Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/9SsPnLFPuKSaKtN8xvUTM3cxLRU.roa
File:                     9SsPnLFPuKSaKtN8xvUTM3cxLRU.roa (raw, json)
Hash identifier:          UVPjmnUQviaD3NAFoZMEPohk0y+Ro2sBcHSh3k8HeAU=
Subject key identifier:   F5:2B:0F:9C:B1:4F:B8:A4:9A:2A:D3:7C:C6:F5:13:33:77:31:2D:15
Certificate issuer:       /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial:       0187028D0045933E4FC45F475F443E9C1321
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/9SsPnLFPuKSaKtN8xvUTM3cxLRU.roa
Signing time:             Tue 21 Mar 2023 05:03:27 +0000
ROA not before:           Tue 21 Mar 2023 05:03:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60721
IP address blocks:        194.50.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 25 Mar 2023 04:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:02:8d:00:45:93:3e:4f:c4:5f:47:5f:44:3e:9c:13:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
        Validity
            Not Before: Mar 21 05:03:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f52b0f9cb14fb8a49a2ad37cc6f5133377312d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:dd:d5:2a:26:a5:c7:4f:60:3c:27:7f:6b:81:
                    f9:12:34:a6:6b:6b:4a:35:6b:96:51:e4:b9:3a:8b:
                    1a:16:70:4a:e2:1b:6b:f9:e8:58:1f:1f:47:26:66:
                    f2:1b:a2:23:4d:a6:09:41:47:91:0d:d5:63:16:4a:
                    1d:66:cd:5a:37:99:bc:f7:e6:41:6d:ae:42:b3:3a:
                    a6:82:8a:86:f3:ac:c1:88:9c:dd:89:61:c8:ee:1f:
                    59:62:2d:44:2b:bd:1e:d6:a6:a1:b0:5d:db:52:c7:
                    a8:cf:aa:9d:cb:21:6d:39:c6:48:9e:05:38:c3:36:
                    a3:c6:9c:c1:68:9c:0f:e6:ce:0c:03:30:8f:4e:4a:
                    38:1a:e7:25:f1:31:43:c2:75:d8:b8:9f:1c:6c:0d:
                    d7:fa:7a:a1:c2:f8:91:5a:f7:d5:90:77:f2:4d:50:
                    be:5b:5d:71:77:2d:2a:c8:4a:be:e3:6c:5c:25:49:
                    3b:f7:ed:a6:e3:9a:ba:71:f6:e1:ec:26:97:41:50:
                    2c:54:32:0b:4c:f0:c9:d2:32:b3:42:d4:c7:54:9c:
                    f7:7b:0a:6e:92:4b:9a:c1:3f:4b:26:95:95:84:ae:
                    8b:0c:b7:a4:ef:59:b4:05:31:07:c1:19:a9:8f:90:
                    dd:54:c3:4a:71:f0:e5:38:87:9b:0c:09:2b:45:1c:
                    4f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2B:0F:9C:B1:4F:B8:A4:9A:2A:D3:7C:C6:F5:13:33:77:31:2D:15
            X509v3 Authority Key Identifier:
                keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/9SsPnLFPuKSaKtN8xvUTM3cxLRU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:3a:c1:f2:a8:10:0c:3b:24:7a:eb:54:96:51:40:52:9b:de:
         fb:aa:87:ab:4d:0b:e4:ee:97:52:b4:60:0a:e5:73:6c:4f:b9:
         df:80:30:e3:cb:c5:64:3a:02:a3:2a:ea:67:c2:9d:1a:0c:3a:
         f7:31:b2:b0:8d:73:ad:30:a0:b3:70:4f:d9:93:7e:3e:a3:48:
         40:bd:33:4d:18:88:d5:47:63:6e:3d:fa:a0:bf:08:d0:c7:d3:
         98:23:f1:df:ba:c2:0e:62:32:dc:c4:03:10:95:11:d2:e1:79:
         60:38:fb:b3:11:db:22:af:e4:eb:d6:99:b2:4a:66:9e:9f:5c:
         ed:08:80:d3:13:64:60:9e:17:08:75:7c:f8:cb:8b:20:c5:8e:
         80:3f:01:fa:d4:fd:eb:be:17:0a:cc:19:79:51:e2:c7:92:53:
         ac:1b:56:9f:69:d5:48:6b:3a:7c:05:5c:b9:be:db:90:2b:f8:
         9e:f2:f1:ae:48:a5:0a:b1:1e:f1:63:eb:7a:d3:50:89:98:6b:
         44:31:dc:4a:0d:21:34:dd:1c:7c:cf:83:21:9b:92:14:e1:94:
         37:41:3a:2b:30:1d:6d:f3:5f:18:a8:97:8b:13:6a:7f:0c:d4:
         6e:ed:5f:7f:17:fb:23:94:fc:c4:c0:f6:58:f0:33:53:3e:cd:
         ee:69:df:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:18 2024 by rpki-client on console-ams.rpki-client.org