Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/c4rwNYYHEivVSqlMwpSlc9I8fF4.roa
File:                     c4rwNYYHEivVSqlMwpSlc9I8fF4.roa (raw, json)
Hash identifier:          OVonug5UJBeocZMwKRr/ldopXM3d7jkA5+g/W0ffr5s=
Subject key identifier:   73:8A:F0:35:86:07:12:2B:D5:4A:A9:4C:C2:94:A5:73:D2:3C:7C:5E
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018D2122985C3148CF57B3DB920850E999E1
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/c4rwNYYHEivVSqlMwpSlc9I8fF4.roa
Signing time:             Fri 19 Jan 2024 09:52:11 +0000
ROA not before:           Fri 19 Jan 2024 09:52:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     36113
IP address blocks:        86.107.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 14:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:21:22:98:5c:31:48:cf:57:b3:db:92:08:50:e9:99:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jan 19 09:52:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=738af0358607122bd54aa94cc294a573d23c7c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:53:35:8d:3b:76:99:bf:cd:13:e3:2d:5f:36:
                    11:61:93:e5:a1:7a:8b:d3:10:e9:b0:94:7e:3f:6d:
                    f9:c9:a8:05:63:c8:e3:25:f9:dc:a8:ef:69:dc:7d:
                    9e:89:6f:8f:86:af:7f:2f:7e:28:c6:75:2a:a3:95:
                    64:87:c2:a4:3c:f2:2d:ed:cf:c7:a3:a0:00:a2:17:
                    6f:34:c7:23:8e:29:9a:7f:62:7e:36:4f:51:1b:d5:
                    25:a3:f9:d8:70:65:21:06:bd:75:f2:05:d1:a3:dd:
                    90:ff:d4:f8:eb:7e:d8:a6:c8:6b:db:17:d1:b4:dd:
                    77:a6:51:82:b9:37:c1:71:7c:3f:69:58:ef:e8:75:
                    a7:c2:04:5d:28:10:0f:f2:5c:cf:e4:0c:53:8e:51:
                    5d:a1:a9:08:33:1c:bf:2a:df:ba:62:ec:b7:11:b1:
                    8f:06:69:a1:ee:28:c3:09:a7:1e:8a:5a:1f:2c:68:
                    2a:0b:9b:c5:93:18:6d:08:05:3f:cb:4c:4e:a0:88:
                    01:35:fa:d9:a0:1b:14:10:c9:23:ba:30:4f:8d:4a:
                    dd:10:0c:a2:85:16:04:67:28:1d:8c:11:97:1a:57:
                    12:a7:5a:aa:ed:d3:ae:f4:61:34:58:ea:14:0c:46:
                    02:5f:f1:35:d3:7f:15:f9:5d:19:7a:1f:3d:5c:a1:
                    fe:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8A:F0:35:86:07:12:2B:D5:4A:A9:4C:C2:94:A5:73:D2:3C:7C:5E
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/c4rwNYYHEivVSqlMwpSlc9I8fF4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.107.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:00:d7:39:a3:ed:0c:15:cb:ed:91:de:4f:e0:69:cd:d2:ed:
         61:11:92:98:76:6c:b9:f5:c8:06:49:cd:68:c3:49:7b:f5:6a:
         c5:9d:00:12:06:8c:e7:d3:67:fd:91:f5:ce:63:fc:6c:c9:fc:
         b0:a3:8f:70:c4:9e:10:39:22:6b:83:51:b1:59:48:e5:44:e9:
         d7:6c:26:2e:79:59:26:b4:34:1a:58:17:46:15:b5:27:e3:c5:
         d6:41:a0:46:1c:18:b7:07:23:41:50:fa:32:c0:ca:8c:ed:5c:
         eb:8a:de:f7:1e:60:12:ef:a4:e5:9d:83:b5:6c:2d:87:c4:a6:
         7d:ce:61:ec:a5:3e:68:90:96:eb:57:f1:cb:4d:6a:d5:84:a7:
         b7:3e:63:4c:cf:e2:a1:9e:5c:b2:5b:11:da:c6:43:f9:be:c3:
         ad:cc:24:f6:fd:c3:37:6d:7d:45:05:6f:cb:a9:b2:5d:6e:2b:
         d8:03:65:b2:db:d0:61:d2:f9:d1:3b:b1:86:52:59:f4:17:9d:
         16:02:80:ed:63:d8:86:7b:0f:91:ae:a4:a2:a0:2a:3d:6e:6b:
         94:ce:4b:5e:3f:3a:3b:dc:1d:96:b6:ec:3d:f3:52:c5:36:7f:
         2e:ba:c7:42:55:18:e7:c6:fc:49:c9:94:cd:c0:0c:6a:9d:3c:
         4f:09:a7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org