Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/ULn5SSAuGClKfC-x_vij1jdUTug.roa
File:                     ULn5SSAuGClKfC-x_vij1jdUTug.roa (raw, json)
Hash identifier:          +4Cz6hxtBNVfjD//uLZ+Vu/cxSIAUQw/hfgmDtZB/Eo=
Subject key identifier:   50:B9:F9:49:20:2E:18:29:4A:7C:2F:B1:FE:F8:A3:D6:37:54:4E:E8
Certificate issuer:       /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial:       0187034B6CBDE3518CC60E2567665F943749
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/ULn5SSAuGClKfC-x_vij1jdUTug.roa
Signing time:             Tue 21 Mar 2023 08:31:27 +0000
ROA not before:           Tue 21 Mar 2023 08:31:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     22822
IP address blocks:        193.178.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 10 Apr 2023 09:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:03:4b:6c:bd:e3:51:8c:c6:0e:25:67:66:5f:94:37:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
        Validity
            Not Before: Mar 21 08:31:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=50b9f949202e18294a7c2fb1fef8a3d637544ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e7:2e:7c:ca:6a:ca:6f:53:ab:f1:59:0b:61:
                    f2:96:c6:76:94:e3:f2:4d:b5:e1:26:26:4a:06:d6:
                    5e:69:ae:cf:4a:f4:3d:8c:0b:24:76:e6:03:f3:67:
                    75:27:82:42:2f:ee:bf:bf:31:1e:c7:08:c1:8a:da:
                    2d:52:f8:cb:a7:78:8f:6b:0a:13:1c:8a:67:ff:87:
                    39:b8:2c:85:cd:2a:06:f2:80:97:3d:e1:9e:7b:7a:
                    64:02:bc:fe:46:ef:d0:03:24:48:f4:4d:05:8c:5b:
                    12:5f:ea:9a:21:02:64:ce:8f:c6:93:43:61:47:f7:
                    6b:b1:91:82:b1:44:7c:7c:b2:c0:75:55:18:e7:9f:
                    d0:cd:17:c2:57:c0:2f:24:98:9f:c7:2c:c5:e0:07:
                    8a:79:da:8b:d4:f3:d7:ac:06:34:33:cf:fe:87:c2:
                    5a:d0:26:23:6e:cf:a8:1d:86:a7:f8:d2:85:59:a6:
                    9a:ac:4e:53:73:68:b1:9b:1d:e9:0a:d2:98:1a:08:
                    41:e0:33:b8:aa:12:5a:1d:a4:e2:8b:34:60:35:88:
                    9e:05:91:84:cf:83:87:5f:2b:33:fa:94:ef:b7:ee:
                    c3:11:d4:0c:84:03:cb:92:09:64:b3:6b:fc:59:20:
                    4c:b6:a4:b5:3d:bf:63:39:7a:fc:e3:72:71:03:cd:
                    c7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B9:F9:49:20:2E:18:29:4A:7C:2F:B1:FE:F8:A3:D6:37:54:4E:E8
            X509v3 Authority Key Identifier:
                keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/ULn5SSAuGClKfC-x_vij1jdUTug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:80:0b:b7:02:74:5f:e8:89:07:6f:3c:e2:50:95:59:a4:9e:
         04:c2:d2:e1:95:d1:af:fb:4c:a1:e8:20:54:65:c3:5a:28:cd:
         35:a3:1f:4b:9e:8c:ee:3e:55:8a:83:e9:ca:f4:ff:36:67:d4:
         23:fa:a5:c2:8d:c0:27:d9:ae:f9:62:f4:d5:24:ab:15:fe:a3:
         41:ba:2e:38:be:99:31:a6:74:bd:ab:26:6a:8d:e3:0f:92:f4:
         ad:10:fd:9c:19:d8:56:e3:9a:34:60:7a:94:70:07:5e:26:e7:
         b1:b4:15:be:cd:11:df:ef:3d:e4:c8:a9:f5:6d:8c:1d:e6:3b:
         83:1c:5c:64:80:85:1b:12:f5:41:ae:3d:7b:ab:5b:bf:82:0b:
         6a:46:83:b6:ad:dd:19:71:44:f8:b5:b4:fe:f0:98:9e:3c:e9:
         bc:5c:5e:78:51:19:a4:94:fd:d5:ef:bf:7c:37:b2:a5:3b:c9:
         fc:af:b5:03:f0:a7:c8:9e:84:a7:d4:6b:e9:8f:c9:11:08:d4:
         1d:48:d1:b4:26:5e:54:f7:a6:80:e4:cc:1e:b7:b7:a4:cb:c4:
         27:30:31:09:cd:db:cf:c6:45:9f:6d:9d:37:2a:52:db:0b:9a:
         45:f8:d5:79:b8:ae:15:8d:4f:42:04:bc:24:09:90:c5:c4:84:
         48:91:49:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:22 2024 by rpki-client on console-fra.rpki-client.org