Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/ZLipBHe-yUhA8njy-lFjuhITJCU.roa
File:                     ZLipBHe-yUhA8njy-lFjuhITJCU.roa (raw, json)
Hash identifier:          sFnGwGVe3GnmyBEHd2V+KMJZBMBcHY6is8RPcI7x3Ho=
Subject key identifier:   64:B8:A9:04:77:BE:C9:48:40:F2:78:F2:FA:51:63:BA:12:13:24:25
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       018B93EA2063A8A2B0D21DCD983416A1A754
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/ZLipBHe-yUhA8njy-lFjuhITJCU.roa
Signing time:             Fri 03 Nov 2023 06:41:16 +0000
ROA not before:           Fri 03 Nov 2023 06:41:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210542
IP address blocks:        188.64.104.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Dec 2023 10:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:93:ea:20:63:a8:a2:b0:d2:1d:cd:98:34:16:a1:a7:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Nov  3 06:41:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64b8a90477bec94840f278f2fa5163ba12132425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5d:e9:a3:1f:09:bd:19:ca:c6:06:26:21:a7:
                    11:f7:8e:70:74:65:06:c3:d6:34:a8:db:56:73:2d:
                    b0:38:25:f8:8d:92:c0:af:9e:2b:d9:ce:b5:49:ee:
                    c9:fc:02:ca:76:28:05:27:4c:a7:88:6f:23:7d:2b:
                    68:ca:c0:c7:49:00:bd:91:ef:1e:48:e9:33:f3:08:
                    23:00:24:8c:70:f2:6b:9e:b1:af:1c:81:0d:1f:9e:
                    b4:17:74:6a:e0:99:4b:41:05:35:31:e6:8a:be:87:
                    06:5f:c4:6d:ae:69:e4:e3:e5:d9:e2:50:fb:1e:83:
                    99:f2:dc:6b:2a:dd:c5:38:f1:f7:8b:c8:5b:ed:65:
                    9b:86:6f:de:aa:ca:c5:0f:9d:39:44:73:4a:60:e8:
                    0f:27:3a:43:be:84:60:52:29:64:a1:c7:7f:2d:7d:
                    69:8c:1b:34:d2:81:f0:f6:23:88:4a:2a:c8:41:79:
                    75:c3:87:f6:e2:ad:f4:f9:02:96:88:23:2d:97:1e:
                    3b:7d:29:00:2b:db:91:69:c8:89:04:fc:24:1a:64:
                    5d:0e:77:63:15:1d:e9:07:75:3b:37:c1:37:db:69:
                    55:af:95:d3:49:6a:e8:b4:01:f7:e3:40:52:d7:bd:
                    49:da:96:23:be:11:e7:8c:02:8c:61:ad:e5:4a:d3:
                    9c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B8:A9:04:77:BE:C9:48:40:F2:78:F2:FA:51:63:BA:12:13:24:25
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/ZLipBHe-yUhA8njy-lFjuhITJCU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.64.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:71:49:15:af:91:b0:98:da:93:c8:b8:32:a8:6c:df:0b:06:
         bf:d2:e3:09:6c:b0:30:af:9d:c6:02:d7:2a:b1:bd:0a:dc:1c:
         08:71:0e:dc:97:bd:05:04:f7:6e:e3:cd:39:77:08:dd:d4:9f:
         7b:1c:eb:00:b3:56:a4:5b:e0:55:36:c7:4e:0a:61:d4:23:ec:
         2d:9a:6a:9a:ed:e3:00:ca:3b:1d:71:ec:15:f5:8a:fb:ef:89:
         7b:32:c9:71:0a:53:38:9c:c6:1b:36:16:63:e4:cf:77:41:3e:
         f4:6e:1b:06:6e:05:c8:3c:56:9b:54:b6:65:04:26:1c:a8:a1:
         5f:58:e6:51:da:1e:a0:5d:90:e3:88:66:9a:70:2d:c3:f2:d5:
         7d:6a:22:7e:04:e3:c8:40:3c:2b:af:13:af:cd:55:e0:95:af:
         29:de:cb:e7:1b:90:19:b7:db:f0:d2:66:d8:45:ed:d9:f9:ff:
         83:fc:ae:df:a9:64:1e:05:2e:1c:e5:6f:58:50:b4:28:20:ce:
         12:2f:b2:1a:c1:52:b5:7c:e1:5b:54:4e:28:37:a7:69:6f:6d:
         5e:54:44:97:dc:0c:52:83:01:8a:b6:eb:d1:37:88:bb:d3:ce:
         42:63:ce:36:f3:ce:ef:00:7b:41:de:fd:32:92:54:de:97:9b:
         0b:25:dd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:38 2024 by rpki-client on console-ams.rpki-client.org