Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/b2q_V6fFPlXvTZFQdOji_3ntIu4.roa
File:                     b2q_V6fFPlXvTZFQdOji_3ntIu4.roa (raw, json)
Hash identifier:          /D85fL5ELs/GGVMVDwS6qtvCQaAzB4Fv7+DF2UCkG8g=
Subject key identifier:   6F:6A:BF:57:A7:C5:3E:55:EF:4D:91:50:74:E8:E2:FF:79:ED:22:EE
Certificate issuer:       /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial:       018D642D23A36630E238C2C1513E51BAE521
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/b2q_V6fFPlXvTZFQdOji_3ntIu4.roa
Signing time:             Thu 01 Feb 2024 10:18:16 +0000
ROA not before:           Thu 01 Feb 2024 10:18:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58350
IP address blocks:        195.150.48.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Fri 02 Feb 2024 06:57:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:64:2d:23:a3:66:30:e2:38:c2:c1:51:3e:51:ba:e5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
        Validity
            Not Before: Feb  1 10:18:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6f6abf57a7c53e55ef4d915074e8e2ff79ed22ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:9e:76:cb:9e:4c:72:40:c7:d2:96:00:e4:
                    fe:de:28:ee:62:82:fb:0c:04:a4:6d:d9:3d:c6:27:
                    80:24:3a:76:a2:bf:63:e0:fa:4a:35:b2:4e:08:d6:
                    27:47:28:c0:d4:78:df:45:fc:d5:66:8b:ce:51:f9:
                    b4:73:ea:a9:0f:2f:c9:ff:94:b4:fd:a0:71:85:a4:
                    99:33:3a:3b:a2:0d:da:79:14:b3:4a:0b:f5:08:98:
                    09:7e:46:42:78:e6:5f:ad:7a:f7:15:35:0c:fe:af:
                    72:68:a7:03:31:e4:8f:95:db:b2:b2:99:bf:a7:f1:
                    fc:f4:b8:25:12:76:ac:11:b2:b1:0a:b5:96:69:47:
                    a1:8f:13:78:28:fe:11:58:84:3d:e7:ab:2e:f3:e0:
                    65:04:ba:88:19:4c:8c:47:5d:5b:0a:f6:3a:ba:58:
                    f9:20:a7:fa:9e:01:1b:b1:82:f4:8c:f9:09:14:bb:
                    04:65:ed:f7:f3:23:5e:1d:fd:51:01:6c:ca:ed:9c:
                    a6:e5:35:0d:76:b1:6b:1e:67:35:3d:bf:d3:97:a6:
                    da:c4:d3:c8:40:6f:5e:e4:97:ec:23:6b:23:01:d7:
                    9a:98:26:fe:f3:30:64:36:a0:14:0d:56:d5:82:63:
                    47:3a:86:7b:1a:32:7a:26:63:77:76:6b:4e:3d:fc:
                    3b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6A:BF:57:A7:C5:3E:55:EF:4D:91:50:74:E8:E2:FF:79:ED:22:EE
            X509v3 Authority Key Identifier:
                keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/b2q_V6fFPlXvTZFQdOji_3ntIu4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.150.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:1f:5b:70:8c:56:29:01:de:0e:de:25:76:4a:d4:8f:90:d7:
         58:63:ae:4f:62:8e:e7:0e:c3:79:5f:5c:7c:67:9f:72:96:02:
         77:66:14:50:d8:bc:8b:b8:81:bd:36:90:4f:d6:a6:a4:b0:12:
         9e:47:e8:4a:54:64:4a:f8:e9:91:dd:d0:18:08:59:3f:c6:d8:
         15:96:e5:5a:e7:e9:d7:5d:e2:fe:67:e8:33:95:da:bc:c3:78:
         32:6d:c8:2e:8a:3f:e3:35:7c:c0:8e:f6:02:c5:0f:0c:a2:f4:
         81:4a:74:87:91:a5:db:ad:30:94:98:08:c4:a4:09:31:a1:d9:
         4b:58:c0:83:2a:37:ec:dd:c9:fa:43:96:d4:6e:2f:ac:e3:8f:
         c6:92:1c:70:14:ea:97:28:5a:9c:aa:a4:c4:a7:d0:a1:88:79:
         29:54:6c:aa:23:03:b5:e3:ba:fa:24:6c:fc:ec:4c:e5:59:6d:
         ce:92:5a:76:dd:06:19:e9:3b:9a:7d:fb:33:06:b6:74:c2:46:
         1e:94:5c:ab:26:48:df:c4:2f:82:ab:7c:41:57:1a:da:42:5b:
         c9:b2:b5:e7:54:60:34:c5:40:04:03:d2:50:a5:ee:67:05:ad:
         1c:e0:9c:0c:8f:2e:cd:35:12:97:c7:2c:b8:2f:70:31:21:d6:
         cd:bf:ab:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:41 2024 by rpki-client on console-ams.rpki-client.org