Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/XxY3Hm8HqivN-3RFEDaIE69CYt8.roa
File:                     XxY3Hm8HqivN-3RFEDaIE69CYt8.roa (raw, json)
Hash identifier:          Rv1nlmVKlUrWm9tu50odtgt3JpYiyo+fnBfjzkkivWU=
Subject key identifier:   5F:16:37:1E:6F:07:AA:2B:CD:FB:74:45:10:36:88:13:AF:42:62:DF
Certificate issuer:       /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial:       018A88716F9897B78CD3C3E4C0E48BDBF93D
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/XxY3Hm8HqivN-3RFEDaIE69CYt8.roa
Signing time:             Tue 12 Sep 2023 08:10:50 +0000
ROA not before:           Tue 12 Sep 2023 08:10:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57314
IP address blocks:        94.141.116.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:88:71:6f:98:97:b7:8c:d3:c3:e4:c0:e4:8b:db:f9:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
        Validity
            Not Before: Sep 12 08:10:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5f16371e6f07aa2bcdfb744510368813af4262df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:13:3a:3f:73:96:d9:24:5d:10:20:9f:6b:6b:
                    34:9b:bd:d5:56:15:01:db:c0:1f:5a:da:c1:60:dd:
                    eb:69:00:c6:26:00:0f:a0:b5:de:c5:78:9d:38:88:
                    54:35:0e:b0:ac:99:3b:f5:28:0c:3f:ee:be:d1:f9:
                    aa:24:6a:16:fe:ec:37:c7:df:de:6d:3f:0c:3d:e4:
                    4d:6c:ab:8f:9a:15:26:39:74:c7:01:15:45:47:64:
                    ca:33:57:1d:66:dc:50:6c:4a:43:90:bb:13:0b:ae:
                    ab:aa:23:b2:96:84:43:63:8b:6b:2d:7a:19:ed:cb:
                    3f:a7:a8:7f:ab:20:4f:8d:14:d5:81:5c:c3:14:2c:
                    30:97:3b:e9:23:0e:ee:2c:52:d6:76:98:16:0f:86:
                    25:1d:be:2a:c3:fc:40:ce:44:07:7a:50:a2:85:35:
                    e1:f8:ae:91:92:16:8f:05:c9:f7:e4:18:39:65:6f:
                    cc:e8:b6:6a:8d:01:46:42:0f:8f:60:72:be:f6:af:
                    91:fd:a5:7f:38:29:6d:ba:99:c6:36:37:e6:19:44:
                    42:3a:8a:19:43:d6:3c:9d:3e:e5:ca:10:b2:af:51:
                    7d:23:e9:cf:9c:61:7a:8c:4c:3c:b6:4c:80:51:dd:
                    51:7b:86:0c:37:45:83:d4:10:9b:a4:08:a1:5c:23:
                    a5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:16:37:1E:6F:07:AA:2B:CD:FB:74:45:10:36:88:13:AF:42:62:DF
            X509v3 Authority Key Identifier:
                keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/XxY3Hm8HqivN-3RFEDaIE69CYt8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.141.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:db:f0:ca:24:8a:40:35:ab:d5:12:34:e7:e7:54:9c:49:07:
         dd:a5:8d:e5:b7:90:30:9c:05:d5:34:05:4d:32:4c:40:ed:c7:
         a1:7d:d0:ca:f7:6f:a5:68:ac:e0:72:ac:1f:c5:24:3d:09:c2:
         d9:f2:bb:0d:3c:26:2b:7a:4a:45:d5:ce:5c:35:71:f3:4b:a0:
         3c:0c:67:1d:47:5b:84:61:a9:6e:54:b2:d2:b9:3f:52:9b:cb:
         e8:a8:d4:e2:04:7c:dd:fd:00:bc:e9:4a:33:35:1d:fb:64:8a:
         b3:10:d7:bd:fe:8e:43:c0:5b:2d:f3:6f:5f:e7:5c:c9:c0:39:
         1b:96:71:93:cb:81:ea:c5:2b:ff:c2:fc:d8:98:ac:ed:6a:5c:
         f0:94:d7:90:c0:a7:78:c9:be:6d:fd:cc:e7:fb:a4:e9:e7:17:
         a5:62:f7:3a:51:e5:e9:71:94:8a:9a:ab:89:d6:e7:4c:16:2e:
         96:7e:a0:6d:28:f4:03:88:b9:d9:95:91:e7:ad:3f:d0:13:e8:
         79:f7:6b:08:fd:80:19:f2:f1:9d:84:fe:e1:48:d3:d1:22:ca:
         38:fc:cb:44:22:7f:71:ab:3a:96:a0:0d:78:c6:3d:67:f0:47:
         a2:08:b4:db:3d:75:af:0a:d8:df:f8:0c:18:d8:65:13:79:9e:
         08:54:f5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:19 2024 by rpki-client on console-fra.rpki-client.org