Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/VvUtRnEEFpXgVItnsIdmoE7YhpU.roa
File:                     VvUtRnEEFpXgVItnsIdmoE7YhpU.roa (raw, json)
Hash identifier:          HRk1wVAJNxy1UeQzejrPkHfUOAI7tvm/eQsQcNPX2yU=
Subject key identifier:   56:F5:2D:46:71:04:16:95:E0:54:8B:67:B0:87:66:A0:4E:D8:86:95
Certificate issuer:       /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial:       0190A58DD6ED07D4545C27988BDFFEAFAAE8
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/VvUtRnEEFpXgVItnsIdmoE7YhpU.roa
Signing time:             Fri 12 Jul 2024 06:07:34 +0000
ROA not before:           Fri 12 Jul 2024 06:07:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215287
IP address blocks:        185.58.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 02 Aug 2024 05:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:a5:8d:d6:ed:07:d4:54:5c:27:98:8b:df:fe:af:aa:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
        Validity
            Not Before: Jul 12 06:07:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=56f52d4671041695e0548b67b08766a04ed88695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2a:a3:e9:94:96:01:01:fd:98:78:e5:54:b8:
                    31:b3:a5:48:b4:f5:97:79:22:65:b9:e3:6c:2a:be:
                    16:ce:78:17:15:6c:d0:62:87:45:b3:2e:32:a0:4f:
                    2f:1f:75:55:a0:ce:b6:cf:f2:68:d6:db:54:45:e3:
                    df:75:36:c5:01:2e:e1:06:1c:6b:c9:f4:95:08:aa:
                    e5:77:20:ae:df:f9:23:c8:ba:71:d7:8b:69:42:75:
                    5e:38:27:e0:e7:16:77:97:99:3a:63:1b:04:d0:7d:
                    e3:96:f6:b2:54:8f:cb:a1:28:5f:fe:7b:13:6d:08:
                    06:91:49:98:36:2b:38:a6:69:ed:ad:e4:d3:8b:4e:
                    12:8f:05:85:c1:28:9c:67:96:4f:37:88:e7:14:f7:
                    08:38:2d:05:3f:97:1f:95:e7:1c:bb:4c:91:d4:90:
                    38:bb:4f:26:b9:51:2b:e4:2f:40:7f:63:7e:a9:d0:
                    0a:ff:1e:ef:fd:eb:69:a6:ea:e7:5d:96:e3:80:d2:
                    c3:68:dc:4b:6d:5f:fe:9a:94:a0:bd:dc:bb:6e:46:
                    dc:b7:a2:36:03:7d:31:7f:94:e4:cc:26:a1:09:f7:
                    70:39:16:4d:71:fc:36:98:f2:97:2c:13:05:c8:2f:
                    ca:49:59:73:b6:f6:f3:ca:9f:8a:68:08:4f:d6:2c:
                    18:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F5:2D:46:71:04:16:95:E0:54:8B:67:B0:87:66:A0:4E:D8:86:95
            X509v3 Authority Key Identifier:
                keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/VvUtRnEEFpXgVItnsIdmoE7YhpU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.58.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:e2:c2:05:62:f9:57:81:76:3c:1d:47:6d:ea:ae:95:f4:4b:
         e3:92:8b:51:60:52:1f:c8:87:0a:0d:8f:c8:81:bf:33:4d:e1:
         a7:8c:20:4b:ec:60:43:94:51:f2:27:e8:02:12:25:a2:02:e0:
         5e:bd:d3:ee:a6:76:9e:7c:cd:47:2e:fc:47:ce:48:bc:ba:fc:
         fe:f9:19:8b:7a:13:31:95:5e:1a:14:26:c4:02:f1:65:ea:ab:
         f2:8e:13:a1:03:39:72:88:47:59:38:e2:37:40:02:63:69:75:
         ea:d3:b1:31:3b:9f:88:a3:cb:19:3d:a1:eb:e4:e5:81:4c:c2:
         d2:5f:1a:d0:e1:7b:d4:01:73:98:26:f8:4e:7a:6e:a6:67:2e:
         79:64:19:c8:40:f3:5e:fe:a1:72:20:19:0a:ff:74:ed:13:d8:
         03:f0:c9:ed:7b:a5:22:b5:99:7c:73:42:d3:9a:d2:6b:de:5b:
         23:69:41:5d:bd:f5:ee:ce:22:2d:5b:ad:72:68:69:62:88:e5:
         f7:ba:a0:6f:d9:d7:af:e0:45:df:f2:d1:07:c4:d0:66:8f:f4:
         34:30:4f:3f:fe:c5:8c:8b:d3:76:b5:8f:c9:ba:51:f4:35:7a:
         56:d6:e0:21:49:3e:3d:29:f1:9c:e9:1c:a8:0e:42:a8:be:cc:
         67:f4:a7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 07:45:02 2024 by rpki-client on console-ams.rpki-client.org