Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/TEamTukUjbFJVKWT6HLdHYIEBiA.roa
File:                     TEamTukUjbFJVKWT6HLdHYIEBiA.roa (raw, json)
Hash identifier:          zysiqIfdeIFElZiFU5fPSj8uhC4fXeFO06aG+8WKD7w=
Subject key identifier:   4C:46:A6:4E:E9:14:8D:B1:49:54:A5:93:E8:72:DD:1D:82:04:06:20
Certificate issuer:       /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial:       01856CCADFEF36AFC75CCF5DE34920660460
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/TEamTukUjbFJVKWT6HLdHYIEBiA.roa
Signing time:             Sun 01 Jan 2023 10:05:12 +0000
ROA not before:           Sun 01 Jan 2023 10:05:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50979
IP address blocks:        195.123.208.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ca:df:ef:36:af:c7:5c:cf:5d:e3:49:20:66:04:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
        Validity
            Not Before: Jan  1 10:05:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4c46a64ee9148db14954a593e872dd1d82040620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:e4:38:bb:05:f5:7c:2d:ac:53:85:8d:b6:
                    07:b4:b6:fe:c8:ba:52:6c:db:15:d8:90:f1:92:54:
                    69:4f:df:25:8c:e8:52:cb:5a:5e:f4:ad:22:7a:1c:
                    03:dd:ad:97:28:36:12:6c:cd:73:4a:30:9d:e2:98:
                    06:9a:fa:ad:2d:36:17:50:05:a3:1c:7b:c7:b5:a1:
                    0a:34:d6:0f:ff:fa:63:73:33:48:7a:31:28:94:73:
                    78:d7:f2:91:30:72:78:36:75:59:c8:3f:d9:0d:ee:
                    b5:0d:b7:d8:52:f2:2b:ab:e3:a9:85:2d:71:23:52:
                    70:c0:36:c3:d1:a9:87:9c:85:b1:64:de:62:06:21:
                    08:8f:8c:52:a4:01:23:47:85:a6:ac:11:bf:6d:c7:
                    7f:5f:c0:0e:72:8a:c6:b8:06:45:2d:c2:8e:31:03:
                    fd:65:0f:0b:52:76:ac:e2:f7:48:ef:f1:26:d2:7f:
                    a1:17:48:f8:b6:a2:f3:d3:20:c6:d0:d9:73:cf:92:
                    1a:2d:61:03:8b:9c:aa:c6:99:b6:50:05:55:f6:90:
                    78:b8:1d:3b:ba:00:da:a0:9f:9a:2a:c8:0d:b5:fb:
                    a9:3b:59:6d:c5:50:a9:c2:ac:ad:ba:ee:02:d4:ed:
                    14:db:ff:c1:18:cc:d0:9a:71:55:54:3a:e9:de:3f:
                    fc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:46:A6:4E:E9:14:8D:B1:49:54:A5:93:E8:72:DD:1D:82:04:06:20
            X509v3 Authority Key Identifier:
                keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/TEamTukUjbFJVKWT6HLdHYIEBiA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.123.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         01:4b:58:cf:c1:f1:73:33:21:8b:5a:a1:de:f1:de:59:63:d8:
         e3:e4:c2:67:61:b9:41:83:fb:ae:da:20:62:19:b2:e3:51:14:
         d8:fe:42:05:87:80:45:de:c0:b4:a0:b4:fa:41:bc:a2:6e:75:
         7a:d5:dc:dc:1e:b7:ec:99:1e:9f:9d:66:24:98:5e:e5:8b:0a:
         2e:dd:ec:33:d3:23:bf:9a:aa:61:7c:0f:32:d3:c4:85:87:dc:
         da:fd:db:d0:4d:ad:09:cc:9d:6c:54:bc:73:ce:1c:4a:13:6e:
         f4:13:6f:09:7a:21:9f:69:2e:74:fb:18:58:7a:b0:8c:cb:f2:
         03:42:cf:09:9c:df:37:ec:4e:b0:f1:d0:ae:9d:7b:b4:17:15:
         61:71:16:d1:94:77:21:cc:40:df:fa:9c:bf:a7:ca:90:50:f2:
         5e:60:e8:66:23:fb:90:ae:08:5a:cf:0f:4d:06:dc:c1:0b:b4:
         f0:84:71:79:d4:35:e3:88:84:0a:c0:9b:b1:a3:1c:32:d7:25:
         c8:61:c8:73:ec:78:62:22:f4:33:ad:31:05:ad:ef:03:72:e7:
         22:b1:a7:ec:24:f3:e3:38:94:c0:68:8a:5b:30:5f:6f:27:7e:
         36:69:73:cf:b8:b2:f3:c9:89:90:9d:fe:7b:08:64:4f:4a:8a:
         71:cd:73:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:45 2024 by rpki-client on console-ams.rpki-client.org