Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/V7JiX7HSRhY1WkpXG8M6p_dMBzY.roa
File:                     V7JiX7HSRhY1WkpXG8M6p_dMBzY.roa (raw, json)
Hash identifier:          v8AEdBNlbaoBLYYQdQv8WPDVeJaKOHYwLmZM6WR82PE=
Subject key identifier:   57:B2:62:5F:B1:D2:46:16:35:5A:4A:57:1B:C3:3A:A7:F7:4C:07:36
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       0187FF8BDF61E0A111E6139D66693028ABAD
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/V7JiX7HSRhY1WkpXG8M6p_dMBzY.roa
Signing time:             Tue 09 May 2023 08:06:09 +0000
ROA not before:           Tue 09 May 2023 08:06:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44547
IP address blocks:        88.151.56.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 09 Jun 2023 07:48:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:ff:8b:df:61:e0:a1:11:e6:13:9d:66:69:30:28:ab:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: May  9 08:06:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=57b2625fb1d24616355a4a571bc33aa7f74c0736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1f:24:fa:d6:59:a8:dc:54:30:fd:8a:75:e1:
                    02:b0:42:ea:93:a7:f7:f8:29:9c:75:58:e6:cc:12:
                    db:04:b0:0e:00:16:61:66:4d:16:6b:bf:f4:df:ca:
                    56:bb:5d:d8:57:e2:61:bf:2e:f9:8f:00:6d:8c:5a:
                    26:84:af:45:0c:79:8e:8b:8e:4b:3e:c7:c2:b1:15:
                    82:fe:c2:01:50:bd:73:9b:00:d9:c4:f1:3a:38:68:
                    ff:6f:c6:47:d2:4a:94:6f:bb:59:f2:d9:6d:be:8e:
                    1e:03:c2:06:17:ce:56:d1:5c:12:b1:dd:b6:ef:2f:
                    92:e3:a8:a3:86:0a:9c:af:99:c9:78:e6:16:17:cc:
                    51:fd:bf:8e:17:d6:cc:42:10:0a:75:e3:85:98:69:
                    d3:e4:8d:57:52:24:a4:68:45:0a:a2:33:01:7d:c1:
                    05:4f:f9:e2:25:33:b4:47:a9:d1:52:ab:0b:df:0f:
                    32:68:30:0d:e2:3a:29:dd:ed:05:34:14:38:a4:34:
                    e3:3a:de:13:11:a2:ec:ea:8d:eb:b2:4f:1e:87:0f:
                    e6:ad:26:af:83:fd:72:c1:e0:6e:79:47:46:c0:8a:
                    78:bc:19:e1:17:18:db:86:fa:01:26:e0:8f:13:b8:
                    ea:59:80:34:b1:fd:5b:1c:a7:15:2e:69:15:6a:a9:
                    a9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B2:62:5F:B1:D2:46:16:35:5A:4A:57:1B:C3:3A:A7:F7:4C:07:36
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/V7JiX7HSRhY1WkpXG8M6p_dMBzY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.151.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:ca:88:af:9c:0a:99:6d:e8:08:ba:57:95:ff:b3:97:99:97:
         33:cd:64:80:10:43:49:dc:09:40:18:b7:51:7e:f5:d1:11:a8:
         3a:c7:9c:8a:16:32:c8:47:c5:5b:7e:ac:fe:ca:99:0a:1c:b8:
         b2:71:97:fd:26:d2:c8:bb:cc:fd:0b:7c:2e:91:a9:3e:7c:67:
         12:e4:f4:12:60:9f:25:7a:ba:9f:b1:df:24:ea:70:10:bc:f5:
         59:57:17:33:7c:96:69:ec:b6:8f:6d:e8:53:8d:f8:27:da:0a:
         31:9b:95:1b:dc:a6:0d:89:bd:f3:39:8f:71:ae:c4:b1:ed:d8:
         b9:32:32:fa:ca:43:7b:81:b8:10:90:d7:ec:57:1a:5a:8d:c5:
         46:21:c7:62:12:fa:45:db:82:9f:a8:16:55:a7:72:90:83:99:
         5e:85:3e:e7:07:35:03:ca:6d:01:c5:61:d7:b2:99:c6:9a:8a:
         bf:91:ec:7b:63:80:52:c6:87:0d:d7:99:01:3e:3c:82:1e:04:
         16:09:db:88:85:0a:32:a7:1a:9a:8f:b7:2b:ed:e3:90:68:a5:
         2d:61:75:1a:a4:3d:2e:de:39:81:45:a8:88:5e:ec:41:50:b7:
         c4:89:4b:d6:d7:a2:07:60:8c:ea:68:ac:3e:ec:ff:33:5f:41:
         cd:02:e4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org