Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/caRwg8V-27zZ8pr1Mk8UzkG1GkA.roa
File:                     caRwg8V-27zZ8pr1Mk8UzkG1GkA.roa (raw, json)
Hash identifier:          czDDZLBSUGy5IjKtaU8B2sbmE49Mbs1nFR/fY+TfjBw=
Subject key identifier:   71:A4:70:83:C5:7E:DB:BC:D9:F2:9A:F5:32:4F:14:CE:41:B5:1A:40
Certificate issuer:       /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial:       0186B2143D6E84BFC2164FA923DE96535891
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/caRwg8V-27zZ8pr1Mk8UzkG1GkA.roa
Signing time:             Sun 05 Mar 2023 14:01:56 +0000
ROA not before:           Sun 05 Mar 2023 14:01:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204834
IP address blocks:        188.75.108.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:b2:14:3d:6e:84:bf:c2:16:4f:a9:23:de:96:53:58:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
        Validity
            Not Before: Mar  5 14:01:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=71a47083c57edbbcd9f29af5324f14ce41b51a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:1b:a3:af:4a:69:11:ae:c0:32:b4:49:6f:
                    38:eb:97:55:70:a1:9f:d9:e2:1e:e3:73:34:45:e4:
                    51:21:9a:7e:39:c2:2c:92:68:7c:81:0b:13:0f:f5:
                    d8:a3:04:52:bc:1f:f0:cc:d1:59:4b:da:44:a7:a8:
                    39:4a:16:06:f2:cf:ca:f4:0b:fa:7f:1a:ac:b2:ba:
                    92:72:68:0c:5e:fa:11:9a:9b:04:91:d3:4e:4c:42:
                    7d:24:de:0f:60:fe:98:12:26:68:fc:66:28:32:73:
                    0b:f1:74:ca:9d:eb:29:a2:61:12:15:f6:fa:35:9e:
                    f3:fc:04:50:82:05:1a:45:3e:be:47:a3:ab:8e:90:
                    64:3f:28:dd:bf:7f:51:fe:de:e9:34:9d:75:be:3b:
                    14:16:b4:f5:ca:66:7c:af:7e:c2:2a:f6:71:06:cc:
                    6a:90:67:5a:a5:52:80:b4:81:d4:37:28:48:98:37:
                    4e:dc:0c:49:5d:88:44:29:72:ba:2f:1b:4f:8c:3f:
                    88:3c:d3:98:3b:ce:ce:b1:5c:10:79:a8:3d:f4:d8:
                    b5:1b:80:74:05:4b:be:24:c2:25:e1:13:9a:25:af:
                    2f:a2:87:e1:69:12:0a:bf:df:0a:aa:f0:4d:11:a3:
                    92:4d:ee:95:1e:2b:6e:fa:14:c6:02:c7:7c:08:7c:
                    f6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A4:70:83:C5:7E:DB:BC:D9:F2:9A:F5:32:4F:14:CE:41:B5:1A:40
            X509v3 Authority Key Identifier:
                keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/caRwg8V-27zZ8pr1Mk8UzkG1GkA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.75.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:c4:17:89:6d:df:aa:2f:ca:fc:bc:af:40:07:4e:b0:18:e8:
         28:b5:8a:40:e0:2f:31:0d:a3:f2:c0:aa:dc:63:90:e4:6c:d7:
         42:56:35:0f:5e:c7:f7:1b:99:0a:97:ed:44:67:c6:1a:56:ae:
         e1:12:b7:13:0d:ec:b5:1d:83:1f:bd:33:16:a4:a0:75:9a:4a:
         7c:bc:2f:4d:e2:b3:68:fb:34:46:26:9f:70:23:8f:92:bd:b7:
         9b:d0:34:fe:24:97:c9:56:7f:4a:0f:f7:f1:4d:82:77:07:e5:
         48:92:87:61:91:cd:35:d7:16:fc:bd:e4:ad:2e:44:44:26:5b:
         7b:bf:57:c5:22:ad:6b:30:1a:95:43:8c:48:05:5e:2a:f6:23:
         6f:ac:d5:25:ca:6d:c5:70:6c:0d:13:46:4f:ee:e2:0e:db:af:
         21:44:4d:35:89:c4:68:a3:88:cc:83:53:99:a7:41:62:69:af:
         04:b8:63:69:61:22:71:08:8c:46:8e:93:dd:8f:00:d4:09:0d:
         20:bd:24:94:16:d8:f5:f9:c5:7d:0e:6f:a7:2a:66:a7:5f:64:
         15:81:78:e4:4b:a7:b1:f7:e4:72:5b:e0:f2:e6:5f:98:ea:ac:
         a1:d6:da:96:0c:ff:c6:83:bf:f1:ae:e7:30:38:e5:01:4d:0f:
         22:26:fa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:02 2024 by rpki-client on console-fra.rpki-client.org