Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/xQxF6MgbRUhaIOKP7OQ6ijDTfyg.roa
File:                     xQxF6MgbRUhaIOKP7OQ6ijDTfyg.roa (raw, json)
Hash identifier:          /pJNKisjRpt2isRILYv8HAKmNACSDiVZUSR3jMsir/E=
Subject key identifier:   C5:0C:45:E8:C8:1B:45:48:5A:20:E2:8F:EC:E4:3A:8A:30:D3:7F:28
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018745D1906673C96A4C2AE2186B8F623D98
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/xQxF6MgbRUhaIOKP7OQ6ijDTfyg.roa
Signing time:             Mon 03 Apr 2023 06:32:54 +0000
ROA not before:           Mon 03 Apr 2023 06:32:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200131
IP address blocks:        176.57.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:45:d1:90:66:73:c9:6a:4c:2a:e2:18:6b:8f:62:3d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Apr  3 06:32:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c50c45e8c81b45485a20e28fece43a8a30d37f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:06:22:83:c2:09:c1:37:39:46:9f:eb:e6:
                    a1:b9:a2:2b:c2:68:2e:dd:e4:fa:a0:63:31:3f:27:
                    43:c0:3b:a5:a2:c9:25:51:c2:88:c4:c8:48:68:9b:
                    95:d6:ea:da:57:6f:67:3d:5b:2a:8e:91:64:2a:18:
                    6d:76:7b:85:04:6f:e0:03:0b:b7:6b:7c:aa:39:e1:
                    d8:73:9e:db:70:0f:55:79:8d:78:da:38:b3:b7:6a:
                    42:c5:2a:2f:0d:f7:5d:da:ca:e4:b7:a1:86:7d:75:
                    e2:33:dd:02:9c:5b:dc:79:5c:4d:92:65:52:cd:c1:
                    82:00:44:93:c8:31:93:1d:62:1c:f0:40:78:19:b1:
                    fe:69:9f:39:95:42:23:5c:7b:b7:24:e5:12:68:46:
                    e1:4e:4b:7f:9e:ff:6b:40:e5:a4:62:e4:c3:db:8d:
                    38:da:d3:60:94:e7:82:85:ca:3c:a3:33:9b:36:02:
                    8c:25:35:e6:03:af:21:33:f0:31:f4:8b:a0:69:2c:
                    1b:39:d3:37:1d:c7:95:0a:2d:90:07:58:f7:0b:7a:
                    e2:d1:42:e0:29:25:c2:a7:34:84:24:b9:dd:f4:8a:
                    42:5b:ca:df:6d:a7:61:89:9a:5f:03:80:85:f9:e8:
                    91:f4:c7:52:40:6a:b8:bc:5a:e2:19:e2:6e:de:45:
                    62:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0C:45:E8:C8:1B:45:48:5A:20:E2:8F:EC:E4:3A:8A:30:D3:7F:28
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/xQxF6MgbRUhaIOKP7OQ6ijDTfyg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.57.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:ff:fe:cd:f5:4f:44:6e:92:57:a3:35:6d:88:e4:0d:ba:3a:
         ed:9e:81:9a:da:6f:37:bb:d3:63:dc:14:3e:5d:2b:6b:8d:9d:
         08:ed:f9:02:6e:83:26:cd:9a:72:55:88:79:d2:cf:55:01:2b:
         88:e3:22:96:ef:85:7e:16:ac:63:dd:aa:71:2f:62:b6:5d:9d:
         b5:fa:36:41:d1:35:2d:34:98:32:3e:75:25:7c:70:ca:d3:e5:
         0e:f0:03:71:b6:34:cc:f3:4a:55:4a:af:70:f5:c9:8a:3a:31:
         3e:1c:7f:a2:42:53:50:6b:65:12:9e:0a:aa:d7:05:22:89:17:
         c8:57:ce:3a:7e:a9:5f:c2:e5:02:cd:3f:81:5b:60:16:d0:0a:
         b0:cb:2e:95:fb:28:d0:e8:8b:74:09:2f:dd:68:fd:29:93:cb:
         a7:d5:69:25:d1:ef:07:1e:db:37:8d:58:05:42:a5:7f:e8:e0:
         be:9f:ea:9a:9b:ac:f3:60:47:44:ef:1e:8b:5a:26:45:02:79:
         86:07:de:9c:d2:c8:02:76:53:f1:c5:4a:0d:be:5f:0f:f0:78:
         9d:cd:e8:f8:d6:80:a6:9e:2e:c2:5f:aa:ef:3b:3d:d0:a3:dc:
         3d:ee:5f:45:d2:24:20:17:a3:4c:4d:b9:cb:0a:01:53:78:fd:
         60:d0:dc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org