Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/RNxsXIvcqn5vALwEbXAz5lO0WA8.roa
File:                     RNxsXIvcqn5vALwEbXAz5lO0WA8.roa (raw, json)
Hash identifier:          Aq3XaCoI6WklHZRx4IItkUCi/kgGHirx3HkUlrSUfXI=
Subject key identifier:   44:DC:6C:5C:8B:DC:AA:7E:6F:00:BC:04:6D:70:33:E6:53:B4:58:0F
Certificate issuer:       /CN=cced992030531e7e8b518aefd9e267cc528eda9a
Certificate serial:       0189AC55214F2C440DF2ED4A77A4F38702D6
Authority key identifier: CC:ED:99:20:30:53:1E:7E:8B:51:8A:EF:D9:E2:67:CC:52:8E:DA:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zO2ZIDBTHn6LUYrv2eJnzFKO2po.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/RNxsXIvcqn5vALwEbXAz5lO0WA8.roa
Signing time:             Mon 31 Jul 2023 14:23:27 +0000
ROA not before:           Mon 31 Jul 2023 14:23:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6939
IP address blocks:        195.170.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Sep 2023 11:44:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:ac:55:21:4f:2c:44:0d:f2:ed:4a:77:a4:f3:87:02:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cced992030531e7e8b518aefd9e267cc528eda9a
        Validity
            Not Before: Jul 31 14:23:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=44dc6c5c8bdcaa7e6f00bc046d7033e653b4580f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:40:75:cf:bd:09:70:b9:49:b4:b2:c3:2e:72:
                    7c:95:99:83:5e:b9:5e:9b:af:6a:c6:53:9d:b8:ac:
                    50:bf:1b:57:8d:11:a5:f5:2f:0d:d6:8b:60:82:95:
                    eb:6a:8d:05:79:20:0f:9b:85:af:ee:d3:02:ef:a8:
                    dc:ce:08:0a:17:47:f8:a4:c6:7b:a3:d4:86:34:7d:
                    d4:ea:84:15:85:3d:21:cb:29:f7:03:81:37:d1:fd:
                    b3:85:6d:3c:76:c9:4b:32:3f:8e:fd:11:92:55:75:
                    b8:1e:28:09:5e:a1:ae:a8:51:b8:6a:36:15:e3:07:
                    d8:11:ab:01:af:20:87:70:f5:e5:8a:17:db:4c:c0:
                    c8:61:fb:29:5e:30:2a:fa:97:76:99:14:28:f0:d9:
                    98:ec:fe:cc:35:eb:e3:72:6f:d6:9c:21:0c:04:fc:
                    e9:1f:9a:0f:d3:04:d0:2b:38:04:af:cd:07:ee:ee:
                    41:7c:1e:b5:c4:d1:aa:fb:38:3b:fe:5a:be:52:dd:
                    20:38:95:84:03:bd:f4:e9:67:7d:ac:fb:e3:c3:ee:
                    94:09:ed:d2:cf:b2:0a:8a:ae:d2:4b:72:62:22:32:
                    0c:d4:c5:8c:b4:d8:8b:9b:22:bc:8b:e9:41:68:a0:
                    65:cb:68:97:b6:34:78:4c:3c:86:ac:20:5a:33:4e:
                    ae:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DC:6C:5C:8B:DC:AA:7E:6F:00:BC:04:6D:70:33:E6:53:B4:58:0F
            X509v3 Authority Key Identifier:
                keyid:CC:ED:99:20:30:53:1E:7E:8B:51:8A:EF:D9:E2:67:CC:52:8E:DA:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO2ZIDBTHn6LUYrv2eJnzFKO2po.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/RNxsXIvcqn5vALwEbXAz5lO0WA8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/zO2ZIDBTHn6LUYrv2eJnzFKO2po.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.170.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:9e:fc:1d:eb:87:93:59:e8:ac:0a:b8:cd:df:46:45:01:94:
         b5:b3:ff:f6:14:6c:83:14:01:40:17:5d:ef:79:c8:8b:7a:1e:
         93:c0:0f:a1:f7:57:8f:31:3b:9d:5e:a3:63:9d:4f:e3:a0:90:
         8b:22:83:14:15:3d:ce:5e:4c:c3:92:76:18:56:a9:e1:de:60:
         43:3b:8f:ba:2e:85:70:c2:14:2f:51:d5:a4:1e:c8:1b:d3:f6:
         4e:7f:9e:16:ab:23:c6:a7:c5:c4:d7:f6:3d:41:8d:ab:90:77:
         dd:f8:2b:75:11:20:07:6a:70:3f:47:f7:45:1b:6a:36:72:a0:
         18:c3:95:2e:92:17:08:ef:69:11:58:aa:a2:58:2d:3c:1b:b5:
         95:8f:ce:18:48:76:63:1b:62:08:03:ac:17:b2:c5:7e:13:95:
         61:23:07:ab:fe:bf:da:e4:82:44:13:df:10:d9:f4:25:40:fc:
         6f:a9:4f:07:c9:7f:f7:7c:a3:7a:30:c7:6c:2a:2b:c8:eb:54:
         cc:ac:8e:28:43:c0:ab:bd:6c:65:74:3c:3b:64:95:21:78:e9:
         a7:6b:e7:72:cb:79:42:22:c7:b9:75:f2:f4:b6:94:5f:42:c1:
         e3:7b:cf:1e:a2:72:88:33:03:34:ba:f1:f3:d2:49:33:3a:a8:
         ff:dd:a8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:53 2024 by rpki-client on console-fra.rpki-client.org