Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/GSnO-i_l-3_PhTK5neZrmquoDiE.roa
File:                     GSnO-i_l-3_PhTK5neZrmquoDiE.roa (raw, json)
Hash identifier:          bHDmAr5xGiyTH2feNELvQ3XGcbZ/KWYMtvffgltdgXs=
Subject key identifier:   19:29:CE:FA:2F:E5:FB:7F:CF:85:32:B9:9D:E6:6B:9A:AB:A8:0E:21
Certificate issuer:       /CN=edfe3f6f6d98714e01f08c73b2644368774e8660
Certificate serial:       01876FB77CAA3B90EEF70E59D65B1C220C5B
Authority key identifier: ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/GSnO-i_l-3_PhTK5neZrmquoDiE.roa
Signing time:             Tue 11 Apr 2023 09:48:28 +0000
ROA not before:           Tue 11 Apr 2023 09:48:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        194.50.144.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:6f:b7:7c:aa:3b:90:ee:f7:0e:59:d6:5b:1c:22:0c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfe3f6f6d98714e01f08c73b2644368774e8660
        Validity
            Not Before: Apr 11 09:48:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1929cefa2fe5fb7fcf8532b99de66b9aaba80e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a7:39:8f:55:cb:80:0b:2b:56:a4:1f:be:37:
                    42:b8:9c:b2:dd:c1:a8:dd:9f:c6:39:13:54:73:5d:
                    c2:ef:b3:30:5f:82:56:ab:bc:be:3b:48:be:23:89:
                    87:e9:66:86:87:14:88:96:4c:d5:5e:5c:b6:a8:2f:
                    07:43:3f:76:cc:bf:7d:88:11:8a:6e:78:49:a4:3a:
                    14:3e:e4:20:dc:7b:33:39:c6:94:88:4a:65:04:20:
                    56:a2:22:28:f5:b9:55:60:28:6c:02:44:ec:23:13:
                    64:dc:ee:a4:71:32:4d:4e:b8:6c:ae:b1:87:bb:a3:
                    48:0a:bb:a3:9c:e9:bb:b8:42:ae:c0:14:f4:a5:97:
                    4c:d5:72:91:b3:47:47:de:6f:34:2a:0d:52:ad:52:
                    0d:c6:16:68:dc:e3:7d:06:8f:9e:f4:c1:9c:13:28:
                    ab:e8:d9:48:41:b2:17:97:fd:47:9c:6e:14:aa:a1:
                    f3:b2:f4:b4:a6:88:0c:af:33:0d:43:3a:c2:e1:c6:
                    5b:88:6c:70:74:37:c6:16:dd:55:e9:6a:a6:66:f8:
                    93:31:1a:41:ce:df:f5:39:83:4b:46:ae:b2:94:d0:
                    47:54:bc:21:50:61:e4:24:d7:ef:80:80:58:a0:8d:
                    58:d8:cb:a1:b5:75:ea:82:fa:d4:df:7a:d0:a9:48:
                    6b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:29:CE:FA:2F:E5:FB:7F:CF:85:32:B9:9D:E6:6B:9A:AB:A8:0E:21
            X509v3 Authority Key Identifier:
                keyid:ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/GSnO-i_l-3_PhTK5neZrmquoDiE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:7b:5b:2e:dd:84:9a:2e:27:d4:bb:e8:9c:6b:d7:c8:31:a6:
         4e:05:9e:40:48:43:bf:e4:e3:5e:79:66:4d:8a:c1:21:e0:2e:
         00:fb:27:c0:80:12:81:ca:0e:bd:84:23:94:b0:01:86:e7:81:
         cd:39:42:ac:2b:54:8e:1d:fb:77:69:77:b6:c8:24:47:7f:23:
         2b:84:2a:20:17:34:33:1b:e1:6a:c6:72:f8:74:a9:88:9c:db:
         f8:b5:45:14:06:1a:9f:82:42:56:0f:a8:5f:ca:4f:fd:b5:dc:
         f3:2e:3e:95:71:b8:16:06:3a:41:14:f0:42:cc:f4:2c:5b:4e:
         dd:df:00:79:6e:c1:37:0a:b9:26:e3:54:27:e6:b0:f1:44:1a:
         d5:a0:ce:d9:11:f7:2d:dc:ea:77:11:a0:79:ec:5d:2a:50:48:
         35:9d:fd:cc:46:06:09:ce:10:c3:49:e4:a6:4d:30:03:3f:ca:
         13:fc:15:f1:7f:5f:9a:56:dc:33:c9:44:27:66:5b:4b:3e:a4:
         84:cf:2d:2c:60:bf:2a:18:8e:a4:81:f7:f6:87:6f:a6:e8:04:
         4e:9e:69:e8:37:38:00:1d:bf:81:7a:3c:7d:7e:79:ec:9c:58:
         88:b0:d1:97:8f:22:7f:57:9b:8d:a8:f5:89:66:9e:5b:5c:a4:
         82:4a:82:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:27 2024 by rpki-client on console-ams.rpki-client.org