Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/UE9jQz77m_dupY9PtHzQVWa54zU.roa
File:                     UE9jQz77m_dupY9PtHzQVWa54zU.roa (raw, json)
Hash identifier:          5JPHQ76aQDfCkezPRk0XzpMLhuVlLU1IO1ojjkvogF8=
Subject key identifier:   50:4F:63:43:3E:FB:9B:F7:6E:A5:8F:4F:B4:7C:D0:55:66:B9:E3:35
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       018C3AE858E767F5632AF6AE426605D6247C
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/UE9jQz77m_dupY9PtHzQVWa54zU.roa
Signing time:             Tue 05 Dec 2023 16:55:54 +0000
ROA not before:           Tue 05 Dec 2023 16:55:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        95.214.177.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:3a:e8:58:e7:67:f5:63:2a:f6:ae:42:66:05:d6:24:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Dec  5 16:55:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=504f63433efb9bf76ea58f4fb47cd05566b9e335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:07:b6:39:53:fa:34:7f:ac:50:2c:15:2b:0a:
                    96:2e:52:89:21:c8:91:ef:a6:63:c9:3f:d5:13:29:
                    00:2e:a0:be:f3:89:6d:0b:d6:7c:a6:13:4b:7f:c2:
                    cf:95:36:3a:05:8d:6d:d5:cf:44:45:89:f4:21:e8:
                    d2:a6:f1:3a:87:59:19:b6:f0:17:24:e1:b2:32:e3:
                    97:ca:d9:e5:c4:1f:16:3a:b2:26:61:31:6c:f6:0d:
                    f8:49:38:a9:f9:a1:de:13:2c:11:e7:d8:8a:ac:7b:
                    6c:41:a8:03:0e:ab:26:d2:62:22:0d:49:43:77:38:
                    68:e0:12:94:9d:64:64:1e:13:e2:01:0b:49:2e:ac:
                    52:5c:dd:80:9e:5a:b4:58:1b:23:a8:ba:e0:f3:d1:
                    c3:4e:13:83:79:ab:a1:cc:7d:66:06:b5:e8:b6:59:
                    5b:36:4c:da:48:3c:87:32:7b:14:65:b7:85:15:74:
                    25:17:67:fc:ee:23:7c:50:a5:1e:0f:30:0e:fb:33:
                    96:1a:e0:de:5f:42:22:fa:5c:92:a2:97:70:b1:06:
                    b5:fa:e7:00:61:05:9e:d8:1b:c1:1c:71:68:79:89:
                    9c:4e:19:27:64:61:bc:29:18:3e:df:9b:a3:d2:2a:
                    73:c8:a4:74:c3:4d:e0:b1:71:1b:12:bd:9a:85:ab:
                    7c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4F:63:43:3E:FB:9B:F7:6E:A5:8F:4F:B4:7C:D0:55:66:B9:E3:35
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/UE9jQz77m_dupY9PtHzQVWa54zU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:b1:b2:2f:cf:b0:a3:d4:33:61:ca:07:2f:1b:4e:91:b2:3d:
         ce:b4:53:32:ef:4f:05:46:1b:5e:20:0f:72:2b:0b:66:a0:b9:
         86:76:60:1f:14:39:17:d5:d0:77:e8:3b:55:fa:7a:53:1b:65:
         ee:08:2a:11:95:f5:c0:48:7d:8c:e4:66:60:36:a1:6a:69:43:
         10:39:eb:fc:f8:c6:f7:96:1f:7f:d2:d8:5c:fd:57:79:be:83:
         78:28:10:ee:c0:e7:e1:05:e9:96:eb:91:0d:9c:95:bd:4d:8a:
         ad:07:75:7a:56:84:56:e2:5d:6b:72:9a:0a:1d:1f:db:02:57:
         9c:62:5d:eb:0d:a6:a2:d6:e5:72:09:25:cd:9f:45:ca:42:ce:
         42:27:38:6d:e7:d3:eb:1f:77:4f:60:63:73:04:64:1e:d7:97:
         f9:6a:b0:d8:79:fc:4f:f8:5d:74:29:da:23:f2:82:1f:cc:64:
         91:f3:98:e0:ee:0d:7e:4d:3d:e8:c9:43:1b:a4:4d:12:26:0c:
         04:c8:1f:f9:bc:1f:45:0d:e8:72:a5:d9:15:dc:ff:3b:aa:0a:
         ae:f5:e6:dd:32:6d:8a:86:e5:a3:00:22:22:35:93:f2:b9:b0:
         af:a9:86:85:04:25:7d:e7:ed:df:e5:45:c4:ed:fe:f6:b3:b9:
         eb:7f:23:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYw66FjnZ/VjKvauQmYF1iR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjMxMjA1MTY1NTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDRmNjM0MzNlZmI5YmY3NmVhNThmNGZiNDdjZDA1NTY2YjllMzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQe2OVP6NH+sUCwVKwqWLlKJIciR
76ZjyT/VEykALqC+84ltC9Z8phNLf8LPlTY6BY1t1c9ERYn0IejSpvE6h1kZtvAX
JOGyMuOXytnlxB8WOrImYTFs9g34STip+aHeEywR59iKrHtsQagDDqsm0mIiDUlD
dzho4BKUnWRkHhPiAQtJLqxSXN2Anlq0WBsjqLrg89HDThODeauhzH1mBrXotllb
NkzaSDyHMnsUZbeFFXQlF2f87iN8UKUeDzAO+zOWGuDeX0Ii+lySopdwsQa1+ucA
YQWe2BvBHHFoeYmcThknZGG8KRg+35uj0ipzyKR0w03gsXEbEr2ahat8SwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFBPY0M++5v3bqWPT7R80FVmueM1MB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvVUU5alF6NzdtX2R1cFk5UHRIelFWV2E1NHpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX9axMA0G
CSqGSIb3DQEBCwUAA4IBAQBrsbIvz7Cj1DNhygcvG06Rsj3OtFMy708FRhteIA9y
KwtmoLmGdmAfFDkX1dB36DtV+npTG2XuCCoRlfXASH2M5GZgNqFqaUMQOev8+Mb3
lh9/0thc/Vd5voN4KBDuwOfhBemW65ENnJW9TYqtB3V6VoRW4l1rcpoKHR/bAlec
Yl3rDaai1uVyCSXNn0XKQs5CJzht59PrH3dPYGNzBGQe15f5arDYefxP+F10Kdoj
8oIfzGSR85jg7g1+TT3oyUMbpE0SJgwEyB/5vB9FDehypdkV3P87qgqu9ebdMm2K
huWjACIiNZPyubCvqYaFBCV95+3f5UXE7f72s7nrfyOu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org