Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/X83R5IIw76XELcNUWW_Cnv02drE.roa
File:                     X83R5IIw76XELcNUWW_Cnv02drE.roa (raw, json)
Hash identifier:          Pt6Sx3OfmimiF8JhUZA7ZsZCRaSvS5Om7J+Iu63vGdw=
Subject key identifier:   5F:CD:D1:E4:82:30:EF:A5:C4:2D:C3:54:59:6F:C2:9E:FD:36:76:B1
Certificate issuer:       /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial:       01856DC1B84327F1BB62F99109F8777A7C12
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/X83R5IIw76XELcNUWW_Cnv02drE.roa
Signing time:             Sun 01 Jan 2023 14:34:50 +0000
ROA not before:           Sun 01 Jan 2023 14:34:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57391
IP address blocks:        95.81.87.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 14 May 2023 10:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:c1:b8:43:27:f1:bb:62:f9:91:09:f8:77:7a:7c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
        Validity
            Not Before: Jan  1 14:34:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5fcdd1e48230efa5c42dc354596fc29efd3676b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:de:2c:a8:27:db:d7:50:da:cb:61:c2:89:57:
                    5c:12:73:12:75:ce:e3:6c:37:9a:16:38:ba:88:6d:
                    10:e8:df:b5:d1:81:f1:4a:38:2f:0f:76:5f:b5:5d:
                    a4:94:b0:8a:3a:eb:09:8a:dd:b9:b1:cf:08:e8:70:
                    7e:2b:c8:c7:57:66:8f:a8:00:7b:d4:65:6c:81:bf:
                    8c:1f:55:d3:51:74:20:69:4e:ad:ff:ac:16:77:42:
                    09:73:5c:b4:43:14:2f:58:0a:f8:f0:31:5e:85:4d:
                    19:fe:b8:7f:41:3f:bb:22:fb:64:1f:e6:db:97:d4:
                    85:19:cc:92:e4:d9:b2:79:f0:9b:c6:35:45:a1:5d:
                    65:a0:1e:c9:84:72:11:b9:b5:f7:12:8a:53:0f:f0:
                    98:f9:e6:1d:3f:5b:a3:68:39:4f:3f:25:7a:77:7b:
                    4f:a2:ab:b9:0c:88:24:d9:af:8a:72:2a:cc:c0:92:
                    bd:84:f2:a9:f5:33:69:75:9c:8f:fa:46:29:6c:4a:
                    b6:7a:bf:b7:a8:d8:b3:fd:5f:4a:0e:63:5d:4a:e6:
                    28:f3:35:b2:65:01:0d:e6:2c:7c:31:a1:75:fb:53:
                    aa:da:37:ea:bb:c4:a1:d9:17:a8:b7:ee:aa:92:23:
                    d6:8a:c4:21:7c:ce:60:9d:d8:78:61:34:3e:f6:cd:
                    b0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CD:D1:E4:82:30:EF:A5:C4:2D:C3:54:59:6F:C2:9E:FD:36:76:B1
            X509v3 Authority Key Identifier:
                keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/X83R5IIw76XELcNUWW_Cnv02drE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.81.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:37:68:cb:58:f3:a2:ca:d4:88:5d:af:b0:3e:bb:45:ec:65:
         3c:bc:83:62:9f:29:a4:d8:b7:ea:88:25:d9:e8:10:a5:3c:62:
         e9:cf:c1:18:2c:e5:ac:73:4b:8e:6f:c6:4b:43:0d:70:36:b0:
         9d:fc:0b:4c:f1:a2:b3:9e:6b:1a:af:86:83:ef:53:89:36:22:
         49:a3:65:5f:41:e0:9f:f3:93:a9:fb:61:d9:bd:f5:34:c8:d0:
         61:39:6f:dc:b0:13:35:86:ac:38:df:a2:05:6a:8a:46:9b:c1:
         b1:b5:98:41:84:05:30:9d:7a:3f:36:bb:71:64:d6:60:31:da:
         7f:9c:ac:55:d7:30:79:f3:e7:2e:41:f7:9d:e3:a8:9f:c3:c0:
         52:2d:38:a8:c0:bc:c2:86:dd:cc:9f:0a:f9:11:b4:8c:20:56:
         b2:b8:61:a5:86:62:a7:1d:bc:75:73:bc:52:ff:32:a5:dd:05:
         de:04:82:42:80:64:b6:94:f3:d1:c3:a0:e2:45:4e:39:cd:e1:
         73:ff:fe:9d:50:d8:54:95:3d:86:b3:a5:1e:8a:25:12:30:59:
         e9:e0:0e:9f:46:9b:4f:dc:fa:af:8e:ab:45:70:cb:03:cd:b8:
         09:e2:54:82:8e:32:89:3f:8d:f8:e4:7f:a0:3a:18:4e:bf:30:
         8f:44:e1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:42 2024 by rpki-client on console-fra.rpki-client.org