Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/n0SYNHBFahMfb1tWgefMHu9KeIE.roa
File:                     n0SYNHBFahMfb1tWgefMHu9KeIE.roa (raw, json)
Hash identifier:          OgkdtuX9j4i8PYPMzJXX6Ay680NfC4KhGtbHHVJdyFA=
Subject key identifier:   9F:44:98:34:70:45:6A:13:1F:6F:5B:56:81:E7:CC:1E:EF:4A:78:81
Certificate issuer:       /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial:       018A673569746904E09A4C7F7545FA2B7101
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/n0SYNHBFahMfb1tWgefMHu9KeIE.roa
Signing time:             Tue 05 Sep 2023 21:17:48 +0000
ROA not before:           Tue 05 Sep 2023 21:17:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210352
IP address blocks:        185.217.197.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 12 Sep 2023 07:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:67:35:69:74:69:04:e0:9a:4c:7f:75:45:fa:2b:71:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
        Validity
            Not Before: Sep  5 21:17:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9f44983470456a131f6f5b5681e7cc1eef4a7881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7b:bc:62:13:c0:27:f6:ac:18:66:eb:cd:e4:
                    2a:4d:df:69:fa:82:a4:c9:14:13:70:cd:33:8e:15:
                    46:6d:82:98:9d:e3:91:4e:3a:11:d1:34:a7:3e:cb:
                    3d:ca:58:cc:43:29:e7:74:5c:82:6e:eb:39:ec:ae:
                    ef:dd:94:e9:d1:a9:08:5a:b5:9e:97:d3:15:6a:be:
                    c5:63:f2:76:9e:dd:9c:ab:bd:d2:72:56:6a:1b:b1:
                    86:8c:5e:43:ba:89:2f:70:fa:ea:fc:48:20:7c:6e:
                    8c:67:cd:a4:22:c9:66:8c:cf:b6:2d:89:30:c7:9f:
                    68:c6:dd:e8:07:61:46:8a:13:88:8e:0b:71:c0:90:
                    55:26:a3:a3:ad:f6:b7:c6:23:9c:83:90:b3:78:b5:
                    83:a9:bb:d6:09:9c:a1:79:4d:d4:3c:bd:70:c8:67:
                    7c:36:ab:22:ff:57:b2:af:ed:fa:a3:08:b1:23:01:
                    1d:c2:b3:85:10:10:86:8e:34:0a:4c:63:4a:f2:eb:
                    43:28:4f:f2:7f:8e:41:3e:f1:fd:ba:39:45:06:38:
                    d9:7f:6b:65:3b:10:dd:6c:2d:cf:45:06:88:be:27:
                    0b:1f:6f:7b:76:57:0b:98:c8:52:ff:9a:f0:02:76:
                    99:f2:e2:cf:5c:f3:01:58:12:a3:96:70:5f:98:33:
                    74:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:44:98:34:70:45:6A:13:1F:6F:5B:56:81:E7:CC:1E:EF:4A:78:81
            X509v3 Authority Key Identifier:
                keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/n0SYNHBFahMfb1tWgefMHu9KeIE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.217.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:0c:20:9a:03:52:49:11:58:20:f3:a6:1a:ee:bb:3a:3d:03:
         fb:df:36:44:12:2d:d1:24:1f:a4:87:51:65:06:cd:e3:c8:9a:
         a0:6c:62:03:0a:e1:29:c7:85:0c:22:82:84:31:fc:ea:8f:d7:
         b5:f0:8e:19:99:76:bc:6f:d0:f6:8c:43:4a:eb:e0:6a:9c:63:
         71:17:55:8a:7b:0e:64:b5:3c:88:04:bd:6d:da:34:e4:dd:43:
         3b:93:27:f0:5c:71:73:ef:94:2f:4b:d6:46:96:ce:32:6c:96:
         b2:b7:ed:a4:c8:ce:74:5c:88:f0:39:09:6c:b6:ca:43:2b:04:
         1a:7b:82:b3:e0:f4:67:42:cb:a0:80:31:f0:9d:11:3f:30:0d:
         3b:d4:29:d2:75:71:d6:46:54:3b:51:07:67:2d:05:30:5b:4f:
         0d:d0:80:b3:48:b7:10:c4:e7:15:f5:dc:d8:4f:10:ca:06:6b:
         eb:47:55:c5:f6:b4:75:18:02:e2:e7:43:ab:69:f2:af:c7:04:
         11:db:8d:e6:d7:8e:5f:02:13:30:b4:49:5e:c9:0e:ea:f1:70:
         01:4d:d7:69:e5:40:89:4e:2b:2e:ad:3d:be:68:ef:1f:d0:bc:
         1d:c1:71:90:9b:0a:0d:36:25:24:0f:4a:5e:60:ae:00:d8:40:
         27:30:c2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org