Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/50ZG5N0Zqkm6eIhTsV9Pl1Q9GRw.roa
File:                     50ZG5N0Zqkm6eIhTsV9Pl1Q9GRw.roa (raw, json)
Hash identifier:          xb/3ik8Z5p/m/YG+onCjZ5/GZ0BBvBOjLHNnnxPh8WM=
Subject key identifier:   E7:46:46:E4:DD:19:AA:49:BA:78:88:53:B1:5F:4F:97:54:3D:19:1C
Certificate issuer:       /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial:       018CC4937532B641D116324E01CA5F2B6A46
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/50ZG5N0Zqkm6eIhTsV9Pl1Q9GRw.roa
Signing time:             Mon 01 Jan 2024 10:30:47 +0000
ROA not before:           Mon 01 Jan 2024 10:30:47 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        193.178.115.0/24 maxlen: 24
                          193.178.52.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 07:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:75:32:b6:41:d1:16:32:4e:01:ca:5f:2b:6a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
        Validity
            Not Before: Jan  1 10:30:47 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e74646e4dd19aa49ba788853b15f4f97543d191c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:97:ef:0a:cb:66:db:02:13:f0:75:14:87:f4:
                    dd:23:07:99:51:88:f8:a6:b3:a8:0b:72:da:81:32:
                    23:1d:1c:8b:7b:4e:74:3c:c4:6b:ca:ac:8b:eb:6d:
                    69:30:6c:97:9e:2a:5d:e3:42:25:b4:a7:0a:25:ac:
                    e6:6a:88:70:7f:8d:73:fe:f0:08:f6:93:55:98:7b:
                    73:d3:e8:d3:fa:13:5f:b2:17:f7:3c:1d:ae:6c:29:
                    a7:a5:12:7b:ee:77:ec:b5:0e:b5:f9:5a:67:55:96:
                    3d:d7:56:28:02:b3:e7:12:72:2c:05:b3:15:34:92:
                    c7:39:f9:d2:5a:0b:d7:49:17:6a:35:e6:2f:60:db:
                    c8:26:1f:3b:e5:54:af:48:e7:70:fb:9a:da:0d:b8:
                    3c:c0:dd:1b:20:6f:70:ad:aa:ae:de:3b:37:e9:de:
                    48:aa:0a:88:26:11:e3:6a:53:32:58:0e:9b:72:20:
                    c4:9d:ee:ca:6f:2f:a1:b1:d2:e7:36:30:a4:a3:5d:
                    c8:37:b6:6e:32:67:91:25:61:c5:8f:a7:5e:db:e8:
                    dd:fd:2f:bb:99:89:be:c1:02:80:bb:1a:81:cc:73:
                    be:e6:cb:92:cf:e6:33:60:c9:85:9e:9f:f1:cb:63:
                    76:69:63:27:42:57:b2:ee:13:71:72:0e:f5:39:3d:
                    76:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:46:46:E4:DD:19:AA:49:BA:78:88:53:B1:5F:4F:97:54:3D:19:1C
            X509v3 Authority Key Identifier:
                keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/50ZG5N0Zqkm6eIhTsV9Pl1Q9GRw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.52.0/24
                  193.178.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:e7:2f:19:bd:a2:42:63:8a:13:0a:1d:d3:44:44:52:dd:22:
         f6:81:05:e2:db:08:9e:16:31:e8:b9:24:64:71:96:a4:77:d8:
         0e:d3:68:d8:b6:db:54:44:6c:55:c5:0c:51:42:c8:7f:3e:11:
         72:af:1c:10:80:63:63:9a:04:2c:e7:0c:30:97:e9:b2:0c:82:
         60:14:ce:0d:97:d1:38:f1:9d:ff:7e:86:a6:1c:ab:d0:7b:17:
         22:ed:07:79:8c:56:62:a1:e9:d9:ba:6d:ff:00:84:65:77:2c:
         3d:21:27:de:2a:33:b6:14:25:20:7e:17:34:67:d7:51:3f:03:
         9e:e5:ad:4c:88:79:fc:5a:30:a4:5c:e2:8f:65:00:b3:9e:fa:
         b7:89:11:97:f9:0c:f6:fe:00:bb:47:fa:3c:08:96:7a:97:4d:
         b9:2d:7f:7d:51:65:ce:fc:ad:39:e0:d8:f6:91:67:58:03:e1:
         ca:45:01:67:c8:0a:67:78:97:aa:8a:78:9b:9c:d1:b7:9d:ec:
         71:32:49:c5:c6:c5:da:ee:b3:bf:17:e9:c5:cd:6c:e0:8a:62:
         bb:25:55:87:d2:b0:14:d2:e9:0e:b8:ef:e7:be:48:fe:9d:0c:
         1e:2a:4e:90:0d:95:2e:3d:bc:a3:0b:f9:fe:44:c9:6b:6a:65:
         35:53:3b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:22 2024 by rpki-client on console-fra.rpki-client.org