Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/CM196EMbuAGRFTwtINxaGbBSMZM.roa
File:                     CM196EMbuAGRFTwtINxaGbBSMZM.roa (raw, json)
Hash identifier:          e8OEM2weTeNzVGxf3cK/eXCjKfh/+bS+zj9hIVEsLmE=
Subject key identifier:   08:CD:7D:E8:43:1B:B8:01:91:15:3C:2D:20:DC:5A:19:B0:52:31:93
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018945098BBE809BCB83EE16CDCFED532EE3
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/CM196EMbuAGRFTwtINxaGbBSMZM.roa
Signing time:             Tue 11 Jul 2023 13:00:00 +0000
ROA not before:           Tue 11 Jul 2023 13:00:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15731
IP address blocks:        176.57.51.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 17 Jul 2023 07:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:45:09:8b:be:80:9b:cb:83:ee:16:cd:cf:ed:53:2e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jul 11 13:00:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=08cd7de8431bb80191153c2d20dc5a19b0523193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:25:67:e3:ed:a7:a7:9a:08:21:d5:47:bd:53:
                    bc:d5:ef:00:65:e2:a6:9b:32:ee:36:59:e2:77:9a:
                    6a:62:ff:7a:43:d5:bf:1c:dd:26:f6:d2:fe:08:1d:
                    d8:88:a7:99:c5:f7:f6:ab:87:93:f7:68:87:06:ac:
                    57:4e:48:e4:4c:7a:c3:27:3f:1e:6b:85:3f:4d:e5:
                    3e:c2:a4:32:13:40:5b:c7:47:a5:25:ef:d2:7c:05:
                    51:75:1f:9c:32:95:82:8d:db:f4:16:b1:fa:7e:45:
                    cd:51:75:f6:f2:1e:e4:d9:2b:07:4b:b5:c5:98:91:
                    b4:7d:c3:f3:fa:c1:ee:f9:c7:13:93:ac:7f:11:8f:
                    f4:fc:1c:ed:cb:a1:8f:36:0e:ad:b3:6c:94:02:48:
                    52:67:55:4e:b9:94:1f:ee:0a:98:cc:92:4f:22:01:
                    82:67:1a:65:6e:08:b9:8f:12:6a:4a:eb:3a:ff:98:
                    f5:0d:f5:f2:65:10:4b:5d:4b:02:ee:3f:4e:9e:72:
                    98:80:86:9b:7c:b4:5a:95:aa:1e:31:d4:b9:1d:18:
                    3d:d1:ad:7e:37:e9:6f:6b:ac:8a:5a:86:de:77:58:
                    c6:9b:59:bb:33:48:b7:de:fa:59:0d:d0:25:21:50:
                    7f:80:73:cb:0d:8e:f5:21:48:81:00:ab:8e:f7:e6:
                    67:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CD:7D:E8:43:1B:B8:01:91:15:3C:2D:20:DC:5A:19:B0:52:31:93
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/CM196EMbuAGRFTwtINxaGbBSMZM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.57.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:0f:1e:a2:77:6d:7b:8b:20:27:7f:07:8c:48:e0:b8:cf:b4:
         49:d1:2a:09:34:34:e3:ff:ef:b2:3b:fd:80:77:11:a6:5c:d3:
         95:aa:52:2b:a5:a4:49:cd:0e:3b:14:8f:04:3f:85:73:8b:c6:
         c7:26:06:f4:2e:c4:c3:8d:85:52:7f:0f:c5:7c:53:6b:9d:26:
         08:87:11:28:40:4c:e2:67:bc:2c:4c:06:29:74:1b:d7:2f:c6:
         d0:3e:b0:4a:69:a8:c8:55:33:90:72:b2:43:49:ab:7c:c0:58:
         41:8c:33:9f:80:38:29:fe:c7:32:d4:09:82:f7:df:1c:8c:ef:
         62:c5:0b:ea:f8:c8:94:d8:54:8e:97:40:67:3f:92:06:1f:c8:
         03:a6:5a:6d:be:8f:c6:b4:07:43:61:a7:2d:3c:35:e2:60:ff:
         ca:ad:f1:6f:5d:dc:14:24:fc:c6:66:e6:df:e6:d7:98:98:e7:
         29:1f:de:70:b1:e9:a0:74:1d:dc:e9:fc:07:58:04:0a:29:42:
         ba:8d:dc:4a:f4:5f:0e:4e:d4:72:7d:87:cf:51:0d:b9:e8:95:
         cb:7b:94:f3:7a:bd:2d:80:be:8f:c2:c8:bd:06:a5:99:2b:95:
         50:04:7a:e5:99:61:76:b4:6b:23:c6:89:5f:bf:1f:05:11:a7:
         29:c9:26:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org