Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Nr53SZ1R2P57jA-FicGaofa-mT4.roa
File:                     Nr53SZ1R2P57jA-FicGaofa-mT4.roa (raw, json)
Hash identifier:          OLA11lrUBOWhdCm8GgrHfW8okGqb3hM4iLMco/ys2+E=
Subject key identifier:   36:BE:77:49:9D:51:D8:FE:7B:8C:0F:85:89:C1:9A:A1:F6:BE:99:3E
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       01859D9EF93EE3D5F2710A2515AEADD38EA5
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Nr53SZ1R2P57jA-FicGaofa-mT4.roa
Signing time:             Tue 10 Jan 2023 21:38:39 +0000
ROA not before:           Tue 10 Jan 2023 21:38:39 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62853
IP address blocks:        178.253.26.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 11 Jan 2023 18:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:9d:9e:f9:3e:e3:d5:f2:71:0a:25:15:ae:ad:d3:8e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Jan 10 21:38:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=36be77499d51d8fe7b8c0f8589c19aa1f6be993e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ec:15:1e:fd:80:2b:d3:a9:9c:8c:56:77:51:
                    ab:07:f8:41:9a:79:04:ac:a1:fb:fc:71:04:9c:fd:
                    37:a4:82:6c:27:fe:36:61:55:55:98:ed:f2:f7:b6:
                    7a:38:d0:77:c2:58:68:ef:3c:a2:06:cb:23:e5:40:
                    4d:d5:28:fa:d6:37:82:91:3c:ed:fc:43:9f:0e:57:
                    03:23:2e:56:20:43:89:b0:6e:c5:b7:a1:93:7b:5f:
                    6d:6b:4d:ff:6c:b1:50:8d:6d:ed:28:ee:35:c7:ae:
                    27:83:07:ae:41:5c:79:c5:3e:9f:73:35:bc:f7:43:
                    80:03:e2:a7:e9:81:d7:0d:98:74:f6:82:cc:1f:e0:
                    fb:ba:49:f6:85:f3:9e:dc:54:d4:11:07:75:77:d3:
                    61:04:28:0f:a0:07:7c:8c:d7:bb:d5:c5:88:e8:83:
                    7e:5a:71:e8:3a:21:17:2e:80:cc:fd:1e:50:0c:4c:
                    5a:8f:39:42:e1:63:5f:dd:ee:48:24:33:1d:8b:7f:
                    d0:4b:ef:0a:f9:78:20:22:13:b0:c3:39:31:d1:e0:
                    c0:c1:bf:15:a7:20:59:b5:5c:92:14:3b:41:30:0d:
                    fb:44:06:d8:03:17:eb:db:b0:a1:e9:ae:91:00:be:
                    30:14:e3:09:09:49:59:91:18:0d:62:5e:1b:d0:f3:
                    b4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BE:77:49:9D:51:D8:FE:7B:8C:0F:85:89:C1:9A:A1:F6:BE:99:3E
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Nr53SZ1R2P57jA-FicGaofa-mT4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.253.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:c7:64:22:41:0b:a7:e1:ba:a8:92:3f:04:0f:11:4f:93:e1:
         80:fd:aa:11:cf:53:b9:13:38:1f:18:2a:c4:15:f3:a8:de:0b:
         80:05:3e:10:00:27:79:3d:f5:c3:c5:2e:75:8d:06:16:b7:2c:
         16:92:40:f1:82:f7:c3:c7:7d:73:d0:71:34:d9:0f:0c:57:cf:
         68:28:5c:a3:be:6b:4a:03:6e:fc:8c:6b:08:ca:e3:fe:2f:60:
         cd:e4:d7:ac:88:00:7a:f1:72:13:8c:1e:29:78:23:17:02:a1:
         73:77:84:6a:fd:84:3d:56:f6:36:14:eb:a1:66:30:17:a5:79:
         55:46:da:dc:b9:d9:7c:4e:9d:56:fb:72:6c:0f:23:54:a8:db:
         d5:67:ce:de:e7:4d:8b:fa:43:57:74:3d:09:d9:6d:49:c9:46:
         4e:34:02:0b:e7:cd:e6:23:2e:c4:dd:53:68:7f:c3:b3:75:72:
         16:0d:18:1e:3b:2b:77:da:c0:a4:ac:6d:aa:ed:22:46:88:12:
         4e:16:a1:1b:1c:5f:22:cf:2b:dd:9f:75:1d:ef:f4:6d:7b:33:
         60:b0:2b:c6:70:50:79:0f:ac:f8:d7:d5:e8:f0:a0:b6:34:f0:
         cd:b2:b6:5f:9e:2d:ee:8b:3c:7b:1e:3f:64:68:c4:65:51:5b:
         ec:3f:73:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org