Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/Mg0Va7n7Wbnskz4v98dsrCx1i8U.roa
File:                     Mg0Va7n7Wbnskz4v98dsrCx1i8U.roa (raw, json)
Hash identifier:          +KWk/dGAcbsHnjKvXsB0tplUFDwCfjmL69bqI7xcsrU=
Subject key identifier:   32:0D:15:6B:B9:FB:59:B9:EC:93:3E:2F:F7:C7:6C:AC:2C:75:8B:C5
Certificate issuer:       /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial:       018C99056B88CC707F691CAC22E9091CF093
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/Mg0Va7n7Wbnskz4v98dsrCx1i8U.roa
Signing time:             Sat 23 Dec 2023 23:31:58 +0000
ROA not before:           Sat 23 Dec 2023 23:31:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48147
IP address blocks:        194.26.3.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:99:05:6b:88:cc:70:7f:69:1c:ac:22:e9:09:1c:f0:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
        Validity
            Not Before: Dec 23 23:31:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=320d156bb9fb59b9ec933e2ff7c76cac2c758bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:70:c8:f7:5a:78:e4:9f:c7:ca:a6:f1:41:58:
                    2a:9e:5e:74:b0:c2:18:46:3b:c1:97:f9:20:a4:50:
                    1e:1a:eb:3d:e6:84:24:9c:bf:bc:e8:0d:b2:46:e2:
                    e6:40:1f:e5:c4:48:bd:3f:19:ed:60:d1:8c:d4:20:
                    33:95:e4:a0:92:54:5a:2c:71:44:b4:52:0d:2a:59:
                    f6:f3:20:1d:7a:e0:07:5b:28:1d:b3:79:f4:fc:43:
                    95:42:7c:93:27:0c:4a:27:70:52:4f:4c:5d:5a:5b:
                    71:e1:bd:51:92:cb:8d:46:cd:f6:36:4c:f0:9a:40:
                    11:83:72:dc:f2:8f:0b:16:0f:7f:96:80:07:46:49:
                    72:b2:8c:14:69:ae:b4:1f:ff:27:8b:2e:ce:51:27:
                    58:38:9a:0c:a0:63:df:93:d0:75:b4:0d:4f:5c:9f:
                    a0:72:2a:02:8f:88:ba:f6:73:d0:c4:e9:3b:62:10:
                    c1:ea:62:49:5f:93:35:eb:1c:3b:1e:3f:00:bf:a8:
                    1a:8f:d0:e7:ef:2c:bd:fd:26:44:d9:fc:f3:de:40:
                    83:e4:31:35:f5:f6:c9:e0:9c:bf:05:d1:29:80:e0:
                    4c:bc:df:97:7f:60:e0:c2:76:08:a6:c0:db:a1:f7:
                    6d:aa:1b:8c:f0:1e:6a:51:09:99:db:d9:88:8b:ad:
                    60:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0D:15:6B:B9:FB:59:B9:EC:93:3E:2F:F7:C7:6C:AC:2C:75:8B:C5
            X509v3 Authority Key Identifier:
                keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/Mg0Va7n7Wbnskz4v98dsrCx1i8U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:be:69:e5:81:97:0c:00:ca:76:6e:cd:4d:70:73:d1:6e:42:
         e2:43:81:cc:05:68:0d:26:cf:ac:6e:c2:44:7f:72:d6:ca:83:
         91:b7:9c:af:4f:f2:35:5c:60:fc:c2:7c:c4:dc:17:e5:61:5b:
         71:51:19:80:e1:8d:7f:f8:31:a6:20:c1:bc:a6:f4:2a:47:aa:
         27:60:82:a1:96:65:66:60:cf:ae:4f:31:b5:df:68:c0:39:46:
         a5:25:39:ca:86:80:d8:bf:1e:64:f4:52:a1:21:36:87:46:39:
         56:d7:5a:62:40:0b:18:ca:06:ce:c8:5b:05:b4:00:74:31:93:
         f1:36:16:af:1c:0a:a5:7b:3d:6e:8f:5e:f6:21:1f:db:cb:a5:
         e2:e8:f5:44:01:00:e4:d0:4b:51:f3:fb:80:6d:9e:8b:9a:61:
         56:d0:d8:78:f1:11:a8:ef:b9:9f:c6:15:b3:36:d2:9b:ae:7c:
         d5:df:a9:cc:4d:f7:fd:c3:e2:60:d0:ad:8e:c6:79:2b:8c:6d:
         18:07:7c:31:9d:e6:dc:ff:47:2e:6a:2c:91:f0:9c:54:cd:32:
         20:14:03:d6:aa:9a:e2:a3:80:a7:8f:41:67:97:3e:c2:ba:18:
         df:1e:80:32:af:8a:1b:77:f9:e4:ce:1a:78:16:6c:77:8e:7d:
         34:19:35:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:24 2024 by rpki-client on console-ams.rpki-client.org