Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/T55iVmKQWjyUnuV3aPsTxVZdWfY.roa
File:                     T55iVmKQWjyUnuV3aPsTxVZdWfY.roa (raw, json)
Hash identifier:          ist62n1nySI0DPKj5+7jR3yzvDT1hhoycj8V4w/wDuU=
Subject key identifier:   4F:9E:62:56:62:90:5A:3C:94:9E:E5:77:68:FB:13:C5:56:5D:59:F6
Certificate issuer:       /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial:       018A174619A234679F36D5916C68449D1168
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/T55iVmKQWjyUnuV3aPsTxVZdWfY.roa
Signing time:             Mon 21 Aug 2023 08:46:24 +0000
ROA not before:           Mon 21 Aug 2023 08:46:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204203
IP address blocks:        94.199.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:17:46:19:a2:34:67:9f:36:d5:91:6c:68:44:9d:11:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
        Validity
            Not Before: Aug 21 08:46:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4f9e625662905a3c949ee57768fb13c5565d59f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:69:8f:2f:0c:11:8d:02:fe:c5:28:f4:ae:a0:
                    bc:ed:d7:cc:44:58:b9:10:fb:f4:3e:ab:44:0f:80:
                    22:ed:ab:7b:a1:e4:ce:c7:23:65:e2:0c:0f:b2:2a:
                    10:e9:44:2b:2d:4b:42:2b:2e:bb:74:27:47:22:7a:
                    44:c8:05:2e:fc:79:96:d8:fb:57:ee:b7:49:46:bc:
                    6d:c3:2b:e9:ba:dc:5b:0f:cb:8e:c0:22:53:a3:4b:
                    b3:7c:a2:0b:2d:db:ad:07:66:d4:db:c2:5c:e1:4e:
                    61:9c:8c:46:68:84:25:45:7d:e9:6c:b3:f1:09:d8:
                    df:e4:32:db:09:9b:47:84:2c:65:09:7c:67:8b:95:
                    b8:7c:4a:4d:90:16:1f:d7:b4:e5:70:1a:e2:46:55:
                    a4:e9:14:dd:9d:84:b6:03:24:09:fa:df:7e:05:f3:
                    26:74:6c:04:05:e1:b0:9d:3a:13:e4:d4:7f:e9:d9:
                    49:01:d1:d5:a8:f6:7b:26:bf:98:13:b0:e6:35:63:
                    81:ce:a1:b8:cb:92:b6:7c:c6:0b:9f:f4:1d:23:bb:
                    38:b5:49:56:46:7a:40:5b:2d:a2:ed:f7:42:e9:bf:
                    f2:ad:d3:5c:29:03:f6:5a:14:74:d1:6d:d1:f7:bd:
                    4c:c6:d6:a4:d0:b7:17:f0:a1:8c:20:26:e6:ac:0a:
                    7b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9E:62:56:62:90:5A:3C:94:9E:E5:77:68:FB:13:C5:56:5D:59:F6
            X509v3 Authority Key Identifier:
                keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/T55iVmKQWjyUnuV3aPsTxVZdWfY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.199.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:aa:9b:c5:52:06:e3:4e:87:5f:76:3f:bf:0d:f4:0b:ab:e7:
         4c:1a:38:30:bd:13:f7:b0:0b:7d:18:0f:b0:4e:b8:df:53:bf:
         d0:b1:b0:06:8f:aa:5d:18:62:78:bd:c5:56:6a:e8:8d:e7:3e:
         36:54:1b:db:fd:1a:e2:08:86:0f:c8:f2:cf:e5:eb:fe:e2:76:
         68:87:6b:e7:51:5c:21:d4:68:80:45:9e:ae:b2:24:13:28:ad:
         23:62:23:9d:f1:f1:1d:96:5a:40:cd:85:99:61:0d:06:b0:9f:
         60:84:36:24:f8:d3:fd:16:24:6f:43:bc:df:6e:01:4f:47:fb:
         c2:2e:98:67:3b:ab:80:79:1a:f3:0b:ce:ae:fc:8d:9e:b5:bb:
         68:4b:78:2c:aa:31:ec:08:e1:91:5f:40:da:85:49:1b:aa:d7:
         23:bd:ad:0b:a6:31:11:35:f0:d8:a7:71:a9:03:81:3b:45:eb:
         b4:b5:c2:d2:9d:76:d8:98:46:33:00:57:6d:91:4d:3a:0e:ce:
         4f:f6:b9:8c:0e:af:36:73:68:f7:41:29:3d:82:f1:7d:ae:d8:
         71:a9:32:0e:33:d5:f1:68:14:f0:e2:ea:cf:0e:da:33:eb:5d:
         c1:26:6b:ac:52:b0:01:ad:7b:d6:ac:2a:da:65:68:bc:90:22:
         7b:fa:36:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:55 2024 by rpki-client on console-ams.rpki-client.org