Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/ZsaWG1ISCSWf0XipmTxsNkt6VKM.roa
File:                     ZsaWG1ISCSWf0XipmTxsNkt6VKM.roa (raw, json)
Hash identifier:          VR06Oj0o+tMwvYg7+6TJ//bJD0o6T2EK3vk7tsnUZjM=
Subject key identifier:   66:C6:96:1B:52:12:09:25:9F:D1:78:A9:99:3C:6C:36:4B:7A:54:A3
Certificate issuer:       /CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Certificate serial:       0190116F70F4CF988B5506501C3F46374D38
Authority key identifier: 49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/ZsaWG1ISCSWf0XipmTxsNkt6VKM.roa
Signing time:             Thu 13 Jun 2024 11:50:34 +0000
ROA not before:           Thu 13 Jun 2024 11:50:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     198904
IP address blocks:        5.32.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 19 Jun 2024 12:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:11:6f:70:f4:cf:98:8b:55:06:50:1c:3f:46:37:4d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
        Validity
            Not Before: Jun 13 11:50:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66c6961b521209259fd178a9993c6c364b7a54a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:da:80:ca:63:80:f7:f1:c5:20:c7:b1:ed:
                    81:53:ad:c5:9a:4f:9e:b0:51:51:87:5f:b5:7a:80:
                    f1:88:10:b1:aa:f4:62:78:a5:12:2e:c7:3a:e4:82:
                    91:09:60:6a:4f:4e:a1:06:a1:cc:a1:9f:af:fd:04:
                    a7:a6:3a:80:9a:d5:f3:27:80:22:09:27:65:11:83:
                    ee:5f:a2:53:49:2b:ea:e5:24:5d:e1:21:9f:38:79:
                    e0:6d:8b:d1:f1:30:b3:b1:2d:68:88:47:eb:be:19:
                    7b:55:29:fc:71:90:c7:2d:cb:e3:11:c4:d0:83:6e:
                    a5:c7:67:a3:c5:4f:9a:a0:bd:f5:b5:c7:f0:6e:96:
                    6f:e2:7a:31:fc:4e:32:5d:79:63:1b:a0:10:d3:28:
                    98:ba:74:4c:2c:52:58:a7:5a:e2:9a:58:70:3d:a3:
                    48:28:12:62:5c:01:28:0d:0e:76:7e:31:db:63:3b:
                    84:49:39:1b:64:c7:5e:9a:fe:d5:7b:b7:18:fa:cc:
                    93:c8:e4:5e:7b:ec:a4:cb:b1:44:b4:02:95:fb:5d:
                    8f:cc:20:7c:70:d1:dd:2d:5b:3a:19:ec:fd:70:59:
                    c9:14:06:bb:66:a8:b1:c4:89:82:fa:19:f2:16:17:
                    95:fc:15:3f:58:a0:8e:f3:65:87:0f:01:6c:af:1c:
                    5f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C6:96:1B:52:12:09:25:9F:D1:78:A9:99:3C:6C:36:4B:7A:54:A3
            X509v3 Authority Key Identifier:
                keyid:49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/ZsaWG1ISCSWf0XipmTxsNkt6VKM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.32.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:ef:d2:2b:68:65:26:f4:c3:6f:bd:95:a7:04:d9:0b:f7:86:
         a0:30:10:54:cb:8a:14:e6:20:d7:b8:6d:d0:9f:01:3e:a3:99:
         85:2d:3b:15:b6:cb:4c:c7:53:68:e3:3c:8b:fe:cb:c8:aa:94:
         11:ad:7d:83:5d:a3:23:da:08:ed:96:e2:1e:5d:e6:3f:d4:65:
         19:27:bf:66:07:a9:f5:82:ac:ea:64:eb:d1:fc:cf:0e:24:04:
         06:ae:3a:56:67:6d:76:4a:1a:51:df:8d:73:a5:72:a8:6d:b3:
         3e:c8:78:9f:60:1b:54:2e:85:54:da:4a:f3:dc:d9:ef:70:28:
         6d:67:9b:91:49:b7:24:16:ed:85:38:5e:ae:6f:2a:76:c0:66:
         bd:b8:75:e0:87:ff:8c:12:a9:8f:39:82:d5:80:fb:eb:c1:b5:
         1e:a8:42:2d:90:37:f1:5b:01:ef:68:a7:f0:70:72:2d:f5:bf:
         1b:c0:5e:f5:af:6c:c4:6e:9d:d0:d7:68:62:a0:f8:41:af:99:
         c0:da:15:ff:3c:81:4f:1f:f5:cf:c6:2f:4a:48:a7:ec:0c:80:
         d4:a4:ce:ea:f4:7c:73:ae:5d:a5:9a:cd:5f:6d:b8:df:b8:86:
         c2:f0:3c:c7:e0:a3:82:80:45:42:84:ce:86:a9:75:1b:00:ad:
         0c:49:7d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 16:26:00 2024 by rpki-client on console-ams.rpki-client.org