Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/55FzyInjYmmuSeweutjF7BuxywM.roa
File:                     55FzyInjYmmuSeweutjF7BuxywM.roa (raw, json)
Hash identifier:          VZBW7DABE9jo3f3HPCtEpRowqw2O9reCcxPbtRckE/Y=
Subject key identifier:   E7:91:73:C8:89:E3:62:69:AE:49:EC:1E:BA:D8:C5:EC:1B:B1:CB:03
Certificate issuer:       /CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Certificate serial:       0188B3DCAAED5CE19CD154BC4FFD6F5415A5
Authority key identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/55FzyInjYmmuSeweutjF7BuxywM.roa
Signing time:             Tue 13 Jun 2023 08:26:03 +0000
ROA not before:           Tue 13 Jun 2023 08:26:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15404
IP address blocks:        195.216.249.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Jun 2023 08:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b3:dc:aa:ed:5c:e1:9c:d1:54:bc:4f:fd:6f:54:15:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
        Validity
            Not Before: Jun 13 08:26:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e79173c889e36269ae49ec1ebad8c5ec1bb1cb03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:93:65:ac:72:a3:b2:af:48:a1:d6:2d:ee:b8:
                    37:5d:f6:5c:9d:72:72:3e:89:a5:53:ac:c5:4d:63:
                    d7:08:b9:88:02:bf:4e:6e:7e:4c:99:d3:d5:c8:4c:
                    04:05:83:09:c7:57:b5:bd:23:f1:83:4d:6d:00:23:
                    e1:5c:70:38:d6:db:06:90:d0:e7:1e:71:e9:9c:08:
                    fe:1a:ec:48:3e:e3:78:0e:ea:b8:eb:6c:67:42:27:
                    ea:8a:71:99:24:02:42:de:3b:09:95:ef:96:e1:48:
                    b6:c3:10:de:7c:d9:0d:e0:e8:f3:17:bd:43:07:48:
                    33:51:dc:03:8d:52:6a:a9:53:0e:66:7a:4d:6d:4a:
                    df:9b:61:8e:81:57:55:34:2b:73:df:f5:85:89:30:
                    31:e2:91:03:dd:10:ce:54:52:07:76:87:53:70:5a:
                    cc:96:04:e9:b4:51:ff:26:a5:98:0d:b1:21:0d:d7:
                    b9:2a:16:d3:fd:55:69:ac:c4:fa:52:b0:1d:06:94:
                    58:d3:7d:f1:b8:6a:b4:9e:97:18:01:36:d6:88:ee:
                    6b:dd:97:35:54:a1:c4:a1:d7:0d:3d:97:92:15:d2:
                    79:28:5b:e6:be:e0:31:eb:d8:ef:58:b5:5d:a6:52:
                    38:7f:1b:9f:b0:9c:5e:77:08:fe:00:54:bf:d5:bf:
                    b7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:91:73:C8:89:E3:62:69:AE:49:EC:1E:BA:D8:C5:EC:1B:B1:CB:03
            X509v3 Authority Key Identifier:
                keyid:2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/55FzyInjYmmuSeweutjF7BuxywM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.216.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e4:a3:13:a7:23:07:0a:a1:bb:de:97:e4:a4:e5:88:f8:d4:af:
         70:2a:3d:5b:e8:88:b1:20:e9:96:19:5e:39:65:e8:76:e2:c9:
         cb:24:7a:9f:8a:da:fe:2b:41:7c:e6:53:52:56:4d:32:b8:10:
         f8:84:f0:28:f4:63:17:c6:f2:fc:b5:d4:0b:dc:5f:f6:23:7f:
         20:0f:89:df:ab:ed:e3:71:d1:ab:04:e1:b3:e0:45:bc:d2:c8:
         a5:5b:b1:1a:26:67:d3:7c:8f:5f:33:40:7c:7e:4c:ae:63:a7:
         3b:29:7f:41:c0:ae:76:07:0e:f2:9c:1e:e3:84:f0:57:95:3f:
         96:2f:a8:d8:5c:91:a6:27:be:9f:54:b4:4c:cc:9a:05:6d:1b:
         be:8d:3a:0a:6f:89:40:db:05:cc:03:84:3d:da:33:0b:44:70:
         39:9b:79:c1:43:3b:02:b8:ae:95:c4:66:b4:25:92:49:ea:9b:
         da:cf:6b:29:aa:9d:57:3b:6c:6a:aa:d3:1a:0e:62:f4:21:02:
         06:1d:87:97:3f:9a:90:98:5f:d1:74:4d:db:6b:bd:a3:62:16:
         d1:49:6d:27:57:0d:20:b6:59:65:e8:41:26:bb:89:3f:95:d7:
         52:96:49:15:d8:56:e0:e8:3d:34:2a:35:68:3f:54:9c:4a:36:
         01:73:26:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:03 2024 by rpki-client on console-fra.rpki-client.org