Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/TGLgNMd4eKIVzBg_OrK0JN-IaMU.roa
File:                     TGLgNMd4eKIVzBg_OrK0JN-IaMU.roa (raw, json)
Hash identifier:          HZXl9W/COiUZHrBvXhD6iLq7+g1DiFfqtlLTKqyqbXQ=
Subject key identifier:   4C:62:E0:34:C7:78:78:A2:15:CC:18:3F:3A:B2:B4:24:DF:88:68:C5
Certificate issuer:       /CN=26425863c309f2655b884c1600394c4338e7fb41
Certificate serial:       0185723A2A373EAB2525619773EF2F742709
Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/TGLgNMd4eKIVzBg_OrK0JN-IaMU.roa
Signing time:             Mon 02 Jan 2023 11:24:52 +0000
ROA not before:           Mon 02 Jan 2023 11:24:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50300
IP address blocks:        195.60.173.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 12 Dec 2023 12:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:3a:2a:37:3e:ab:25:25:61:97:73:ef:2f:74:27:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41
        Validity
            Not Before: Jan  2 11:24:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4c62e034c77878a215cc183f3ab2b424df8868c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ba:e5:6a:dc:89:6b:d0:3a:fd:e6:14:6d:5c:
                    af:f2:85:ff:36:bc:b6:50:92:86:6e:2e:a0:dc:2d:
                    d8:27:25:91:67:ad:5a:d9:92:8e:08:7e:a5:44:92:
                    eb:62:d1:ff:43:49:3b:d5:a2:88:95:d8:16:a3:31:
                    bf:6e:5e:52:f4:68:62:2f:bd:5f:b9:c6:5d:2e:27:
                    3b:cc:2a:b1:1f:cc:15:8f:c2:60:14:7e:2b:a7:e7:
                    05:5f:7b:b8:f3:5f:d8:83:0e:77:9b:f7:4c:b3:15:
                    ba:4f:9b:58:3c:df:3b:51:b8:57:6c:f0:41:d0:32:
                    3d:4c:6c:6b:85:82:3a:9a:7a:14:b7:3b:b3:d5:c5:
                    32:85:73:13:ea:19:f3:36:30:d4:3c:a7:87:82:a1:
                    0d:9e:0a:44:73:b3:55:0e:46:a5:93:98:e8:7d:c1:
                    62:2e:c0:be:a9:90:f8:0e:07:3b:f1:1c:b6:90:8c:
                    84:95:ca:87:b1:57:74:9f:e6:60:fd:9c:ba:a3:c9:
                    9c:e8:4a:ed:4d:ea:15:eb:94:27:9b:12:4b:6d:2c:
                    c1:d8:fc:4a:7f:61:3e:5c:dc:cf:e1:00:30:b9:d3:
                    b6:61:53:c2:06:93:93:88:b2:7d:e5:bc:32:3e:9a:
                    bc:97:b5:d7:83:6d:6a:c0:39:e5:a6:91:4d:18:02:
                    d4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:62:E0:34:C7:78:78:A2:15:CC:18:3F:3A:B2:B4:24:DF:88:68:C5
            X509v3 Authority Key Identifier:
                keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/TGLgNMd4eKIVzBg_OrK0JN-IaMU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.60.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:1f:79:9f:8a:ab:cf:a3:2e:cd:dc:c4:c2:7f:3d:3f:ac:fd:
         8f:66:03:11:a1:0d:97:41:39:9d:d9:4d:3c:bb:4e:65:ef:42:
         8a:41:44:76:97:6d:93:c2:f5:ab:63:b1:a8:49:2b:54:2f:b1:
         9e:26:9f:15:d9:94:1b:eb:7b:fa:0f:cf:bb:3e:b6:cb:41:8a:
         cb:7c:d6:ff:34:cc:45:9c:21:98:45:0f:c8:57:4e:91:6f:be:
         81:ce:b0:35:64:06:10:d4:9f:a9:8a:28:07:e3:9e:1c:50:ce:
         db:70:88:74:79:4a:42:fe:5e:99:47:93:ac:73:74:e8:fc:3c:
         2b:97:09:74:a2:87:d4:3d:40:01:7d:76:cd:b6:38:8f:e5:2f:
         83:d0:3f:dd:24:ce:f3:6d:90:fb:d5:c7:2a:b3:ee:82:84:35:
         0e:71:9a:61:ff:1b:ed:ff:84:31:39:cd:95:b9:2e:e2:48:35:
         72:2a:8e:bb:5f:98:ea:6e:62:40:6c:37:94:7e:67:e0:1c:30:
         f6:b0:1b:b3:ee:16:d6:ad:de:6a:06:6d:51:ea:02:65:d2:c9:
         6e:3d:e2:fb:e9:94:f9:32:b0:6e:96:3c:c5:1a:07:ec:e6:51:
         f4:49:9a:7c:72:7c:e1:96:f5:8c:21:a0:86:6c:73:ab:ff:16:
         0e:b5:2f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:22 2024 by rpki-client on console-ams.rpki-client.org