Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/UU0bDRbEi_GkKQU-gu15YHOx2EE.roa
File:                     UU0bDRbEi_GkKQU-gu15YHOx2EE.roa (raw, json)
Hash identifier:          u3rQyOae0yJNBNdy9p5Puirma4p7Sq0/yWw38kpgVNE=
Subject key identifier:   51:4D:1B:0D:16:C4:8B:F1:A4:29:05:3E:82:ED:79:60:73:B1:D8:41
Certificate issuer:       /CN=4c8343edc843542f529fbc3e650cb6578c9206c3
Certificate serial:       0185974D3C729662D5D514FA5D550AC6DA7A
Authority key identifier: 4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/UU0bDRbEi_GkKQU-gu15YHOx2EE.roa
Signing time:             Mon 09 Jan 2023 16:11:39 +0000
ROA not before:           Mon 09 Jan 2023 16:11:39 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50296
IP address blocks:        193.104.196.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:97:4d:3c:72:96:62:d5:d5:14:fa:5d:55:0a:c6:da:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c8343edc843542f529fbc3e650cb6578c9206c3
        Validity
            Not Before: Jan  9 16:11:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=514d1b0d16c48bf1a429053e82ed796073b1d841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d1:d7:43:bd:60:3e:98:f5:8e:3d:c5:ba:45:
                    7e:35:7d:52:c3:c5:ce:56:ee:ae:18:43:3e:15:e4:
                    65:2a:74:b8:4e:6e:38:48:61:4f:6b:4f:b3:e5:90:
                    96:e5:bc:3b:4d:85:3f:ea:c7:ff:a9:51:3e:3d:e3:
                    a5:8c:ef:d3:5f:72:44:20:76:b1:1a:52:27:59:81:
                    af:84:24:fa:95:48:57:8f:2d:fd:b9:b8:b2:ad:2d:
                    54:ed:59:bd:4b:03:b5:a9:d9:70:8b:95:04:00:82:
                    0f:37:4d:1d:2c:fe:96:01:75:3b:80:20:2c:24:62:
                    c4:bc:a0:db:2c:aa:4f:35:30:32:f7:c0:d4:df:d7:
                    cf:06:98:56:26:3a:3d:cd:d5:6a:a0:f2:65:9b:8b:
                    0b:3f:c4:2e:a8:e5:8f:fd:cf:d4:74:8a:7b:94:40:
                    df:bd:bb:d4:41:bd:b6:cc:c3:cc:26:1a:5a:34:3f:
                    0c:03:dc:6f:21:cf:fe:ab:43:5c:33:f1:9e:83:5c:
                    33:50:ac:bb:0b:81:80:ed:8c:21:c9:11:4f:68:6e:
                    0c:8f:08:47:0b:71:58:ff:57:aa:2b:ee:7a:d3:7d:
                    0b:cf:56:b2:21:6d:a5:e6:86:50:cf:78:51:fd:e2:
                    58:7d:3e:ad:07:9a:a0:64:f9:dc:9a:cf:dd:96:13:
                    b8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4D:1B:0D:16:C4:8B:F1:A4:29:05:3E:82:ED:79:60:73:B1:D8:41
            X509v3 Authority Key Identifier:
                keyid:4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/UU0bDRbEi_GkKQU-gu15YHOx2EE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:58:c9:1d:6c:b5:f1:e4:6d:13:42:e8:9b:14:d4:f3:71:fd:
         40:1f:f9:97:72:31:90:be:1c:6e:6e:81:3f:46:ab:7f:a4:27:
         74:55:54:93:de:68:74:15:91:c3:cd:e1:78:26:fd:b2:51:a0:
         1e:48:31:8e:b4:e9:9f:85:6e:da:12:df:73:b1:bb:01:16:ea:
         e7:8b:4a:df:99:24:ff:7e:e5:25:25:df:f2:35:06:e7:7b:ac:
         ac:15:ed:cb:10:5c:60:65:d7:a4:b7:5c:67:f7:80:32:a7:1a:
         d2:22:a1:41:ae:42:37:c3:92:a2:62:85:14:05:85:29:ae:73:
         34:db:20:33:bd:ca:60:6c:70:aa:74:f0:97:1d:72:fb:1d:18:
         e8:e5:35:c6:69:80:a2:1c:9f:73:52:32:18:6b:e9:61:c7:c0:
         77:43:b6:d9:9e:af:2b:e5:fd:ae:33:2f:c4:7f:db:85:86:c0:
         e9:fa:86:9b:81:f2:94:27:0d:93:22:e8:00:42:8b:ed:ab:ab:
         9f:32:2e:2f:c1:01:b1:51:20:e6:ff:60:bc:64:90:cc:6c:0a:
         ed:3e:b8:09:01:23:1e:7b:29:4b:6e:7e:ec:ba:01:7a:f7:ef:
         d5:15:e8:ea:65:a7:85:a3:30:11:ae:89:a0:08:27:4c:c0:e8:
         28:7f:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:09 2024 by rpki-client on console-ams.rpki-client.org