Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BPT1fggtJTxzUMdbwkHOio5Vh2Q.roa
File:                     BPT1fggtJTxzUMdbwkHOio5Vh2Q.roa (raw, json)
Hash identifier:          npSUfpZNSBs3Zwd9QYuRoI0uE2o6IGuVnhTgSLZlGLQ=
Subject key identifier:   04:F4:F5:7E:08:2D:25:3C:73:50:C7:5B:C2:41:CE:8A:8E:55:87:64
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       018B38FE8747ACD2ED56E232BC6F0EA7A058
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BPT1fggtJTxzUMdbwkHOio5Vh2Q.roa
Signing time:             Mon 16 Oct 2023 14:58:06 +0000
ROA not before:           Mon 16 Oct 2023 14:58:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211439
IP address blocks:        88.209.253.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:38:fe:87:47:ac:d2:ed:56:e2:32:bc:6f:0e:a7:a0:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: Oct 16 14:58:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=04f4f57e082d253c7350c75bc241ce8a8e558764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f2:19:e8:b1:dc:e1:da:40:d7:00:3b:cb:26:
                    d8:1d:08:98:47:c0:75:c1:8a:e7:34:7e:27:54:7e:
                    0b:75:16:37:2e:4e:81:4b:15:ff:8a:04:96:4a:5f:
                    e9:67:44:9c:9c:59:e3:95:b6:35:ea:59:f3:b7:32:
                    67:8f:2d:94:32:d3:57:ed:10:f5:af:95:d5:f7:98:
                    0c:6b:a2:50:23:fa:27:ac:67:53:65:89:26:69:eb:
                    6c:bc:0d:27:6b:59:98:75:94:37:ec:19:7d:2e:f6:
                    98:06:8f:5d:0f:09:4b:e9:05:eb:00:12:19:25:0a:
                    fb:5f:d7:a5:1c:fa:3e:9f:47:bd:07:a9:7e:51:b7:
                    4a:82:4b:13:95:c8:b2:9f:d5:b9:54:6c:e3:d6:af:
                    27:a0:15:74:37:95:29:dc:20:4d:a0:59:19:89:10:
                    fb:14:f9:6d:b9:65:98:8c:72:21:9e:45:f4:bc:de:
                    eb:c8:7e:cd:95:bb:b7:4d:6a:10:38:37:ae:61:63:
                    2c:df:40:f7:33:f5:43:22:b4:14:3d:71:94:29:44:
                    f0:46:00:4d:ba:a0:30:39:86:6e:48:56:a4:b1:e0:
                    c7:57:c3:db:23:4f:05:7e:a6:61:ab:aa:61:5a:3c:
                    35:a2:ff:27:42:db:81:ba:47:7a:a0:c1:cd:0b:5f:
                    29:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F4:F5:7E:08:2D:25:3C:73:50:C7:5B:C2:41:CE:8A:8E:55:87:64
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BPT1fggtJTxzUMdbwkHOio5Vh2Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.209.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:2e:cd:b7:e7:ab:de:f8:99:84:87:6f:b1:4e:f3:b5:52:7e:
         03:cd:d2:28:cd:4b:0b:04:99:54:2e:d8:b3:87:bc:e6:2e:2d:
         97:e8:61:d3:ff:8c:58:03:33:4c:03:17:6f:a9:b1:ac:35:cb:
         2b:9b:b4:4c:01:84:cb:46:f8:11:2e:65:65:80:7e:50:1d:8a:
         00:51:c2:76:92:24:23:06:c3:bd:4b:14:57:bc:25:4e:0c:38:
         75:3a:e8:a6:0d:58:99:4d:da:43:6b:27:3a:f3:e3:52:ae:b1:
         57:60:64:ed:52:09:87:6a:0a:9f:10:e9:7d:13:e8:ad:a8:31:
         71:02:d8:2d:bd:38:ab:43:fd:f7:ee:54:d1:bf:ac:b2:85:20:
         b1:20:79:81:58:cd:9d:c1:f0:7b:64:ae:78:a9:60:59:a6:ef:
         b4:94:13:98:83:c4:fa:c4:88:b2:11:02:76:1c:e1:0e:f0:85:
         2a:2f:07:68:9c:91:8a:f1:50:cd:56:5e:cd:49:75:4e:dd:3f:
         7f:5d:8c:ce:ed:a6:2e:85:e7:23:46:ee:b1:fe:fc:f1:dd:de:
         74:56:81:78:05:f2:5a:e2:ea:fb:7e:09:55:2f:79:91:0c:f7:
         2f:4a:74:c5:0c:a0:c6:4f:37:5e:5e:f5:fd:16:cb:28:04:f9:
         f3:62:c9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:55 2024 by rpki-client on console-ams.rpki-client.org