Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5Cqxs5wcGZSEW7W4rwWvl1h9Fx4.roa
File:                     5Cqxs5wcGZSEW7W4rwWvl1h9Fx4.roa (raw, json)
Hash identifier:          vJn9CjZew78OcEUArSmkSFbn0/ds03Hr7ziwYw5cKtk=
Subject key identifier:   E4:2A:B1:B3:9C:1C:19:94:84:5B:B5:B8:AF:05:AF:97:58:7D:17:1E
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       0187E0AFFE55CC94E8FF48E7E134B28A90B0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5Cqxs5wcGZSEW7W4rwWvl1h9Fx4.roa
Signing time:             Wed 03 May 2023 08:17:22 +0000
ROA not before:           Wed 03 May 2023 08:17:22 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207279
IP address blocks:        89.35.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 03 Jun 2023 12:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e0:af:fe:55:cc:94:e8:ff:48:e7:e1:34:b2:8a:90:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: May  3 08:17:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e42ab1b39c1c1994845bb5b8af05af97587d171e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cb:ff:bb:79:0c:e8:91:59:f2:6e:79:fa:8a:
                    b2:c7:ed:6a:5e:c2:08:11:56:da:42:a3:b3:c7:a7:
                    f6:a3:57:36:86:88:ea:e7:96:5b:46:2e:38:f5:8d:
                    2e:bd:38:c0:4f:39:14:3a:c4:88:50:34:e6:ad:5f:
                    6a:48:f8:a4:04:b9:b8:a5:e1:3f:2a:c1:a8:b9:9d:
                    a8:21:e8:50:24:83:96:1e:d9:79:e5:e3:47:bb:d1:
                    89:68:c9:13:22:81:58:2c:77:a1:00:e9:76:57:b8:
                    b6:e8:42:fe:ad:57:e1:cc:ef:b4:ec:4f:25:08:4b:
                    ff:cf:32:c8:c0:84:1f:76:ef:d2:ab:db:f3:57:09:
                    65:03:2b:79:fd:9d:bb:c6:d8:47:6c:bc:b4:fe:48:
                    79:c6:36:c1:3e:5f:c0:00:80:d6:f0:3f:d0:a2:d3:
                    0f:88:70:26:cc:22:7c:ab:b4:65:5e:fe:2d:27:ab:
                    24:f9:be:e6:56:1c:ed:69:11:0b:8e:28:ee:6f:d6:
                    ff:aa:5d:8f:8e:d9:9c:f7:16:e0:83:1a:74:7d:e4:
                    88:0d:ce:d8:9b:4e:e2:4e:97:59:61:27:3d:a0:a3:
                    7e:b1:e9:a0:85:1c:aa:da:e9:dc:c0:2f:fe:36:7b:
                    fb:49:4c:47:9b:ef:58:5f:e5:50:3c:51:45:ab:4f:
                    61:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2A:B1:B3:9C:1C:19:94:84:5B:B5:B8:AF:05:AF:97:58:7D:17:1E
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5Cqxs5wcGZSEW7W4rwWvl1h9Fx4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.35.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:9f:3d:ad:17:4c:eb:0d:07:6c:a1:bb:24:0b:2a:2e:a9:82:
         eb:79:37:7f:fe:12:6f:a4:8a:77:c6:92:19:97:a8:00:95:1f:
         ff:8f:ff:48:37:59:7b:11:5d:21:53:9c:b9:b7:91:74:1d:02:
         a3:cf:24:1b:d0:b0:b8:6a:34:e5:d8:a7:9d:0e:ad:56:34:7a:
         a7:4a:32:ca:33:21:c1:86:2d:d4:0c:c2:d1:50:57:da:ce:c8:
         4a:1c:57:78:d9:08:58:bb:cd:8f:84:34:59:20:92:7d:ee:4b:
         44:6d:c0:5f:65:0d:f9:5e:2f:ff:0f:23:6b:42:20:19:9f:7c:
         63:43:a0:67:1c:6b:4f:86:0b:16:a9:7e:81:7e:c3:22:c3:38:
         01:82:4a:0f:f1:6f:7d:14:6d:88:3b:d6:3f:f5:48:df:79:7a:
         89:89:c2:7c:fb:f2:7c:3d:40:5d:ae:34:be:04:5d:15:b4:2d:
         20:76:88:a4:43:2c:15:1f:db:d0:f0:d0:b6:a7:aa:5f:e3:62:
         06:77:9c:d7:62:d1:86:8e:59:85:0e:e0:2a:a1:12:18:93:f6:
         ab:c6:24:ff:1e:df:ed:a7:89:ec:df:c2:0a:02:a3:15:3a:c9:
         1b:41:23:3a:62:31:2e:cb:30:62:e0:0d:3c:7a:4a:f5:8b:33:
         be:4f:c2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org