Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/viEP0TUpSySrhw4ZbO5Sc-Wv45o.roa
File:                     viEP0TUpSySrhw4ZbO5Sc-Wv45o.roa (raw, json)
Hash identifier:          JdPcYd4nst5jSbIqSCPfs98L2obeS+yxsLriHBZYUfE=
Subject key identifier:   BE:21:0F:D1:35:29:4B:24:AB:87:0E:19:6C:EE:52:73:E5:AF:E3:9A
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       018BD19D6E94342235E5F407D18BA8FBBF6B
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/viEP0TUpSySrhw4ZbO5Sc-Wv45o.roa
Signing time:             Wed 15 Nov 2023 06:13:57 +0000
ROA not before:           Wed 15 Nov 2023 06:13:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44947
IP address blocks:        212.16.85.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 26 Nov 2023 06:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d1:9d:6e:94:34:22:35:e5:f4:07:d1:8b:a8:fb:bf:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Nov 15 06:13:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=be210fd135294b24ab870e196cee5273e5afe39a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:70:5a:ac:d2:2b:84:ec:a2:90:41:f1:92:cf:
                    9b:c8:60:08:49:ee:09:d6:ef:09:1a:90:75:ef:60:
                    78:4f:52:e6:18:93:d5:6b:68:e8:ec:25:96:81:fa:
                    8b:6e:d9:5a:88:67:3d:af:46:b6:b7:e3:fe:71:52:
                    70:35:5c:9a:0d:8a:ef:dc:96:1b:1f:56:d8:7e:62:
                    99:9d:01:c2:09:45:5a:6d:a2:60:e1:8c:1b:00:8d:
                    75:83:42:b8:8f:2c:1d:83:a3:10:46:13:b0:f3:86:
                    da:58:b6:91:ce:c3:e9:61:ad:a8:ce:89:8e:96:2e:
                    6f:5b:ed:52:c4:87:ae:94:0c:60:af:ef:a9:f5:b6:
                    d3:b5:d7:c3:9c:21:e8:40:0b:6f:22:4c:35:56:f7:
                    6c:68:78:ab:25:c7:fe:ab:2e:df:18:20:ec:d0:a6:
                    29:ea:7b:5e:75:82:83:e5:58:28:e6:5d:13:3f:74:
                    44:70:b9:fc:dc:d2:4b:6d:f2:eb:6a:aa:05:46:c1:
                    25:23:ec:7b:69:27:2b:00:a8:ae:3b:e3:ba:37:1a:
                    30:6a:7a:cf:56:0e:0a:5d:38:e8:43:25:4d:63:d9:
                    60:dd:b8:95:99:57:b9:8e:87:2a:59:83:33:af:db:
                    03:d9:61:d8:14:77:52:29:8b:17:8d:f6:ce:24:4b:
                    5b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:21:0F:D1:35:29:4B:24:AB:87:0E:19:6C:EE:52:73:E5:AF:E3:9A
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/viEP0TUpSySrhw4ZbO5Sc-Wv45o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.16.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:8f:dd:cd:e0:71:24:cc:33:08:af:d3:36:f6:bf:99:29:73:
         09:eb:88:75:f1:8b:b8:b8:b5:51:51:0c:27:69:3f:5f:45:e6:
         5c:ae:a4:b1:bf:03:76:9e:f2:87:2f:3b:cb:71:76:6e:82:7c:
         8b:78:0c:d2:06:cb:a6:80:31:f6:e4:16:c9:b1:9d:59:86:b0:
         cb:4e:0b:d0:32:10:d5:df:73:de:e9:5b:06:3a:76:fe:9e:9e:
         73:f3:c8:af:5a:36:f1:9b:94:ca:45:23:80:ed:9b:51:33:b8:
         18:dc:eb:5e:97:65:04:d5:ca:75:84:84:ca:90:cd:e7:e3:dc:
         e6:4f:84:3e:c8:68:14:e4:f4:a7:b7:07:1c:33:96:46:86:68:
         fe:11:fc:56:f6:a3:62:c0:b4:96:d0:17:2f:f3:4d:f0:2d:35:
         f5:bc:33:00:fa:fc:17:f9:f6:e6:d7:36:02:42:14:01:f3:58:
         19:a8:dc:d2:7d:5a:87:19:b6:01:42:b0:a7:6c:60:92:e2:98:
         5d:69:20:42:6f:d5:06:37:fe:f5:fd:fd:c7:54:c3:24:34:d6:
         b7:f0:f8:ba:ac:21:da:b6:0e:98:da:45:2d:3c:64:85:0a:9c:
         f2:05:f7:44:c0:b8:90:7d:d5:4c:ce:c1:8c:77:21:3f:5d:33:
         74:ef:1e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:07 2024 by rpki-client on console-ams.rpki-client.org