Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/WuyZVXe3quOXYbvbm9Kowg_RTXE.roa
File:                     WuyZVXe3quOXYbvbm9Kowg_RTXE.roa (raw, json)
Hash identifier:          iStZm+R4sgAl0YWb1YgK/do1j6mWvKPlukIXa4ZPjs8=
Subject key identifier:   5A:EC:99:55:77:B7:AA:E3:97:61:BB:DB:9B:D2:A8:C2:0F:D1:4D:71
Certificate issuer:       /CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Certificate serial:       01856FB12019DF28F2B62A3AAD29CCDAEC28
Authority key identifier: AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/WuyZVXe3quOXYbvbm9Kowg_RTXE.roa
Signing time:             Sun 01 Jan 2023 23:35:57 +0000
ROA not before:           Sun 01 Jan 2023 23:35:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50413
IP address blocks:        195.78.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b1:20:19:df:28:f2:b6:2a:3a:ad:29:cc:da:ec:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc113c7aea6b714a060e9f7c3e71569e603d395
        Validity
            Not Before: Jan  1 23:35:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5aec995577b7aae39761bbdb9bd2a8c20fd14d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fc:c9:59:96:bb:08:fc:45:68:d9:f4:8a:b5:
                    bc:89:16:28:81:06:de:30:7f:97:0d:3f:2f:47:4f:
                    f2:99:e0:01:e0:fd:ff:09:d0:d9:32:1d:87:62:0b:
                    a5:d1:10:14:4b:3b:bd:1f:f6:97:9a:01:46:8b:7a:
                    2f:56:20:08:40:74:69:77:9e:03:f0:8d:04:e9:28:
                    56:46:d8:b4:a5:be:24:43:89:2e:a7:a7:1e:7a:b5:
                    85:92:4b:b0:b9:f1:19:a7:8a:21:8f:7d:18:5c:37:
                    36:d1:8a:44:c8:a1:f1:ed:ee:1c:67:cc:ba:8f:65:
                    50:5c:33:ed:e5:75:60:49:0e:2d:87:4c:92:37:2b:
                    85:e6:4d:4e:ae:99:1f:5b:1c:35:3c:06:c0:59:41:
                    41:32:ce:5a:54:93:73:35:f8:3d:4b:ce:9c:06:cf:
                    7f:eb:55:50:2b:05:20:94:01:e1:cc:a1:a4:1e:df:
                    57:eb:37:11:d1:86:4a:e3:88:73:14:e6:07:81:55:
                    50:9d:7e:b7:fe:8e:33:cd:44:38:53:3b:2f:13:b8:
                    44:da:85:9f:c2:85:25:f0:3d:55:fd:48:b2:33:0b:
                    81:37:79:8a:df:64:62:f1:a6:26:7f:19:ab:10:3d:
                    05:c0:a6:63:3a:9d:0c:4b:a6:1a:fb:d6:25:5f:21:
                    82:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EC:99:55:77:B7:AA:E3:97:61:BB:DB:9B:D2:A8:C2:0F:D1:4D:71
            X509v3 Authority Key Identifier:
                keyid:AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/WuyZVXe3quOXYbvbm9Kowg_RTXE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:3c:ec:5d:1a:30:bf:20:17:a2:89:41:03:6c:b6:20:aa:60:
         e6:8b:72:8f:8a:01:c8:25:c3:b8:b4:6d:40:4e:97:ff:70:3d:
         b2:d9:ea:9a:27:a1:f1:8e:58:13:4a:09:05:f5:3d:36:49:7b:
         29:5c:c8:31:eb:26:58:b3:78:7e:0e:d8:c8:af:62:be:a0:7f:
         71:fd:b7:bc:28:d7:56:7f:cc:8a:0f:2d:14:c0:50:6f:2f:00:
         aa:22:0a:cf:c3:b4:5c:e7:d9:64:72:a6:48:c0:0d:24:1b:00:
         58:88:e9:f9:82:42:0c:b2:12:04:c7:73:a1:20:0b:db:e8:05:
         ae:7c:38:cd:e2:7d:87:c8:84:e9:b2:58:55:42:76:50:11:a7:
         dc:e0:30:b1:0e:ec:a8:cb:c1:a4:59:e7:77:93:2c:8b:1c:f6:
         34:24:d6:a6:49:32:15:f7:37:ae:84:2f:e7:02:7b:b1:5e:ba:
         da:8d:b6:4c:61:61:4a:27:ab:a6:ca:65:bc:8f:20:54:b2:7e:
         80:be:f4:d8:af:ae:2b:1a:f5:44:88:cf:24:bb:43:31:ac:54:
         59:42:da:38:50:d2:eb:25:25:2a:c2:12:5f:22:20:23:0d:1e:
         34:24:02:de:3b:8e:19:fb:12:06:d1:e1:14:3d:e0:91:de:ac:
         69:bb:5d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:01 2024 by rpki-client on console-ams.rpki-client.org