Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/bpL3rnNCRdlhF7ChhD-F0XmZRs0.roa
File:                     bpL3rnNCRdlhF7ChhD-F0XmZRs0.roa (raw, json)
Hash identifier:          O+VDPz1/oRxSnChtpgiu+JHf5fro0KwWB62ONFkIHe8=
Subject key identifier:   6E:92:F7:AE:73:42:45:D9:61:17:B0:A1:84:3F:85:D1:79:99:46:CD
Certificate issuer:       /CN=b846e854187f9332954c60e08c3351afcdf1085b
Certificate serial:       018C59F5210D30F3D49C02B05D06E03CD881
Authority key identifier: B8:46:E8:54:18:7F:93:32:95:4C:60:E0:8C:33:51:AF:CD:F1:08:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/bpL3rnNCRdlhF7ChhD-F0XmZRs0.roa
Signing time:             Mon 11 Dec 2023 17:38:06 +0000
ROA not before:           Mon 11 Dec 2023 17:38:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200780
IP address blocks:        94.231.203.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:59:f5:21:0d:30:f3:d4:9c:02:b0:5d:06:e0:3c:d8:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b846e854187f9332954c60e08c3351afcdf1085b
        Validity
            Not Before: Dec 11 17:38:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6e92f7ae734245d96117b0a1843f85d1799946cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:36:71:3a:34:77:d8:e3:47:89:b4:89:5e:eb:
                    67:98:7b:98:e4:13:8c:68:09:58:f0:c9:71:3c:18:
                    67:ff:b7:8e:86:b3:bf:fb:4e:cf:8a:a3:a4:e8:f6:
                    1c:cd:13:52:8e:8b:ad:c7:a4:31:08:94:58:fa:f9:
                    45:cb:ba:20:b5:ab:39:7e:52:49:ea:07:0d:eb:cd:
                    f6:07:63:99:e4:25:dc:c6:ad:9b:c3:05:30:b7:df:
                    9a:ab:1a:42:6d:90:7f:4c:af:e5:c6:80:96:23:b1:
                    34:15:9e:ef:40:da:bf:bb:92:b4:6c:54:ae:61:60:
                    65:4d:b9:a0:35:4e:db:ac:64:ab:05:3e:00:08:6f:
                    79:0c:75:30:9b:63:6f:9f:3a:9f:8e:43:fd:b3:50:
                    76:af:cd:4d:13:59:f7:bb:68:f4:47:bd:c3:fe:10:
                    5c:6f:4a:9e:69:2e:68:df:88:f5:79:83:ff:53:9d:
                    8f:a5:db:26:cc:fb:c0:33:1c:49:7a:ec:61:92:65:
                    75:83:e0:1e:49:7d:c8:b4:28:0f:06:01:6a:32:50:
                    77:6e:f0:e4:a9:38:0b:ed:3d:4b:31:b9:18:ec:c3:
                    58:2f:a4:96:86:0b:a5:c0:4b:0b:b2:ad:b5:8b:2c:
                    42:37:e0:f9:7c:44:d8:da:3e:18:f5:be:fd:54:7b:
                    77:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:92:F7:AE:73:42:45:D9:61:17:B0:A1:84:3F:85:D1:79:99:46:CD
            X509v3 Authority Key Identifier:
                keyid:B8:46:E8:54:18:7F:93:32:95:4C:60:E0:8C:33:51:AF:CD:F1:08:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/bpL3rnNCRdlhF7ChhD-F0XmZRs0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.231.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:bd:0d:48:46:0c:37:cb:7c:e4:92:47:d2:32:69:a6:70:e6:
         4f:fd:39:d1:78:b1:38:13:f8:64:86:8c:db:72:31:d5:c3:ab:
         94:5c:33:1a:c2:26:ec:e2:0e:24:5f:6f:9a:1b:0c:e3:32:9d:
         54:c3:0e:40:c0:85:30:81:78:18:c7:2c:16:5e:72:64:47:07:
         06:a6:a0:10:b6:ce:80:3c:51:e6:cf:58:1f:b1:bb:d7:e1:ee:
         3e:d4:69:5d:4c:6d:cf:fd:08:0c:1d:5b:10:88:7e:f2:2b:a7:
         2a:ec:68:cf:39:56:bd:37:a5:a0:3c:65:ec:44:84:a8:91:5d:
         12:5e:a9:7f:eb:57:20:d0:be:e7:26:57:b2:13:11:e5:d3:5d:
         3e:1c:6d:f2:62:bd:9a:dd:73:0c:2e:ec:1d:79:8f:40:41:02:
         e8:38:f3:d7:37:b7:55:27:33:01:bc:91:a1:c5:8a:fa:e2:7c:
         d5:ab:26:bd:d0:e0:38:fd:10:84:54:22:21:0a:05:61:1b:87:
         f1:a0:8f:f0:6e:5e:4a:07:f8:2c:9a:69:6e:15:b6:ae:22:b8:
         de:6a:d5:23:8d:57:02:85:04:b5:13:3f:9f:44:92:1f:6d:8c:
         03:0a:11:c6:13:ed:70:5e:d7:0d:e8:9e:56:00:32:d5:4d:2b:
         3a:ff:bc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:43 2024 by rpki-client on console-ams.rpki-client.org