Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/ZQBZ_F1EiJgxLg77WCk9HFYd8Zo.roa
File:                     ZQBZ_F1EiJgxLg77WCk9HFYd8Zo.roa (raw, json)
Hash identifier:          WkPn/6tmGHPraZ2jX5ceL88Dwv4gnSfLAUMJg9CvjLs=
Subject key identifier:   65:00:59:FC:5D:44:88:98:31:2E:0E:FB:58:29:3D:1C:56:1D:F1:9A
Certificate issuer:       /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial:       018C3F596F07FD392681E4A6EB7EE44A58B2
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/ZQBZ_F1EiJgxLg77WCk9HFYd8Zo.roa
Signing time:             Wed 06 Dec 2023 13:37:54 +0000
ROA not before:           Wed 06 Dec 2023 13:37:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212477
IP address blocks:        37.16.74.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:3f:59:6f:07:fd:39:26:81:e4:a6:eb:7e:e4:4a:58:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
        Validity
            Not Before: Dec  6 13:37:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=650059fc5d448898312e0efb58293d1c561df19a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:df:43:4c:0d:1f:e1:e1:ff:69:38:0c:ec:c5:
                    e4:4d:44:39:3a:ce:f2:46:06:f5:82:ec:07:71:92:
                    64:3d:09:27:12:18:ff:79:f1:40:5a:9e:09:a8:dc:
                    8b:43:70:18:1f:09:80:77:4e:82:e0:32:ef:f6:db:
                    0d:0f:0c:e7:e4:b0:1c:69:ea:c3:2f:bd:e7:77:6e:
                    cb:41:f6:76:77:12:5f:a0:e0:42:76:83:0c:95:c1:
                    c6:d1:0a:5e:bb:2a:f9:70:d1:d0:08:47:a7:11:bc:
                    31:68:cb:43:a4:fd:17:a4:87:f9:ec:d9:63:ef:b2:
                    11:4b:94:50:6f:1c:84:72:d5:35:59:eb:6d:95:e6:
                    d9:be:bc:b1:d9:ef:6c:78:06:06:53:20:94:a7:ff:
                    d2:a2:75:49:90:4d:39:08:a0:11:f9:2a:83:bf:e0:
                    d3:b9:20:11:03:58:5a:ba:4a:26:f5:36:cf:9a:42:
                    c2:c4:a4:38:75:5d:39:7c:9e:ac:52:71:8d:47:fb:
                    4a:92:14:ec:55:44:0b:a8:48:6e:a3:0b:91:a0:37:
                    ef:ff:d5:26:45:b4:25:b3:1a:db:5a:6f:0a:a9:a9:
                    c2:26:05:1a:ca:05:e9:9e:04:be:03:d7:6c:40:f1:
                    a8:bc:c7:aa:bb:54:14:c9:17:b6:6c:56:f4:c3:6c:
                    da:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:00:59:FC:5D:44:88:98:31:2E:0E:FB:58:29:3D:1C:56:1D:F1:9A
            X509v3 Authority Key Identifier:
                keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/ZQBZ_F1EiJgxLg77WCk9HFYd8Zo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.16.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:a7:6c:40:9b:bf:45:be:07:fd:8a:11:36:93:cf:d6:80:cc:
         6e:06:57:3c:f7:34:a4:e0:ec:36:a4:5c:75:26:b4:9d:97:66:
         69:37:53:90:2b:ba:89:1e:5a:a0:30:b4:97:cf:bd:0b:bf:4f:
         01:e3:68:da:1c:74:4c:87:76:fb:aa:3d:ce:c7:e3:06:ed:9a:
         6a:f9:8b:a3:4a:b3:df:3c:27:46:00:43:33:a3:f2:7f:7c:c9:
         19:84:0c:aa:fb:80:00:db:ed:03:db:c3:bf:59:ec:d4:5b:4a:
         c2:98:68:a2:a7:4a:ac:ca:12:97:ca:50:74:48:58:72:c1:4a:
         79:d8:56:88:bd:a6:25:da:95:71:88:ea:a0:56:78:d9:8c:dc:
         af:92:df:95:3b:cb:78:46:16:17:ce:89:9c:40:ee:66:74:37:
         b3:50:43:96:f4:6d:b4:df:b4:4f:25:dd:51:f9:29:f7:77:25:
         d0:cb:15:f2:d0:e6:9f:b2:88:62:aa:6f:1f:fa:78:ae:79:0a:
         49:21:e4:f0:53:2f:f3:89:48:61:f8:b4:f1:66:00:e2:32:ea:
         ff:40:fa:ac:6c:3e:8b:16:11:ff:91:b0:99:3a:8d:5d:09:38:
         59:12:68:d1:71:e4:ab:14:50:c2:ca:0e:80:6a:f4:2d:33:84:
         e9:d3:bb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:49 2024 by rpki-client on console-fra.rpki-client.org