Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/4Tp6HvfsxoUARBXMRTzc6sujKns.roa
File:                     4Tp6HvfsxoUARBXMRTzc6sujKns.roa (raw, json)
Hash identifier:          eqzLEYCRejZcAOa/0wIoP9TjcxvD2VIKNS8o/Xw4auA=
Subject key identifier:   E1:3A:7A:1E:F7:EC:C6:85:00:44:15:CC:45:3C:DC:EA:CB:A3:2A:7B
Certificate issuer:       /CN=c1b607c58515367d37c9f3e699482e57a33c73f5
Certificate serial:       01857094DE55F146DBD8E9BBDA71817FFDDA
Authority key identifier: C1:B6:07:C5:85:15:36:7D:37:C9:F3:E6:99:48:2E:57:A3:3C:73:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/4Tp6HvfsxoUARBXMRTzc6sujKns.roa
Signing time:             Mon 02 Jan 2023 03:44:42 +0000
ROA not before:           Mon 02 Jan 2023 03:44:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42981
IP address blocks:        194.110.238.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:94:de:55:f1:46:db:d8:e9:bb:da:71:81:7f:fd:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1b607c58515367d37c9f3e699482e57a33c73f5
        Validity
            Not Before: Jan  2 03:44:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e13a7a1ef7ecc685004415cc453cdceacba32a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:9e:01:89:d0:a9:98:1b:3a:dc:81:2c:2e:
                    1a:4a:60:81:67:9a:9e:40:ce:34:86:69:a0:f3:17:
                    22:68:39:51:c1:1b:fd:e7:27:3a:f8:aa:1e:c5:ad:
                    2b:94:bc:88:11:f5:90:5a:15:61:04:5c:8b:92:7f:
                    35:ef:38:b7:a4:e5:e6:27:b6:e4:b1:ef:60:fa:5b:
                    02:ab:a6:2a:62:cd:fe:63:68:d1:03:80:e0:66:29:
                    03:40:66:8a:18:7e:29:3d:b5:f5:12:22:4b:cd:32:
                    fc:fa:ce:fa:0e:b1:c4:1d:39:26:a1:6e:e6:20:60:
                    b3:9d:be:49:1c:fb:37:63:ee:a6:45:b9:bd:d3:19:
                    10:61:2d:0c:42:72:32:a7:d8:e2:fd:ca:98:f1:bd:
                    da:f6:a1:96:4e:74:43:c0:92:fb:d4:42:b9:9a:65:
                    2c:9c:67:e4:db:fe:b4:48:f4:d1:94:56:e4:49:ac:
                    d2:ac:4b:77:35:ac:a6:dc:6e:1f:fc:d4:e7:fe:ce:
                    0a:ec:ae:4f:52:a1:89:46:0f:a4:8c:9f:17:be:f4:
                    db:3a:d7:14:8e:f7:77:aa:84:46:42:fc:ab:b7:00:
                    74:fd:12:77:d1:8c:d5:95:f9:24:7b:e6:04:25:53:
                    20:d8:83:71:0c:2c:f8:6b:bf:78:54:a5:a2:4c:01:
                    67:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3A:7A:1E:F7:EC:C6:85:00:44:15:CC:45:3C:DC:EA:CB:A3:2A:7B
            X509v3 Authority Key Identifier:
                keyid:C1:B6:07:C5:85:15:36:7D:37:C9:F3:E6:99:48:2E:57:A3:3C:73:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/4Tp6HvfsxoUARBXMRTzc6sujKns.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:c7:37:4a:aa:26:aa:b4:a7:96:78:fc:b6:c0:52:27:ce:38:
         02:7d:09:de:a7:1d:53:2f:37:6e:4c:d3:18:81:c4:a8:64:76:
         45:69:ff:38:c2:a8:f2:a6:9e:82:1b:39:4b:a7:11:43:6b:cd:
         18:1a:ef:94:76:96:02:bd:da:ea:51:3b:73:45:1f:c0:d9:62:
         d1:0d:58:99:be:d3:f3:50:f2:26:45:e7:51:34:7c:a5:bb:11:
         5b:ef:77:bb:27:64:0c:d0:31:92:48:45:dc:99:6f:71:85:58:
         fd:16:76:ee:00:dc:83:cb:67:bb:94:de:44:56:b0:16:25:cd:
         59:44:68:56:94:d3:9d:f8:c7:a1:e9:38:5a:99:16:0b:9f:9c:
         c8:dc:5f:77:e2:4c:87:28:2a:35:c5:fa:14:08:17:2a:ad:56:
         0e:f4:64:37:b0:37:be:ff:2a:6f:7e:46:ea:6f:6b:aa:b6:4f:
         bd:ea:c8:29:ae:9d:94:46:5a:86:02:41:3b:ea:ea:3d:3f:9e:
         07:e6:be:2b:31:05:9e:bf:ec:40:88:b3:6e:c6:78:0a:73:43:
         f0:a5:10:0f:8f:bc:0e:3d:f4:4e:56:87:69:1e:9b:d0:4a:c3:
         8f:ff:71:c0:79:c9:c0:da:8f:80:e9:bd:5f:c6:01:69:18:a9:
         01:16:36:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:43 2024 by rpki-client on console-ams.rpki-client.org