Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/3r2Cgp8VQ2zsxhbx-BOjzQUyBd4.roa
File:                     3r2Cgp8VQ2zsxhbx-BOjzQUyBd4.roa (raw, json)
Hash identifier:          YAepbY8iAo/99/18euEWmKrQ1d2epzYaqK4fzWdx9Zc=
Subject key identifier:   DE:BD:82:82:9F:15:43:6C:EC:C6:16:F1:F8:13:A3:CD:05:32:05:DE
Certificate issuer:       /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial:       0186DA4E5AC5D247A74F549D8BAD5E39E5F1
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/3r2Cgp8VQ2zsxhbx-BOjzQUyBd4.roa
Signing time:             Mon 13 Mar 2023 09:30:13 +0000
ROA not before:           Mon 13 Mar 2023 09:30:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209007
IP address blocks:        194.145.137.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:da:4e:5a:c5:d2:47:a7:4f:54:9d:8b:ad:5e:39:e5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
        Validity
            Not Before: Mar 13 09:30:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=debd82829f15436cecc616f1f813a3cd053205de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:20:9d:03:ca:c4:e5:19:1e:45:ad:1f:39:65:
                    17:b7:99:4a:06:37:db:f8:cb:28:e9:80:10:bf:0d:
                    6c:78:1c:84:e7:e1:ff:6d:19:26:fa:3d:b7:3f:1d:
                    14:2b:fa:4f:fa:bf:64:42:2b:aa:94:01:c0:5a:29:
                    82:e9:d2:fc:21:fa:1e:47:fd:b2:f0:42:23:41:b2:
                    24:d5:27:aa:5b:f0:3b:bb:c9:1a:5c:97:37:c6:ca:
                    ba:5b:1a:b3:03:c9:d8:fa:36:0c:3d:47:8b:e2:7e:
                    94:0a:9e:06:18:e6:f7:33:e0:0c:66:94:f8:5a:f3:
                    f5:c9:a6:cb:bb:23:43:9d:2a:4f:df:68:c1:66:d9:
                    bc:ec:e2:ad:ac:7a:96:d3:b3:bc:08:fb:4b:b1:d2:
                    da:53:87:1c:e7:98:5f:02:d7:8d:13:ee:9d:ab:4e:
                    57:ea:20:2e:58:6f:cd:31:48:9c:8f:e4:81:df:02:
                    03:f9:1c:dc:87:b5:08:c1:57:29:23:70:b6:7b:bc:
                    cd:6a:f3:28:84:0b:c6:37:fe:58:dd:77:8b:34:7b:
                    48:ee:7c:fd:1a:81:15:d9:8c:75:f4:13:95:e1:ca:
                    4f:19:30:05:bd:45:df:6a:17:74:92:8f:01:b9:97:
                    4b:ff:de:2d:af:40:4d:9f:d4:fb:29:a8:9a:63:05:
                    8a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BD:82:82:9F:15:43:6C:EC:C6:16:F1:F8:13:A3:CD:05:32:05:DE
            X509v3 Authority Key Identifier:
                keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/3r2Cgp8VQ2zsxhbx-BOjzQUyBd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.145.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:7c:6c:76:46:70:e3:5d:da:1a:ca:7a:c3:8c:90:60:58:82:
         e5:6b:12:03:16:80:52:7f:7c:c9:d2:f5:2c:56:87:56:13:3c:
         65:54:f2:e5:36:b7:2d:80:a4:3a:b6:41:14:bd:05:9a:f7:3e:
         c2:b8:ca:ec:91:9a:7a:62:cc:fb:03:88:ba:8b:6c:70:d0:19:
         46:d6:3d:0c:e6:a7:ee:8e:25:45:59:14:26:d3:8d:c7:68:58:
         48:bb:44:19:75:f2:17:e1:d8:b5:cc:a4:a8:ff:24:44:47:e5:
         60:fa:cb:60:88:af:57:13:a7:b3:8e:79:9c:8f:9b:cd:4d:64:
         b5:71:6f:f8:b2:b0:81:54:e7:5c:9f:c0:36:27:8b:8c:7e:39:
         80:ca:4b:bc:de:a1:35:27:c5:f3:8f:d7:44:71:e5:a8:dc:38:
         5a:a8:89:b1:32:76:e9:6e:dd:b9:05:c0:5e:70:af:bf:48:57:
         e7:e7:49:29:16:d8:99:19:3b:1e:9d:7c:15:41:8e:25:ac:83:
         1b:88:99:17:56:11:96:a4:9e:f9:8c:54:5f:b8:53:68:1c:2d:
         ad:4b:56:66:29:29:aa:b8:78:16:0e:4e:fc:95:bf:ef:81:7c:
         46:87:8b:c5:46:a4:d8:8a:6d:97:2a:a7:31:fe:84:c0:73:7b:
         e5:59:16:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org