Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/Tv2mm5zDbitA_QTeYgN9h2wtxcc.roa
File:                     Tv2mm5zDbitA_QTeYgN9h2wtxcc.roa (raw, json)
Hash identifier:          ycClztXP3OD5LbY8ekEYLEUNfln1fu/jGmsIHC+fzvI=
Subject key identifier:   4E:FD:A6:9B:9C:C3:6E:2B:40:FD:04:DE:62:03:7D:87:6C:2D:C5:C7
Certificate issuer:       /CN=470c2c983b627169218571c6b82947aeeea5f7ce
Certificate serial:       01856D788FF58917EAAF85B19AF6F3CF0C9F
Authority key identifier: 47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/Tv2mm5zDbitA_QTeYgN9h2wtxcc.roa
Signing time:             Sun 01 Jan 2023 13:14:55 +0000
ROA not before:           Sun 01 Jan 2023 13:14:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43341
IP address blocks:        193.26.123.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:78:8f:f5:89:17:ea:af:85:b1:9a:f6:f3:cf:0c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470c2c983b627169218571c6b82947aeeea5f7ce
        Validity
            Not Before: Jan  1 13:14:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4efda69b9cc36e2b40fd04de62037d876c2dc5c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e9:d9:66:98:75:ae:7a:e0:16:fe:25:dc:da:
                    d9:00:44:11:30:3a:fe:ef:87:01:6a:c5:9f:35:2b:
                    cd:02:1c:6f:4a:29:dc:d6:7a:0c:8b:4b:f8:ee:5d:
                    1f:06:6d:53:de:83:2d:72:12:63:fe:2b:2d:b3:d8:
                    7f:da:04:38:c9:af:33:fa:20:1c:bc:1f:9d:4f:41:
                    35:23:60:f5:b2:40:dc:25:3f:70:03:a6:af:61:7d:
                    e8:01:7d:7e:8f:bc:da:05:c0:cc:fb:40:02:47:f5:
                    86:7d:77:cd:b7:b5:26:eb:2f:f8:c3:86:74:d4:1f:
                    32:27:4f:47:65:5d:e9:f7:82:ea:d8:d2:4f:db:3b:
                    1d:11:72:2b:bb:24:39:a7:4e:b4:c6:ba:f1:93:89:
                    ee:d2:f0:e1:13:a3:4b:2b:51:36:6c:30:f5:17:fa:
                    e2:92:fe:bd:9b:a3:0e:55:73:c8:6c:2f:48:2c:10:
                    07:e3:30:9c:5f:f2:55:e6:10:24:5b:33:b6:71:37:
                    d4:f9:96:6f:6a:01:23:1c:9a:d6:72:55:d6:08:93:
                    e9:df:71:71:ad:d2:6a:73:4b:37:bf:95:13:00:c4:
                    92:58:31:f5:d4:4a:09:f7:14:f3:84:c8:a6:64:39:
                    09:80:14:6f:68:13:de:09:2b:ab:58:70:07:30:0c:
                    7c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FD:A6:9B:9C:C3:6E:2B:40:FD:04:DE:62:03:7D:87:6C:2D:C5:C7
            X509v3 Authority Key Identifier:
                keyid:47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/Tv2mm5zDbitA_QTeYgN9h2wtxcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.26.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:ff:55:58:4a:18:16:57:dd:aa:d6:65:45:3c:43:c2:03:a4:
         31:69:3c:f2:18:10:6c:3f:66:27:34:dc:7f:1b:ed:29:4b:fa:
         d7:41:36:8f:2b:e5:dd:52:a9:e5:03:73:37:14:7e:41:ad:1d:
         fb:c3:3c:c0:ec:91:4f:ac:1b:24:4c:a6:6b:7c:79:af:84:04:
         78:c0:a3:d6:2f:fa:4a:30:56:b6:25:ff:68:82:a2:50:5b:17:
         a8:ae:52:ab:9c:db:0a:a7:0a:46:8e:87:97:0d:90:0a:3b:9f:
         eb:c4:84:cb:eb:0a:1a:67:48:b2:68:eb:2e:66:7a:d2:a9:86:
         8c:80:7d:ba:71:3e:82:e5:63:ca:ca:b6:5d:a9:27:d8:ae:4a:
         b0:38:0f:7e:da:d8:19:45:b8:8e:b0:12:15:0e:57:6a:8c:16:
         47:8c:79:c6:7f:35:ba:2d:97:e6:38:57:56:7d:3a:a9:51:8c:
         c7:d3:9f:84:50:f4:cb:78:cc:8c:1f:97:ab:27:12:f9:63:af:
         e5:cf:9c:b6:db:74:ef:12:38:e6:32:72:a9:70:e0:4c:6f:2c:
         6a:f1:02:67:a2:e8:91:18:1f:f8:ae:d1:c5:c7:65:c4:a2:14:
         54:f9:6d:f1:50:0b:b3:0a:a1:e0:2e:d6:8c:50:e0:db:66:b8:
         6c:32:a2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:24 2024 by rpki-client on console-ams.rpki-client.org