Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/y_wOY5vO9Eyq55rAFazsNpi9EJs.roa
File:                     y_wOY5vO9Eyq55rAFazsNpi9EJs.roa (raw, json)
Hash identifier:          +wSqc6kdttl7Vq02KrqdGrOa7fEZDIYxtx5gC4/BbnI=
Subject key identifier:   CB:FC:0E:63:9B:CE:F4:4C:AA:E7:9A:C0:15:AC:EC:36:98:BD:10:9B
Certificate issuer:       /CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
Certificate serial:       0189CEC90E3270B8E26DFC6B6CE7E01A9BC9
Authority key identifier: 55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/y_wOY5vO9Eyq55rAFazsNpi9EJs.roa
Signing time:             Mon 07 Aug 2023 06:57:10 +0000
ROA not before:           Mon 07 Aug 2023 06:57:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204203
IP address blocks:        195.88.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:ce:c9:0e:32:70:b8:e2:6d:fc:6b:6c:e7:e0:1a:9b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
        Validity
            Not Before: Aug  7 06:57:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cbfc0e639bcef44caae79ac015acec3698bd109b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a2:7e:eb:87:28:f0:8a:ee:ad:8c:b1:5c:47:
                    a7:7b:91:bc:7a:2c:97:68:3b:b3:bf:10:f5:15:c4:
                    43:4d:3f:5d:2a:cd:f6:0d:22:5d:8e:34:89:4e:95:
                    07:70:ec:7b:3b:e1:81:63:1c:00:3f:d3:e6:1b:53:
                    2d:e7:8d:8e:69:bb:d0:68:8b:20:e3:8d:5f:19:04:
                    93:ad:f8:97:cc:fe:df:63:3a:72:1c:22:65:6f:5d:
                    d4:56:ab:7e:4f:18:2b:7b:58:04:ec:ed:92:df:ba:
                    8b:59:2b:88:26:37:75:1b:ec:1d:20:86:d8:a3:b8:
                    fe:a0:3b:8f:9f:ba:28:3f:b4:a4:70:93:8d:4d:45:
                    b4:14:8d:8a:5c:98:d7:a0:bf:75:44:00:f4:6a:04:
                    78:ee:86:5f:39:d2:95:28:58:ec:f9:39:13:d3:02:
                    cb:4c:c8:c4:b4:55:a5:7e:c2:76:38:d1:e9:fb:c0:
                    89:90:0d:6c:46:60:83:e8:d8:c6:48:c5:82:6e:3b:
                    1f:5d:2d:98:f4:cc:a4:5d:e2:4c:fc:b0:43:56:50:
                    f6:e1:bb:40:f4:53:b4:33:d4:46:83:31:4a:2e:f3:
                    d6:d1:f1:38:c0:1a:9d:d9:70:ab:ac:99:fb:bd:21:
                    88:6a:f2:04:c4:15:d8:86:b3:0f:34:49:07:bb:17:
                    88:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FC:0E:63:9B:CE:F4:4C:AA:E7:9A:C0:15:AC:EC:36:98:BD:10:9B
            X509v3 Authority Key Identifier:
                keyid:55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/y_wOY5vO9Eyq55rAFazsNpi9EJs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:31:5a:75:b7:f4:62:79:6d:6d:11:d4:e3:35:a9:7b:ae:4f:
         a7:09:f0:95:ae:10:db:e0:b3:7d:6b:7a:11:7d:34:97:0d:7f:
         b8:38:b2:aa:74:22:af:d1:dd:35:d0:cc:bf:14:23:f5:bc:d2:
         1f:c7:40:5c:f5:3f:19:fc:9a:22:b9:cb:75:3f:55:58:63:1e:
         25:ed:74:18:b8:3e:90:b1:11:c0:f6:d8:60:60:59:61:4d:d8:
         cc:46:09:bd:b8:ef:65:69:c3:66:1c:dd:f0:29:8c:66:64:e5:
         42:0d:11:33:a5:11:cc:7b:d9:89:11:0b:6b:af:8d:be:93:b2:
         ed:01:21:a1:97:16:cc:9f:b3:18:34:e6:b0:78:48:6e:57:a1:
         04:e6:70:76:bd:52:39:34:e3:1c:1c:b9:00:f9:2c:09:c0:eb:
         46:46:c9:63:a5:bf:aa:a2:3b:e9:65:59:f5:f0:07:f1:c1:10:
         4f:da:44:1c:a4:ce:24:f8:54:a6:99:9e:4e:16:67:4c:9f:73:
         cf:9b:3a:b1:2c:60:81:64:58:62:40:86:31:90:bc:00:0a:33:
         00:e1:25:a3:34:d9:25:94:87:3a:07:57:4d:1a:50:e4:e4:5a:
         f4:b5:1d:63:cc:b9:ee:09:8d:46:ba:3c:0a:c7:4a:b1:79:da:
         b9:41:c4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:00 2024 by rpki-client on console-ams.rpki-client.org