Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/zR5l8yB3MEr3yQut0YfQU6ku-ug.roa
File:                     zR5l8yB3MEr3yQut0YfQU6ku-ug.roa (raw, json)
Hash identifier:          ixa6a2gMic5Xzd0xiMSWdRbg3LdRGe+6RHWMkJjZLGg=
Subject key identifier:   CD:1E:65:F3:20:77:30:4A:F7:C9:0B:AD:D1:87:D0:53:A9:2E:FA:E8
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       0187ADE99E2D58B80853D9C18E26DADD85CB
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/zR5l8yB3MEr3yQut0YfQU6ku-ug.roa
Signing time:             Sun 23 Apr 2023 11:39:41 +0000
ROA not before:           Sun 23 Apr 2023 11:39:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207898
IP address blocks:        178.253.32.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jul 2023 15:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:ad:e9:9e:2d:58:b8:08:53:d9:c1:8e:26:da:dd:85:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Apr 23 11:39:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cd1e65f32077304af7c90badd187d053a92efae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:93:9e:f7:93:73:df:6f:16:d5:2e:52:8a:0e:
                    ac:7a:78:c4:86:fd:27:ca:71:f5:c1:5a:36:70:81:
                    d9:85:ec:49:51:db:5a:cb:11:be:5d:43:51:9c:e8:
                    37:e8:05:84:15:51:a3:00:8c:a3:e8:9a:9d:a4:bb:
                    95:9b:19:82:c9:9a:91:fa:41:97:b0:8e:05:49:58:
                    94:1c:78:70:13:63:12:77:32:cf:53:07:8d:5c:78:
                    21:5e:19:4f:c6:36:d3:4d:c6:4b:82:f9:03:47:f7:
                    0c:5f:96:f9:8f:c0:17:a0:23:83:87:70:0a:c0:12:
                    54:06:b6:b9:af:75:ac:37:77:6a:cc:7b:c6:27:12:
                    10:76:35:63:99:ba:10:4a:7c:a9:75:99:4e:2d:f6:
                    c6:cd:a0:96:30:5b:e4:f3:69:1c:f8:45:11:0f:68:
                    ab:8e:55:31:00:01:10:ac:ed:2e:f3:39:9f:fc:21:
                    d5:1f:fd:87:d3:6d:d6:2c:d1:56:62:96:91:be:f8:
                    90:ec:84:3d:11:4c:56:80:d7:2a:6b:d8:c7:9f:88:
                    f3:0c:40:78:44:81:3f:f6:d6:3f:44:28:04:05:61:
                    da:fd:18:be:9e:dc:29:d0:2b:2d:3c:d9:84:ac:e3:
                    cc:11:de:c9:16:60:84:1c:6c:76:ac:8c:8b:79:4e:
                    37:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1E:65:F3:20:77:30:4A:F7:C9:0B:AD:D1:87:D0:53:A9:2E:FA:E8
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/zR5l8yB3MEr3yQut0YfQU6ku-ug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.253.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:e6:c2:13:27:20:cf:18:06:30:64:4c:17:63:a2:d9:86:64:
         db:36:ad:4e:e7:fa:ca:89:a2:0f:57:cb:d2:8d:64:79:76:77:
         ea:1c:1e:79:b1:d0:be:82:ca:7a:aa:da:3d:bb:84:f2:e1:0e:
         dc:4e:4b:01:0b:5e:f0:4e:29:87:85:ad:2d:eb:d6:0b:51:ae:
         ee:81:ed:a8:81:84:7f:e8:56:8d:84:1e:6c:31:55:fa:33:d5:
         1f:98:26:dc:e3:7f:0a:8d:43:e3:31:d7:bc:34:55:2e:ec:80:
         dc:e6:ce:af:c7:3b:cc:c2:8d:a9:74:0f:a1:df:6d:bb:59:85:
         2f:bb:fe:c5:06:6d:1f:04:64:3e:26:39:7e:15:c2:31:20:e8:
         f1:d6:5b:71:0a:19:b8:c4:aa:45:1c:33:69:ca:3c:ff:60:0f:
         fd:5a:ed:df:a7:70:0a:ee:9c:02:59:ca:4f:e2:51:43:fa:e4:
         02:d6:62:8b:d4:89:35:f7:2c:f2:31:27:ff:f7:3c:65:dc:b3:
         32:44:67:0f:7d:38:2f:2a:a3:89:5c:d4:b3:ca:75:30:b2:5f:
         ea:02:f5:12:ce:c4:98:f2:15:5d:74:e4:03:0f:bb:4a:21:16:
         af:b3:a0:db:4a:d3:15:ab:0f:b9:3e:7a:0c:95:ba:db:70:7d:
         c2:35:4a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:10 2024 by rpki-client on console-fra.rpki-client.org