Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/9vPoQpm4KEGgLmYVXdyDD4XT4To.roa
File:                     9vPoQpm4KEGgLmYVXdyDD4XT4To.roa (raw, json)
Hash identifier:          h0jpidc2g6JqxK0iveH/fXESWBrL+A42aYPakD9Dpwg=
Subject key identifier:   F6:F3:E8:42:99:B8:28:41:A0:2E:66:15:5D:DC:83:0F:85:D3:E1:3A
Certificate issuer:       /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial:       019107DFF9DB1140C9B81FA285A24770AF65
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/9vPoQpm4KEGgLmYVXdyDD4XT4To.roa
Signing time:             Wed 31 Jul 2024 08:20:04 +0000
ROA not before:           Wed 31 Jul 2024 08:20:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204528
IP address blocks:        81.199.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 05 Aug 2024 09:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:07:df:f9:db:11:40:c9:b8:1f:a2:85:a2:47:70:af:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
        Validity
            Not Before: Jul 31 08:20:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f6f3e84299b82841a02e66155ddc830f85d3e13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ec:f9:85:bb:2c:95:cc:44:a1:18:3e:0b:09:
                    aa:e7:68:58:61:71:84:5c:8f:d0:1e:7c:a2:04:07:
                    6f:f9:f4:8c:39:75:85:88:9e:d5:e8:7d:51:62:fb:
                    82:24:2a:bc:98:8b:5b:2b:10:83:fb:b0:70:89:ea:
                    fe:34:e4:fa:ea:67:39:48:c0:5b:b1:ff:f2:31:54:
                    62:08:cb:57:5c:1a:87:48:28:1b:5e:da:dd:be:e1:
                    70:85:bd:39:b4:b8:ea:6a:f9:e3:90:63:e1:6e:60:
                    3d:bc:4f:32:1e:48:c4:f2:ac:7c:b7:a6:fe:27:d2:
                    68:bf:75:3d:37:3d:fd:1e:e9:25:63:d8:04:39:0a:
                    68:e4:df:7b:15:52:5a:8a:23:76:d4:73:52:6c:8c:
                    2d:87:5b:ba:f3:16:b1:a3:82:9e:9e:ad:78:6d:28:
                    5a:5d:b7:72:66:2f:65:6b:d0:f1:65:5d:40:5d:cb:
                    bd:52:de:c7:7c:60:18:c9:07:6c:70:74:ef:96:1a:
                    fe:b9:d7:d8:d9:5b:a2:0d:a9:bb:a1:60:32:1e:87:
                    6d:cb:9f:5b:b0:50:a9:1f:ab:c3:66:67:84:e2:50:
                    16:b4:8d:a2:5a:c1:3c:60:c6:7b:6c:8d:14:82:35:
                    d2:0b:db:5a:a4:29:d7:9e:4e:03:77:d9:db:bb:0d:
                    80:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F3:E8:42:99:B8:28:41:A0:2E:66:15:5D:DC:83:0F:85:D3:E1:3A
            X509v3 Authority Key Identifier:
                keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/9vPoQpm4KEGgLmYVXdyDD4XT4To.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.199.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:85:e3:c9:c2:d5:e4:8e:10:d1:d4:bc:9b:fd:6a:c2:a9:05:
         7c:5b:9a:6f:77:e6:5e:f3:41:c2:5f:39:31:63:76:bf:24:9d:
         df:50:6b:77:c7:f2:42:c1:e9:4f:be:cc:9a:5a:4e:50:ce:28:
         85:d9:00:9a:62:65:46:29:42:06:3e:91:4c:b9:32:40:ed:94:
         35:b0:c7:e4:ea:f3:8a:d6:a8:4f:31:6d:63:a6:12:89:ca:44:
         64:5a:17:20:08:ed:98:df:a7:78:56:4d:31:b1:fd:bd:52:8a:
         97:fd:37:7e:b0:ec:25:11:d4:2e:3b:bc:80:5b:99:a3:88:0d:
         10:fe:4e:14:1f:2b:4b:5e:f9:62:78:28:30:2d:48:9e:ff:9f:
         34:05:41:ce:54:03:66:2f:c2:60:c6:36:71:41:57:60:6f:4e:
         96:ac:79:c6:2a:06:78:a3:b5:1e:3f:76:f6:a8:74:f1:68:10:
         a4:a8:94:a8:09:ae:18:0d:d3:75:02:cc:d5:5f:ec:1e:01:6f:
         06:99:dd:2b:d6:65:6b:c7:29:3e:2e:28:52:04:8e:21:04:7a:
         9a:11:a4:f8:17:2b:57:a0:ba:17:32:fb:a1:1a:e5:6d:17:11:
         5f:8b:98:aa:a9:51:c5:83:66:ed:68:86:4a:d9:bc:84:36:73:
         1a:ff:95:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 11:00:26 2024 by rpki-client on console-fra.rpki-client.org