Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/Ubnz4jC17WhJ4GbhcJo4Gb3c6DE.roa
File:                     Ubnz4jC17WhJ4GbhcJo4Gb3c6DE.roa (raw, json)
Hash identifier:          M/Jld4pNhA+mnKA45z90TV7JjrsERI4pHkqrKyPurVg=
Subject key identifier:   51:B9:F3:E2:30:B5:ED:68:49:E0:66:E1:70:9A:38:19:BD:DC:E8:31
Certificate issuer:       /CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Certificate serial:       01856E78E4771B72AC190CD850F6F16352B3
Authority key identifier: BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/Ubnz4jC17WhJ4GbhcJo4Gb3c6DE.roa
Signing time:             Sun 01 Jan 2023 17:54:54 +0000
ROA not before:           Sun 01 Jan 2023 17:54:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209260
IP address blocks:        195.206.242.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 25 Apr 2023 19:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:78:e4:77:1b:72:ac:19:0c:d8:50:f6:f1:63:52:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
        Validity
            Not Before: Jan  1 17:54:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=51b9f3e230b5ed6849e066e1709a3819bddce831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ef:ec:90:8e:c6:22:53:20:95:fd:12:74:7b:
                    cd:55:45:3e:14:59:ef:29:9c:d2:6a:6d:b7:73:30:
                    04:b9:84:7b:63:58:d7:57:60:6b:68:88:01:6e:58:
                    de:d8:1b:3f:c4:47:c4:3e:d3:76:8d:e2:8d:f6:3d:
                    e4:ce:e3:4f:4e:b1:01:40:6d:4c:8d:ea:a1:19:11:
                    d1:1c:3b:b0:cc:c6:87:59:86:aa:31:a7:09:15:d5:
                    37:92:dd:52:92:c0:c2:ff:90:00:46:86:cc:74:f1:
                    3a:ce:eb:78:42:df:87:f0:2f:40:c9:7e:94:c3:b7:
                    4e:10:58:be:c8:d2:39:62:23:ed:b8:9f:4b:60:de:
                    b0:8c:a3:c8:00:28:5b:49:6d:2f:47:d1:1a:d2:72:
                    19:ac:8f:cc:fd:24:28:ea:2e:fb:e6:8d:e0:11:e0:
                    7f:ef:d6:95:c1:88:e3:45:f2:5f:5c:4d:3d:00:23:
                    51:3a:e4:eb:17:a4:5e:c0:92:35:55:44:90:1f:d5:
                    ce:25:9c:2e:5e:85:c6:67:9a:e4:67:40:e4:27:a3:
                    2d:d0:1e:7f:33:1e:46:9f:5f:eb:15:c0:f1:6c:8c:
                    9f:82:c9:a4:41:c2:7a:f1:0b:4d:24:57:84:fb:8e:
                    85:6b:b6:f1:f9:4b:c7:1f:79:11:c9:45:1d:f5:ae:
                    34:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B9:F3:E2:30:B5:ED:68:49:E0:66:E1:70:9A:38:19:BD:DC:E8:31
            X509v3 Authority Key Identifier:
                keyid:BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/Ubnz4jC17WhJ4GbhcJo4Gb3c6DE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.206.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:8e:55:2e:07:75:04:0d:be:0a:86:81:14:3c:48:bf:d5:a7:
         dc:7b:66:18:02:14:97:86:fb:5b:d2:3c:dd:2a:04:0a:ff:41:
         a1:0d:34:9b:b5:f5:65:c8:29:d0:b9:4d:2e:ad:35:80:e9:e2:
         82:0a:6f:f2:58:06:44:de:45:b9:a3:08:9f:28:d9:c5:fb:ab:
         54:24:2b:a7:13:a1:3c:26:e6:8e:74:a0:4c:56:98:2f:a8:2f:
         49:70:b3:a3:9f:24:98:da:04:b5:0e:7c:d9:31:af:94:24:e3:
         a3:a8:d9:0c:c3:b4:a0:da:f4:23:2e:aa:3f:1e:bd:40:6d:08:
         a8:72:ec:01:5a:f9:55:a5:85:a8:f7:90:3c:37:2b:23:e1:cc:
         a4:75:82:77:29:98:eb:b9:00:30:bc:41:ec:b8:3a:18:71:c1:
         97:cf:08:48:6b:17:06:c7:71:b2:ac:64:59:c6:de:b1:04:25:
         39:d9:08:54:7d:db:c8:a4:72:2c:76:3d:88:2a:11:94:21:44:
         66:95:33:a4:36:73:de:4a:cc:59:dc:cf:36:a6:51:fc:ba:fd:
         01:6c:2d:79:12:02:94:9e:c2:d4:93:1a:f6:44:be:2d:dc:43:
         9c:19:b8:f0:74:89:ce:aa:26:5e:4d:1b:1d:a7:1e:65:4f:6e:
         1c:8d:2b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-fra.rpki-client.org