Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UnkIKJLCQ2DWDxizIhrEoDb67j4.roa
File:                     UnkIKJLCQ2DWDxizIhrEoDb67j4.roa (raw, json)
Hash identifier:          JDcu+K/Bv4q6wekGELHbss0V7wkHpQ+G+kDWGXS2B1o=
Subject key identifier:   52:79:08:28:92:C2:43:60:D6:0F:18:B3:22:1A:C4:A0:36:FA:EE:3E
Certificate issuer:       /CN=519e97470c63fda14c3265eb741a70e3a8b69aff
Certificate serial:       01856DCB01793A06ED512112DACA3AD836EB
Authority key identifier: 51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UnkIKJLCQ2DWDxizIhrEoDb67j4.roa
Signing time:             Sun 01 Jan 2023 14:44:58 +0000
ROA not before:           Sun 01 Jan 2023 14:44:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     33886
IP address blocks:        194.50.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:cb:01:79:3a:06:ed:51:21:12:da:ca:3a:d8:36:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=519e97470c63fda14c3265eb741a70e3a8b69aff
        Validity
            Not Before: Jan  1 14:44:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5279082892c24360d60f18b3221ac4a036faee3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5a:a3:24:65:14:bb:f9:30:68:e4:fb:a0:62:
                    9b:86:97:c7:0a:5b:01:04:c7:3a:72:c6:b8:09:7d:
                    d3:2f:0a:21:46:14:e4:c2:8b:94:2d:05:0b:f8:ef:
                    63:06:da:21:f3:57:3b:dd:e7:ab:28:fc:8c:d6:79:
                    a1:cb:87:cf:b6:fd:50:f9:64:61:f5:3d:70:23:86:
                    81:3f:f0:a7:c9:4b:9c:a4:71:40:42:21:b2:a9:b8:
                    c9:69:37:db:b2:fc:a2:d6:a3:9c:0a:2a:61:14:9e:
                    48:65:06:b1:5c:76:5d:ee:67:3d:f3:af:c9:d2:d2:
                    19:df:5d:82:3c:0b:8f:2c:a9:df:17:68:59:af:da:
                    16:b1:06:4c:e5:85:03:bb:db:4e:72:85:ef:77:d4:
                    a3:15:df:65:6b:35:34:74:c2:48:85:63:7c:fd:c1:
                    42:27:15:8b:5d:3b:ea:a6:0b:f9:3e:f0:b8:f5:17:
                    c5:35:bd:c6:fe:4d:bb:fd:0e:c7:12:7c:18:c5:2f:
                    ad:d1:96:97:5b:b1:9e:13:7d:eb:f9:4a:43:a5:39:
                    89:c8:e7:9f:09:4e:4c:12:d7:95:41:ce:b1:95:3e:
                    e6:fb:66:06:4a:1e:98:09:a7:07:a8:e4:5d:6f:18:
                    dc:34:39:84:81:bd:5e:8d:3f:4f:16:43:20:f9:61:
                    db:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:79:08:28:92:C2:43:60:D6:0F:18:B3:22:1A:C4:A0:36:FA:EE:3E
            X509v3 Authority Key Identifier:
                keyid:51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UnkIKJLCQ2DWDxizIhrEoDb67j4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:9b:7c:44:bf:0c:29:e2:0d:31:cc:90:39:e5:ad:ab:74:9b:
         b9:67:65:24:fb:c9:55:5f:ed:4a:0e:8c:0d:a3:8d:86:11:16:
         4f:b8:55:f7:0c:3f:dc:fc:9d:c8:62:e0:0b:06:78:53:b7:3f:
         71:9b:40:ed:cb:3d:0e:21:ef:93:4c:06:fc:ac:22:60:8e:39:
         35:7d:93:ec:0c:24:9c:65:89:d8:c1:e5:18:82:ca:d1:55:78:
         03:2d:50:28:81:1f:97:3b:a7:b3:a9:91:ac:5d:22:63:fc:c5:
         68:57:fd:aa:33:30:3d:c3:1b:4d:fb:01:42:a7:d5:60:13:b7:
         5d:09:0b:03:11:65:a7:55:0c:3f:32:73:90:16:8d:70:71:cf:
         e5:54:53:21:06:ed:57:07:9d:c6:20:b1:58:9a:a5:4b:24:62:
         ab:45:23:3a:33:ad:91:44:8c:75:4f:7e:23:33:b2:0a:3f:e9:
         e6:2d:15:12:52:3f:48:1c:ab:b4:fc:c6:f9:72:c4:28:3d:9b:
         37:e8:25:b0:d7:42:ab:e3:21:76:c2:5a:3a:4d:1f:31:70:4d:
         4f:75:1a:0c:47:85:d2:3a:da:f0:aa:a0:49:2a:c6:0e:a9:f5:
         eb:34:8d:94:8a:3e:70:41:78:e1:7a:36:63:42:e8:bb:94:0d:
         44:c4:14:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:20 2024 by rpki-client on console-ams.rpki-client.org