Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/U1P-TecO0nrbF0XeR2uF7fGMj3I.roa
File:                     U1P-TecO0nrbF0XeR2uF7fGMj3I.roa (raw, json)
Hash identifier:          o4RJtpCRhL77TPLCbeVDpdf0Fs8y6++ZiIfTq5cRhMg=
Subject key identifier:   53:53:FE:4D:E7:0E:D2:7A:DB:17:45:DE:47:6B:85:ED:F1:8C:8F:72
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       018798B3A1BA0A98E6D08BCDD552F71B4F0D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/U1P-TecO0nrbF0XeR2uF7fGMj3I.roa
Signing time:             Wed 19 Apr 2023 08:48:41 +0000
ROA not before:           Wed 19 Apr 2023 08:48:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     32780
IP address blocks:        185.194.179.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:98:b3:a1:ba:0a:98:e6:d0:8b:cd:d5:52:f7:1b:4f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Apr 19 08:48:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5353fe4de70ed27adb1745de476b85edf18c8f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f4:93:82:e8:9c:91:f7:a0:f3:45:28:2c:a5:
                    a8:fe:a9:c7:6c:3d:7d:a6:74:b4:2d:be:91:e8:26:
                    b9:44:07:49:64:54:72:d5:d8:80:2a:53:65:64:15:
                    b9:03:17:24:d7:bd:8b:00:46:25:e0:1b:f6:46:88:
                    23:0d:db:c8:89:7b:aa:e6:4c:5c:fa:d0:ec:90:cc:
                    77:5d:4b:0a:53:51:e9:41:63:1e:1d:01:34:2e:a1:
                    f7:0a:3d:48:f9:a0:96:b4:2c:5d:55:ab:d3:66:bc:
                    55:90:a1:3e:29:08:db:73:1a:62:ef:65:7a:ca:e5:
                    b0:0a:b2:15:d1:ca:9a:c2:f3:44:67:c4:b3:41:ef:
                    91:37:57:27:ec:01:03:d8:e5:97:7e:18:50:b7:83:
                    ab:12:49:8f:02:34:e4:61:a3:3a:f0:64:b1:19:ec:
                    34:a1:ef:8e:b5:49:5c:f5:58:1d:ab:42:fe:1d:3a:
                    0d:c5:cf:2a:9a:3b:03:dc:dd:3b:63:9c:ca:95:c6:
                    0c:8e:8a:49:9b:48:81:35:cb:af:80:08:dd:69:3d:
                    13:f3:c2:6e:1f:a0:35:29:be:f4:97:45:7b:4f:ff:
                    38:d1:2a:06:8f:08:84:b6:7f:49:42:3a:b1:40:e9:
                    b4:5b:f0:9d:a3:9f:c5:a7:17:d3:f0:8e:2b:c3:c9:
                    8b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:53:FE:4D:E7:0E:D2:7A:DB:17:45:DE:47:6B:85:ED:F1:8C:8F:72
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/U1P-TecO0nrbF0XeR2uF7fGMj3I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.194.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:84:b8:31:fc:fc:1c:3f:80:a2:cc:17:16:c1:da:1a:0d:08:
         64:18:ba:c9:6b:15:b8:27:78:d0:b1:0b:8c:9f:f2:fb:b0:18:
         aa:49:40:ca:22:6a:ef:81:f9:b8:0d:d4:c3:79:85:be:1a:11:
         ae:06:65:b0:4a:f2:65:92:18:75:c6:d6:4c:55:d3:2c:f8:8c:
         c1:c3:9c:64:50:ee:5d:4d:80:a5:4a:93:50:f7:aa:b0:b2:1b:
         cc:86:76:6e:a9:00:85:b2:4b:f6:02:4b:3c:63:ed:a7:07:3f:
         8f:d5:35:3b:c2:bd:e1:a4:da:eb:75:00:ad:d2:09:29:cd:8b:
         07:76:5f:b7:c2:60:7d:b7:93:c5:93:b2:47:f7:1f:c8:e7:79:
         e7:8f:85:63:a7:c2:7a:b1:17:fd:76:d8:89:61:57:cd:bd:e0:
         c1:a0:9d:73:b5:a7:86:bc:c7:39:07:fc:9a:5a:54:88:3b:34:
         e8:57:53:0f:2d:55:9d:01:c2:47:07:c6:ac:73:8c:23:e5:f6:
         db:97:6e:f9:53:6b:3f:c9:f9:d5:b4:6f:69:6a:a1:e8:5f:fb:
         3b:19:e2:95:9c:18:1d:6b:46:e3:41:75:3c:cd:44:6a:08:78:
         10:62:92:62:14:83:a8:21:7d:26:ad:06:82:51:7b:ed:7a:8c:
         02:86:24:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org