Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/uAlEnVHo7MiZKjAYM2CrgPp1BPs.roa
File:                     uAlEnVHo7MiZKjAYM2CrgPp1BPs.roa (raw, json)
Hash identifier:          xx+quG0BeKPZ+C5h9DpeOBE5RMds5ueyjahAERiV5Uk=
Subject key identifier:   B8:09:44:9D:51:E8:EC:C8:99:2A:30:18:33:60:AB:80:FA:75:04:FB
Certificate issuer:       /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial:       0187B1D077A542B4593A636F2D8B5D1F7678
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/uAlEnVHo7MiZKjAYM2CrgPp1BPs.roa
Signing time:             Mon 24 Apr 2023 05:50:41 +0000
ROA not before:           Mon 24 Apr 2023 05:50:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200017
IP address blocks:        185.248.48.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b1:d0:77:a5:42:b4:59:3a:63:6f:2d:8b:5d:1f:76:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
        Validity
            Not Before: Apr 24 05:50:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b809449d51e8ecc8992a30183360ab80fa7504fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a4:5d:42:b4:c0:7f:17:51:b1:19:eb:f4:73:
                    f2:ad:a3:4d:40:d7:ab:df:19:2e:59:be:0b:f2:4a:
                    de:11:88:15:4e:c0:7d:72:56:95:a9:bf:02:0d:a5:
                    82:f7:79:a7:e7:b1:9c:a9:47:84:84:5e:5b:d1:77:
                    3c:1f:b3:ca:12:75:17:b0:99:be:51:9b:d0:df:bc:
                    d7:b3:12:6a:ca:46:b1:6e:ff:93:4f:71:a5:ef:75:
                    f2:ad:09:5a:0d:13:2e:18:04:50:a2:6c:a5:6a:84:
                    b5:8a:82:02:db:e6:4d:80:ba:d4:9a:98:99:06:b4:
                    35:10:8d:a5:b1:84:31:b1:ae:66:d2:33:92:48:42:
                    db:f2:49:3f:73:af:cd:c6:8a:bb:db:71:85:b9:29:
                    da:5b:d0:7c:93:40:8f:3a:59:45:21:c7:90:89:70:
                    67:07:37:3a:ee:af:c5:62:d2:42:60:74:ed:e2:58:
                    d6:63:87:48:80:ad:b1:04:c7:ce:11:26:dd:11:df:
                    76:db:1f:7c:d5:e7:5a:f7:c3:28:63:3e:04:77:da:
                    f1:4a:49:57:5b:0d:0f:7c:67:6f:64:e2:3f:ba:ce:
                    77:c4:2c:40:19:10:e2:44:34:3e:f6:1f:37:b8:68:
                    f0:4f:be:93:4a:e8:12:e8:52:9b:19:59:87:5e:fa:
                    7b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:09:44:9D:51:E8:EC:C8:99:2A:30:18:33:60:AB:80:FA:75:04:FB
            X509v3 Authority Key Identifier:
                keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/uAlEnVHo7MiZKjAYM2CrgPp1BPs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.248.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:b6:ad:5b:74:fc:a6:bf:88:6e:dc:f4:3d:47:8a:a6:a1:37:
         34:93:0e:81:d9:ec:e4:98:ab:4b:00:5b:99:98:23:f3:b9:04:
         ad:ab:1a:05:8e:fa:16:25:4c:b5:06:0e:31:f7:cd:9b:7f:c4:
         61:87:63:58:17:52:41:da:a5:ca:f5:08:ed:40:b8:23:71:eb:
         03:b8:af:39:48:63:51:26:c6:55:5f:39:27:e7:21:44:37:84:
         13:b8:f0:02:61:0b:98:c7:a4:81:5a:3f:c0:2e:9f:85:59:69:
         7c:0b:3a:15:98:a1:30:52:5d:fa:68:b8:06:c3:77:8c:74:6d:
         43:43:b7:eb:06:d2:01:27:a5:78:25:f1:03:35:94:1a:21:52:
         4b:07:43:b4:73:51:1a:af:ed:f6:5b:a7:53:49:6e:34:77:81:
         b2:d6:93:39:c4:ce:16:52:25:a4:cb:bf:04:78:d7:4d:67:b9:
         12:43:61:ba:27:fa:43:b8:9e:1d:12:18:76:9e:4a:db:7f:fb:
         62:11:de:48:2f:84:81:ac:53:ea:67:5e:66:f5:47:c2:79:a8:
         cf:57:ec:32:2d:3d:3d:30:c4:bf:f3:cb:b4:96:19:a7:b0:90:
         c5:42:64:76:f9:28:b4:09:d4:a4:14:cb:5d:ec:e1:99:c0:9b:
         7e:3a:cd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:43 2024 by rpki-client on console-fra.rpki-client.org