         41:43:26:d1:58:25:f3:c8:67:70:82:ce:6b:f4:93:50:49:4c:
         0a:40:f7:85:b2:ce:b9:de:f6:a8:ec:c8:64:af:3f:50:1e:79:
         53:57:d6:22:32:04:f8:4c:75:78:87:62:a5:35:b9:4c:25:6c:
         b1:81:b0:50:88:78:8a:fe:ba:81:7f:7e:38:f8:a5:46:3c:d7:
         56:1b:71:6b:5c:8c:23:bb:28:f6:7d:48:42:69:bc:6b:75:c5:
         d4:12:27:91:94:5e:d6:e5:aa:49:e5:1f:fc:64:f2:c7:77:1a:
         a1:aa:20:55:95:16:7f:88:90:ab:7a:99:9e:ee:ad:b5:7f:48:
         ea:0f:22:bf:50:e5:ca:17:43:de:db:cf:cb:9a:e2:5b:fb:de:
         52:2c:f0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 12:08:32 2024 by rpki-client on console-ams.rpki-client.org