Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/DaVwBQY-O4sdpzb9WXBRL_VmVVY.roa
File:                     DaVwBQY-O4sdpzb9WXBRL_VmVVY.roa (raw, json)
Hash identifier:          Bam/zLrrYBnIExtMNQUu8MdiOkdXCRn441i91M3A9tU=
Subject key identifier:   0D:A5:70:05:06:3E:3B:8B:1D:A7:36:FD:59:70:51:2F:F5:66:55:56
Certificate issuer:       /CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Certificate serial:       0188E8FAE90DF7DFEB59A11C474E3698A678
Authority key identifier: 28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/DaVwBQY-O4sdpzb9WXBRL_VmVVY.roa
Signing time:             Fri 23 Jun 2023 15:58:57 +0000
ROA not before:           Fri 23 Jun 2023 15:58:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42065
IP address blocks:        194.110.66.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e8:fa:e9:0d:f7:df:eb:59:a1:1c:47:4e:36:98:a6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
        Validity
            Not Before: Jun 23 15:58:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0da57005063e3b8b1da736fd5970512ff5665556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f5:a2:cd:ed:27:12:6f:d1:8d:74:d9:9e:11:
                    d5:c4:89:4e:0a:8a:78:92:ef:06:19:1f:8f:4a:86:
                    32:f0:4e:10:ec:0b:ca:42:b1:70:6a:c6:4b:0c:26:
                    7f:56:9b:79:8c:37:41:79:15:d6:df:3e:a5:8a:05:
                    ca:7b:bd:c0:4f:61:d8:e4:e0:c3:fc:c0:b9:67:63:
                    a3:cd:d4:29:31:44:ea:97:47:74:8a:f9:8d:8c:fb:
                    2d:83:b5:18:84:21:c8:7e:d8:9a:1f:2e:0f:89:87:
                    e1:dd:20:f1:55:ad:c0:fc:8d:a9:6d:72:9d:77:42:
                    9a:73:df:af:0f:f6:b4:ae:0e:3f:b6:ac:95:11:d5:
                    bc:78:01:7e:03:ce:36:6c:3d:e3:67:8e:e7:da:65:
                    db:da:bb:c3:12:c7:d5:c1:a8:ee:55:11:ee:7b:b5:
                    a6:1f:a3:db:69:8b:77:bf:d4:76:c5:80:ea:86:e6:
                    d7:44:48:07:c2:aa:6c:08:6f:9a:45:32:27:1a:db:
                    5e:52:ad:86:07:66:91:d8:dd:96:ac:7e:20:bf:e5:
                    f9:3a:65:38:3e:3c:84:84:c5:0c:fe:99:81:de:89:
                    75:76:3f:db:9a:17:28:52:6c:4d:12:0c:f0:45:8f:
                    cb:02:34:85:9e:f7:22:a6:03:bc:01:4c:da:ed:ba:
                    04:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A5:70:05:06:3E:3B:8B:1D:A7:36:FD:59:70:51:2F:F5:66:55:56
            X509v3 Authority Key Identifier:
                keyid:28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/DaVwBQY-O4sdpzb9WXBRL_VmVVY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:08:d1:ad:08:90:ac:e5:60:08:cb:cd:e5:70:35:0e:aa:e7:
         e8:d7:9f:5a:dc:b6:6a:2e:51:23:87:33:30:0d:06:08:25:e7:
         ad:42:c7:29:cf:9d:8f:75:ed:76:2c:4d:d8:8a:07:c1:2c:ef:
         68:ab:ae:45:63:bb:6e:43:bd:8b:bb:1d:5a:83:cb:16:24:21:
         00:59:1d:53:36:05:3f:7c:a8:32:9d:8f:92:ab:6b:11:84:3f:
         65:9b:b5:53:78:94:b3:92:b8:eb:bf:60:26:8d:a9:4e:fe:86:
         d1:4c:41:93:c4:08:0a:1d:bd:7f:8b:b0:bc:74:fb:e1:85:66:
         1b:e6:78:d0:da:3d:b0:24:66:2b:99:85:c7:a5:db:da:e2:fb:
         2d:87:70:d1:ae:63:16:91:b9:4a:f9:90:be:d3:14:ef:ba:20:
         27:05:a7:4d:16:5e:fb:10:8e:0c:88:fc:f4:fd:e2:9a:1a:d2:
         64:ce:7f:97:85:6d:46:48:47:0d:ca:d3:a1:b2:b9:45:ac:ea:
         ab:1f:1a:8d:4d:10:49:6d:7b:04:ea:56:0c:4c:8d:f3:9a:5b:
         a2:c9:5e:a2:fb:8c:36:3c:67:f2:e1:58:0f:95:ed:93:a0:29:
         fc:84:2b:9f:ae:0b:a0:33:52:36:e7:82:f0:20:80:b2:33:15:
         b0:ec:b8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-fra.rpki-client.org