Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/JgEIWC9U0u-HinVAFZ6922YcTag.roa
File:                     JgEIWC9U0u-HinVAFZ6922YcTag.roa (raw, json)
Hash identifier:          4z2VbN7PHJp7J5foMGKY73xKm18P+MtfDvlc8L9WfQY=
Subject key identifier:   26:01:08:58:2F:54:D2:EF:87:8A:75:40:15:9E:BD:DB:66:1C:4D:A8
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       0185E7C7400BF7228714903840512B4CD741
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/JgEIWC9U0u-HinVAFZ6922YcTag.roa
Signing time:             Wed 25 Jan 2023 07:14:33 +0000
ROA not before:           Wed 25 Jan 2023 07:14:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3320
IP address blocks:        88.151.61.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 16 Feb 2023 08:56:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e7:c7:40:0b:f7:22:87:14:90:38:40:51:2b:4c:d7:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: Jan 25 07:14:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=260108582f54d2ef878a7540159ebddb661c4da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:86:60:3e:93:d0:9d:af:16:10:97:ee:f0:c2:
                    9d:df:00:72:0b:cb:e8:2e:72:26:58:68:27:56:52:
                    d9:c1:96:8f:3b:6b:92:f5:3c:4c:20:2d:5a:6b:2a:
                    6f:99:3c:03:41:e0:0e:06:44:cc:d0:8a:b3:08:a8:
                    aa:cb:70:87:9e:ec:6b:4e:a4:56:04:3f:fa:9a:d3:
                    43:53:12:79:b3:c0:ce:9e:49:d4:5d:de:22:7f:56:
                    05:1b:d6:49:d6:3c:15:c1:50:11:c9:d8:0b:d5:41:
                    b9:c0:eb:a8:2d:7a:92:01:a5:40:77:fb:1e:c2:63:
                    18:3a:94:bb:44:a9:12:fe:30:fb:78:b4:03:e3:f2:
                    07:2f:cf:9e:94:1f:63:25:75:80:af:28:1b:0f:0a:
                    d6:b5:aa:77:06:4c:70:c4:78:3b:17:6a:71:67:e4:
                    76:20:61:3d:b9:07:22:70:b1:f2:43:17:ce:ab:db:
                    a3:67:70:5e:1e:db:c9:ed:b7:38:c3:ca:b0:a4:11:
                    e7:44:9c:65:6a:54:bb:55:37:0d:a2:dc:df:56:43:
                    cd:ba:eb:04:88:29:25:c0:ca:19:6b:e9:97:4e:3e:
                    cd:6c:80:bf:c1:5b:33:a2:86:a1:b2:df:02:8a:e0:
                    7b:76:a8:4e:56:66:55:f9:a6:f8:01:cc:ea:ad:60:
                    61:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:01:08:58:2F:54:D2:EF:87:8A:75:40:15:9E:BD:DB:66:1C:4D:A8
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/JgEIWC9U0u-HinVAFZ6922YcTag.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.151.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:8a:83:dd:db:ca:46:ff:86:39:42:dc:0f:1a:89:c3:e4:8a:
         3d:82:84:1f:dc:87:91:b8:16:d4:15:6f:94:38:8a:65:dc:c4:
         17:8b:ca:97:40:7a:2f:4d:8a:f5:ae:6f:73:be:95:25:ec:be:
         57:68:75:84:ac:11:d1:83:50:88:d7:b0:93:77:fb:4a:3f:fa:
         63:2f:01:90:78:1b:83:c8:20:11:ae:4b:bc:6c:c2:19:e8:34:
         a4:d3:27:20:b1:c6:90:d7:be:66:8b:15:62:61:70:98:dd:c3:
         9c:fd:3f:f6:31:91:df:af:0a:b9:65:83:58:cb:63:56:a7:49:
         26:71:26:a3:50:ee:eb:7a:9a:43:8b:74:8b:8a:e6:a3:b4:37:
         7f:8f:57:cf:2d:86:2d:d8:4e:e3:54:fd:df:13:59:53:52:b9:
         91:58:40:d8:33:97:3f:e7:82:8e:e8:50:2d:4e:a6:0a:10:39:
         e3:61:dc:f3:45:bb:d3:b3:3e:01:3a:5e:17:ad:c0:cb:26:8a:
         8f:ca:dd:cf:e5:a5:ea:ff:9b:59:90:72:9b:3b:7f:26:c4:cc:
         32:3c:d2:46:ea:ad:d5:01:ef:23:58:9c:02:f7:de:5e:43:59:
         d6:32:41:c9:62:48:83:03:51:55:a6:46:6c:48:bc:70:44:d7:
         d3:ab:82:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:55 2024 by rpki-client on console-ams.rpki-client.org