Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/S_9Dbm9jPnJcrnTrNm3cGvlMtcY.roa
File:                     S_9Dbm9jPnJcrnTrNm3cGvlMtcY.roa (raw, json)
Hash identifier:          BrIITZXDmYXzmU6uS+EPP2/4FqmeDQUVvJx8SketkqU=
Subject key identifier:   4B:FF:43:6E:6F:63:3E:72:5C:AE:74:EB:36:6D:DC:1A:F9:4C:B5:C6
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018E46B22A535584ADA3D5CDE3D93DDC0BFE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/S_9Dbm9jPnJcrnTrNm3cGvlMtcY.roa
Signing time:             Sat 16 Mar 2024 09:57:45 +0000
ROA not before:           Sat 16 Mar 2024 09:57:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     56322
IP address blocks:        94.177.51.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 02 May 2024 17:39:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:46:b2:2a:53:55:84:ad:a3:d5:cd:e3:d9:3d:dc:0b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Mar 16 09:57:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4bff436e6f633e725cae74eb366ddc1af94cb5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:23:44:d0:0d:7b:be:df:38:25:fd:e5:c4:57:
                    70:c4:fb:cc:80:5b:42:02:24:32:36:92:df:5a:8f:
                    60:d0:8a:f0:4a:3d:f3:cf:63:89:3e:ea:97:11:ed:
                    77:47:0a:78:5c:b8:62:f2:5b:76:fc:fd:6f:6e:b5:
                    4f:c6:04:9c:ed:c0:64:31:66:16:80:86:94:6c:c2:
                    8f:30:5c:26:fb:91:c7:c0:ff:38:c0:6b:b8:04:d9:
                    d2:cc:01:14:0d:46:20:1d:7a:0a:63:a0:75:95:7d:
                    82:d9:24:24:8f:6e:e1:07:f4:45:da:dc:32:c8:51:
                    69:d9:27:2a:b9:09:e3:ba:62:1e:4a:ca:d5:9d:12:
                    c0:35:81:63:71:c3:67:8d:20:0d:04:85:73:52:96:
                    f5:ee:3e:c1:90:e6:d2:1c:16:d5:44:c3:b7:07:f7:
                    85:ad:16:82:10:ab:ef:dc:fe:5f:11:40:01:78:30:
                    b2:94:ce:3d:13:da:d8:94:eb:40:3c:7e:2c:59:f1:
                    bd:3b:3d:a1:43:c3:fa:d7:9e:a2:1a:6c:9a:65:75:
                    8a:d1:56:5f:e0:51:d1:df:96:01:95:84:a7:3e:0f:
                    09:f1:6f:80:6c:0f:b6:c2:8a:7c:4e:d6:32:b8:ed:
                    ac:a6:f7:4c:97:7d:ba:ef:74:9e:67:fa:57:69:5b:
                    1f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FF:43:6E:6F:63:3E:72:5C:AE:74:EB:36:6D:DC:1A:F9:4C:B5:C6
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/S_9Dbm9jPnJcrnTrNm3cGvlMtcY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.177.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:d3:6d:72:19:88:be:22:6b:ed:0e:65:81:53:ba:f9:12:00:
         53:1e:61:a7:cf:c3:ac:af:29:28:8c:af:74:a7:89:0d:75:b9:
         89:59:e6:5d:3b:d7:bf:db:d9:2c:d6:c4:2b:f2:57:6a:a0:94:
         83:a1:5b:b3:16:e2:71:e7:6a:5a:c4:4a:5f:d7:f3:4b:95:84:
         76:65:13:c6:91:5f:8e:12:88:d3:43:d3:78:59:85:dc:2e:60:
         f2:3c:91:66:7e:eb:f7:3f:05:83:c7:ca:e5:90:b9:38:46:99:
         10:2d:1a:20:a3:91:31:9c:c9:e0:95:b4:d1:07:a0:d6:eb:6b:
         22:1a:6b:3f:35:00:67:06:62:75:c2:28:85:89:57:f2:ab:de:
         00:11:ec:d3:59:52:e7:b2:d5:9f:57:9e:f4:18:c1:9c:6c:db:
         d4:9a:47:fc:d0:39:c6:b2:3b:6a:7e:4e:d5:87:98:ee:dd:9b:
         7f:11:83:02:27:05:69:5c:0a:5f:23:98:1c:18:a6:87:89:1e:
         07:a5:66:88:21:b1:60:ce:62:84:78:fb:05:7a:b2:14:f2:20:
         55:9c:02:aa:07:6d:10:77:4c:54:48:f6:67:ce:82:cf:50:1a:
         86:5c:e6:ba:49:c7:88:d1:34:cc:8a:c6:db:43:42:c5:22:31:
         aa:e7:37:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org