Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/jvkOUejCpCIfCj1YwaD1jug-uI4.roa
File:                     jvkOUejCpCIfCj1YwaD1jug-uI4.roa (raw, json)
Hash identifier:          g1nI3B0Oun3Q7C96N+yq7lcvzGq64+wxBtqy+bZFtf4=
Subject key identifier:   8E:F9:0E:51:E8:C2:A4:22:1F:0A:3D:58:C1:A0:F5:8E:E8:3E:B8:8E
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       018F1564695C02EF597B8FD8EDC0A8B5D108
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/jvkOUejCpCIfCj1YwaD1jug-uI4.roa
Signing time:             Thu 25 Apr 2024 13:14:13 +0000
ROA not before:           Thu 25 Apr 2024 13:14:13 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58061
IP address blocks:        2.56.243.0/24 maxlen: 24
                          45.136.206.0/24 maxlen: 24
                          193.47.41.0/24 maxlen: 24
                          194.61.233.0/24 maxlen: 24
                          194.147.88.0/24 maxlen: 24
                          194.156.94.0/24 maxlen: 24
                          194.169.86.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 27 Apr 2024 11:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:15:64:69:5c:02:ef:59:7b:8f:d8:ed:c0:a8:b5:d1:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: Apr 25 13:14:13 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8ef90e51e8c2a4221f0a3d58c1a0f58ee83eb88e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a0:e2:97:b6:eb:02:b7:bf:84:86:66:4d:99:
                    6a:e2:27:64:58:fe:3c:0b:20:6c:06:21:30:33:6a:
                    aa:67:82:b3:12:4a:08:80:0d:9b:8a:4c:e0:41:e8:
                    c2:2d:00:80:93:ca:9b:fc:2a:79:74:74:4a:79:b8:
                    72:f0:ef:f7:97:bc:b3:1b:45:2f:81:72:13:f1:ac:
                    81:d5:6f:9d:e4:82:d1:85:ab:c0:95:24:78:93:36:
                    94:bc:41:1d:35:ab:ea:04:c3:68:d0:00:fb:05:f6:
                    69:6c:ea:eb:ac:d6:3e:12:cd:79:c8:4d:d6:d5:8d:
                    89:6e:a9:2d:9e:55:a0:a2:24:1f:6b:0c:2b:50:39:
                    83:ec:43:27:c7:1e:5f:ae:9d:ef:9b:ae:69:46:ad:
                    8c:5f:24:96:a7:6d:a7:b0:99:4d:04:8f:1c:d3:3a:
                    bb:d0:1b:21:f0:b6:ac:c9:d7:dc:46:73:41:c5:49:
                    ef:b8:2f:90:2c:77:ad:e2:04:3e:50:f2:4b:f4:02:
                    db:d1:15:af:1e:20:43:1e:2f:23:c5:8c:6a:b8:3e:
                    0a:8e:6f:95:90:90:47:ea:8e:8f:3d:c0:df:29:8a:
                    c6:85:2e:1d:ee:ab:6a:dd:cf:12:5f:a2:27:46:e2:
                    0d:10:b9:5f:01:6a:3e:76:7c:8e:a9:3c:ca:1e:25:
                    7b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F9:0E:51:E8:C2:A4:22:1F:0A:3D:58:C1:A0:F5:8E:E8:3E:B8:8E
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/jvkOUejCpCIfCj1YwaD1jug-uI4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.243.0/24
                  45.136.206.0/24
                  193.47.41.0/24
                  194.61.233.0/24
                  194.147.88.0/24
                  194.156.94.0/24
                  194.169.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:d0:c7:d6:d2:d2:12:af:69:8b:f2:ed:3e:f5:f4:59:b7:67:
         86:5a:38:21:6a:82:17:f6:c2:45:25:e1:c7:59:3c:fa:b2:91:
         2a:b7:10:5c:70:09:ee:b5:4f:0b:06:95:aa:73:13:9e:c0:d1:
         7f:b9:55:3c:93:3f:9c:7c:1c:c9:84:88:ff:60:15:3e:c3:18:
         d0:75:7c:e0:ab:87:00:7e:e1:70:b5:29:c4:cf:cd:bd:46:7d:
         55:94:a2:d4:ff:9b:f0:5b:c6:c5:f7:fc:7b:c7:33:73:3a:8c:
         b1:7f:fd:bc:b9:97:1b:a9:16:ae:3e:ad:a9:c0:98:63:17:42:
         ed:d4:c4:cf:ff:00:86:71:99:ba:b0:25:3a:62:e6:21:4c:7b:
         34:8d:f0:24:89:4c:6c:db:50:f2:5b:3b:c4:25:96:44:6d:52:
         8b:86:fe:c0:ed:fb:18:50:5d:16:27:dd:90:21:d7:c3:f8:1f:
         05:18:e5:fe:eb:c6:94:70:7e:04:8d:6e:67:73:25:3a:12:ee:
         62:76:a9:fa:09:ea:42:97:86:e8:b4:c1:3f:5a:33:71:ec:94:
         c6:f2:f0:33:c4:17:87:eb:90:7d:bd:d0:7d:27:0b:5c:a7:82:
         09:43:ef:7a:e7:49:7a:30:45:9c:ee:fd:30:8c:36:fe:2f:b9:
         a8:91:fb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:04 2024 by rpki-client on console-ams.rpki-client.org