Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/TXwvLMIvVmQjWYwdworavwX7dHI.roa
File:                     TXwvLMIvVmQjWYwdworavwX7dHI.roa (raw, json)
Hash identifier:          +6jBkRTx7qQvd5M48iuLNPN4CBgA3kV5AvRfpO3+mCs=
Subject key identifier:   4D:7C:2F:2C:C2:2F:56:64:23:59:8C:1D:C2:8A:DA:BF:05:FB:74:72
Certificate issuer:       /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial:       018573F197DA3E89BF92BF03666373FB4B37
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/TXwvLMIvVmQjWYwdworavwX7dHI.roa
Signing time:             Mon 02 Jan 2023 19:24:50 +0000
ROA not before:           Mon 02 Jan 2023 19:24:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48546
IP address blocks:        87.110.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:f1:97:da:3e:89:bf:92:bf:03:66:63:73:fb:4b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
        Validity
            Not Before: Jan  2 19:24:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4d7c2f2cc22f566423598c1dc28adabf05fb7472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:86:54:97:b8:e4:26:f9:4f:d8:f3:1e:7a:76:
                    1f:92:4d:e4:bd:4a:78:a8:f0:fa:c8:89:c0:68:9b:
                    b9:48:30:d4:d2:1e:48:13:93:bc:72:85:9f:1e:24:
                    37:89:66:2f:ec:9a:c7:7c:c6:76:2d:3c:8e:a7:3d:
                    cd:d3:4a:d3:cc:ba:9d:10:f0:90:cd:e5:66:2c:92:
                    32:02:17:4e:64:56:85:59:74:1d:25:cd:c6:f7:a1:
                    c6:b7:b2:d1:1f:9e:83:ae:17:54:03:5a:50:64:a4:
                    ec:c1:26:e9:94:28:3c:d7:d6:fe:42:06:f7:4f:bf:
                    68:bf:18:57:54:c1:c1:26:f5:e5:3b:e1:f4:ac:63:
                    b2:5f:8b:7b:97:e4:46:45:39:74:4a:15:a0:54:fb:
                    1c:fc:25:f1:48:a6:a4:b3:0d:e7:63:bc:07:32:26:
                    26:0d:fa:9a:cd:cd:27:6d:6d:e8:c0:20:87:0f:a0:
                    e6:60:9b:3c:8a:b1:e5:cf:c4:01:af:92:2c:fe:78:
                    84:49:f2:f3:f2:f0:1b:b5:ee:d3:6e:91:03:a8:13:
                    5c:44:8b:1d:54:fe:73:bb:4c:1e:6a:83:63:ce:19:
                    6e:ba:c4:c8:f6:0a:fd:d6:fd:79:0a:46:ec:a5:1e:
                    50:e8:b1:75:5a:c5:d8:d7:9a:50:1f:f0:d7:06:96:
                    10:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7C:2F:2C:C2:2F:56:64:23:59:8C:1D:C2:8A:DA:BF:05:FB:74:72
            X509v3 Authority Key Identifier:
                keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/TXwvLMIvVmQjWYwdworavwX7dHI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.110.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:e0:0a:e4:c0:8a:1e:d5:f2:6f:e8:eb:5d:eb:a2:ba:89:34:
         73:bc:39:42:9e:98:2b:10:11:b3:fe:9f:35:d1:14:67:86:49:
         68:25:0d:dd:1c:c5:91:e5:2a:6f:bf:ca:cf:0f:52:ce:93:48:
         74:b1:8b:f9:fb:ec:c0:0f:5b:2d:85:48:57:96:6f:c3:fc:21:
         23:19:3e:86:2f:be:f4:48:72:67:31:fd:d6:67:9c:2a:32:26:
         c1:91:5a:10:e1:d2:19:0a:35:56:c0:29:1f:1c:25:1e:ab:fa:
         97:1d:3f:10:65:a0:e8:75:6f:8d:77:c2:fa:45:db:30:35:76:
         14:37:ef:2d:b6:db:46:bd:1a:a7:ca:02:cd:5a:31:59:d3:cd:
         c5:ee:8a:21:10:46:74:3b:58:38:2c:f8:3e:e1:9d:e2:12:99:
         3a:00:fc:7b:d2:2e:ad:51:bb:24:9a:ea:61:54:c6:de:04:0e:
         80:e1:ed:c0:d7:be:d0:54:39:03:42:0f:f5:63:c5:ea:ff:20:
         a5:fe:56:ae:d2:ac:54:32:1c:bf:2e:d3:f6:0e:2a:cf:1b:35:
         b6:f1:de:de:63:f3:9a:c9:53:81:e3:bb:c0:e9:39:86:b2:b2:
         e3:bd:2a:a4:89:ec:1b:0f:f5:70:42:51:73:50:74:8d:1e:92:
         50:2a:ee:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:47 2024 by rpki-client on console-ams.rpki-client.org