Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/ZB_qpG1B47O7fHD7Xfkqnn4Bhpc.roa
File:                     ZB_qpG1B47O7fHD7Xfkqnn4Bhpc.roa (raw, json)
Hash identifier:          7ONC1p2PIL4ewXZrKo+KtMrqkEIhfc7uLdTxWhymJ2A=
Subject key identifier:   64:1F:EA:A4:6D:41:E3:B3:BB:7C:70:FB:5D:F9:2A:9E:7E:01:86:97
Certificate issuer:       /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial:       0186F3440C578A18655326C84B8F04AB6074
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/ZB_qpG1B47O7fHD7Xfkqnn4Bhpc.roa
Signing time:             Sat 18 Mar 2023 05:49:28 +0000
ROA not before:           Sat 18 Mar 2023 05:49:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     400040
IP address blocks:        194.50.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:f3:44:0c:57:8a:18:65:53:26:c8:4b:8f:04:ab:60:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
        Validity
            Not Before: Mar 18 05:49:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=641feaa46d41e3b3bb7c70fb5df92a9e7e018697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:49:b4:87:a6:7f:5b:35:61:1a:92:b5:8a:dc:
                    e0:29:04:23:c9:09:66:85:b3:fc:76:b1:e3:b6:af:
                    0c:0a:20:44:1a:47:27:be:ed:d6:fa:e9:b7:54:76:
                    a6:c9:2e:c4:53:eb:43:75:8d:1a:40:24:f2:e7:7d:
                    19:d2:06:c6:b6:e9:f0:48:c3:3c:ca:dc:3c:96:1c:
                    4e:14:fb:a9:6c:ee:84:b9:c0:40:2d:94:60:62:90:
                    e1:83:18:31:b1:83:f9:3c:0b:69:8e:f8:54:a9:df:
                    12:50:21:33:6c:d6:8f:b5:60:0e:18:5f:be:87:a1:
                    49:b2:6b:cc:a4:c7:d9:55:66:c6:9e:ad:f3:6a:77:
                    66:1c:53:65:54:cf:07:a6:58:0e:7d:d1:4d:fe:1a:
                    8c:69:54:d9:97:bd:5b:fb:3a:5a:fc:b7:2e:61:f7:
                    01:56:06:e7:f0:9c:ab:af:40:20:3b:56:ad:5c:e1:
                    7e:08:d2:3a:3b:e2:02:f4:ce:b0:47:56:9b:ed:f4:
                    01:6b:39:0a:45:7b:77:28:d9:2e:75:cb:50:0a:a6:
                    93:2d:40:30:77:c6:9d:61:8c:32:10:31:55:8f:03:
                    81:40:2c:fe:34:37:4f:07:a1:17:4d:da:ce:bb:2d:
                    19:44:a1:f6:85:9f:eb:7c:ca:21:80:7f:85:3b:2c:
                    14:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1F:EA:A4:6D:41:E3:B3:BB:7C:70:FB:5D:F9:2A:9E:7E:01:86:97
            X509v3 Authority Key Identifier:
                keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/ZB_qpG1B47O7fHD7Xfkqnn4Bhpc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:76:80:08:42:84:fa:a6:05:c3:12:32:95:29:ac:05:5b:5a:
         7e:af:81:17:97:ed:0d:f2:be:80:a7:0a:18:f4:4d:06:2e:06:
         08:4e:be:f8:f8:31:49:85:ff:71:17:25:b4:8f:bb:9b:91:35:
         3b:df:1d:e0:e2:93:e0:92:65:c5:f9:0a:38:87:88:5d:2e:df:
         3e:e1:6e:08:95:ba:7c:b8:22:f6:01:d2:d3:46:7d:45:3f:7d:
         9a:8c:88:0d:04:13:d4:2c:4e:4a:64:7b:28:48:dd:70:21:60:
         de:f4:07:48:3c:ba:6b:ff:36:4f:86:89:93:e5:44:34:53:ef:
         b4:b9:8a:f7:e1:87:2a:ce:0f:8d:a9:38:bf:2d:43:2d:bf:0d:
         56:98:05:9b:9a:34:fb:8e:eb:8f:0c:2e:75:1c:ee:ad:33:bb:
         bf:36:01:16:e5:9f:26:59:6f:73:b0:15:e0:2e:58:e5:a4:9d:
         6e:b2:ca:e3:7e:46:42:c5:05:5c:c5:b8:50:0e:f3:5e:7a:15:
         26:e3:8e:f0:19:e6:51:ec:9a:38:c3:76:ce:dd:c1:96:6b:1d:
         6a:20:99:58:82:6b:82:b5:3b:9c:a0:b8:3a:b9:bb:ae:1f:dd:
         df:93:7c:32:8b:88:4e:e7:d3:83:e7:bc:9d:ae:c3:33:eb:c4:
         e5:ab:87:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:49 2024 by rpki-client on console-ams.rpki-client.org