Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/5VUpDxnBSQvDdwK1eGney4nN3e0.roa
File:                     5VUpDxnBSQvDdwK1eGney4nN3e0.roa (raw, json)
Hash identifier:          UpErvbWfuz5MMED2GAONbjd+doOxTmb9Y5RxiBuqt/c=
Subject key identifier:   E5:55:29:0F:19:C1:49:0B:C3:77:02:B5:78:69:DE:CB:89:CD:DD:ED
Certificate issuer:       /CN=53a84b523dfe32b8a89b9cdd30a9f8711007fdb9
Certificate serial:       01856C01484AFC889AE7885EDE1DFDCF2899
Authority key identifier: 53:A8:4B:52:3D:FE:32:B8:A8:9B:9C:DD:30:A9:F8:71:10:07:FD:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/5VUpDxnBSQvDdwK1eGney4nN3e0.roa
Signing time:             Sun 01 Jan 2023 06:25:01 +0000
ROA not before:           Sun 01 Jan 2023 06:25:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39502
IP address blocks:        194.50.11.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:01:48:4a:fc:88:9a:e7:88:5e:de:1d:fd:cf:28:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a84b523dfe32b8a89b9cdd30a9f8711007fdb9
        Validity
            Not Before: Jan  1 06:25:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e555290f19c1490bc37702b57869decb89cddded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b5:a1:ba:fa:b8:41:f3:fb:12:b6:17:7e:7f:
                    6e:09:3d:1c:f4:a8:6a:05:bb:b4:59:51:1a:41:df:
                    05:76:ec:7a:bd:fd:5b:3b:e3:a8:58:04:d8:69:81:
                    6b:d3:60:88:65:f0:87:c1:b3:42:24:5f:39:75:4c:
                    28:0c:ee:21:22:95:e0:ad:52:12:e0:d1:0a:fb:76:
                    ca:e4:b9:79:4d:98:82:3a:dc:52:ea:de:f9:91:1f:
                    f5:56:d6:21:73:e2:f3:e4:cc:d9:5b:fe:4a:5b:ae:
                    bf:55:71:d0:22:e0:bc:d3:bf:e1:3c:0e:e8:ac:a2:
                    9e:42:00:87:36:32:1c:03:47:da:36:9e:c6:87:cc:
                    d8:dc:da:a0:c4:ef:b6:a0:cc:54:d8:92:a2:31:60:
                    50:b2:13:6f:60:25:57:92:09:0e:91:7d:7f:ec:cf:
                    3e:17:f1:d4:f6:d5:2a:50:94:0f:c8:e9:1f:50:89:
                    07:b6:07:a0:75:e4:15:c1:0f:50:8e:8b:e5:44:c5:
                    73:a6:66:8a:0b:47:d0:19:1a:64:59:57:18:1a:95:
                    01:89:f0:cb:65:dd:ab:ae:cc:bf:e4:34:5e:d8:b7:
                    03:56:bc:ee:a3:1c:df:8c:b6:ce:4c:4b:59:a1:76:
                    7c:e1:d4:e3:c8:e4:db:ac:af:b8:2e:c2:a0:4c:71:
                    36:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:55:29:0F:19:C1:49:0B:C3:77:02:B5:78:69:DE:CB:89:CD:DD:ED
            X509v3 Authority Key Identifier:
                keyid:53:A8:4B:52:3D:FE:32:B8:A8:9B:9C:DD:30:A9:F8:71:10:07:FD:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/5VUpDxnBSQvDdwK1eGney4nN3e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:b2:1f:c3:af:6c:c5:3d:34:e1:ac:fa:07:d2:28:f0:30:89:
         87:0c:be:e9:3e:28:7c:10:b8:bf:65:25:39:91:04:70:90:d3:
         ec:e0:50:d0:fe:38:5c:db:1a:24:79:8f:0a:14:0c:4b:4e:f9:
         1f:c4:81:82:32:b6:82:8a:4e:e2:6b:e3:c6:58:5c:3e:5c:e8:
         a8:00:e2:b1:1a:55:79:fc:f7:91:82:ed:2f:0b:12:71:f9:18:
         8c:42:af:07:36:63:73:9a:a6:5e:c3:50:65:d6:b9:6d:d2:50:
         e1:7a:f0:08:4a:77:3a:46:68:01:69:6c:0b:9c:06:84:a3:da:
         c3:4f:f2:3f:4d:d9:9d:91:2a:2b:74:1d:66:3c:62:d8:d5:66:
         9f:68:2f:87:41:1e:c1:34:e3:a5:69:69:71:19:73:2c:16:04:
         cb:ed:b9:0c:27:fb:af:40:d2:b8:56:39:dc:39:09:0b:c5:f5:
         4d:9b:ff:2a:44:06:eb:27:ad:cc:46:2e:f8:62:c5:9f:20:38:
         ff:f1:a0:7d:a7:5e:dd:43:d3:37:aa:b3:a7:da:5d:89:46:6e:
         72:69:f0:b7:4c:36:a1:a3:c8:63:31:34:b4:81:60:07:d1:40:
         8d:61:2b:30:54:1f:05:60:04:f5:93:bb:7e:b5:52:14:8e:74:
         ec:ca:d9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:46 2024 by rpki-client on console-fra.rpki-client.org