Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/vN_THITiffWzrQ28p7un_yY_pSk.roa
File:                     vN_THITiffWzrQ28p7un_yY_pSk.roa (raw, json)
Hash identifier:          7Yik/nyD5/LvaX6x7iwERCJy8NMCXXqG2esj90Kaxag=
Subject key identifier:   BC:DF:D3:1C:84:E2:7D:F5:B3:AD:0D:BC:A7:BB:A7:FF:26:3F:A5:29
Certificate issuer:       /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial:       01892B0E9788E18FBDA85D0085B95B11EBC7
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/vN_THITiffWzrQ28p7un_yY_pSk.roa
Signing time:             Thu 06 Jul 2023 11:55:23 +0000
ROA not before:           Thu 06 Jul 2023 11:55:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        185.64.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:2b:0e:97:88:e1:8f:bd:a8:5d:00:85:b9:5b:11:eb:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
        Validity
            Not Before: Jul  6 11:55:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bcdfd31c84e27df5b3ad0dbca7bba7ff263fa529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:41:f6:f4:63:ee:72:b9:55:03:5a:34:80:ec:
                    3f:66:28:02:b4:cd:68:5b:4f:a1:04:08:ef:30:9e:
                    5f:25:6e:16:fe:67:4b:2c:b6:31:55:89:d2:60:61:
                    a4:e6:54:8d:81:e8:1e:e9:dd:31:41:0b:21:ad:00:
                    8f:d2:14:65:03:27:20:5b:95:66:38:1e:37:8d:62:
                    3b:69:91:c0:8d:17:9e:31:08:7f:31:55:f2:51:71:
                    7c:f3:21:45:c6:c6:cf:73:7b:8f:74:e8:43:8f:3b:
                    fb:76:00:49:e7:6d:70:d5:8c:d1:f0:57:af:8e:40:
                    28:7c:70:6f:0e:a5:d2:4f:cf:86:c9:be:49:6d:25:
                    39:b6:25:da:15:21:00:31:8c:14:1d:d1:63:63:e4:
                    73:87:85:7a:bb:1e:4f:4d:e8:0a:bb:23:6d:fe:82:
                    e7:34:5e:51:a3:6a:bb:9d:7a:19:2e:64:cc:6a:5b:
                    2f:c3:f2:0b:e3:a8:f4:d5:2c:00:22:9a:e8:99:19:
                    c9:26:d5:f6:71:0b:8f:e6:8e:a3:b0:a1:3c:9f:eb:
                    bd:36:6b:57:42:e4:d8:1f:08:28:99:0a:28:b7:92:
                    84:6c:c7:f5:d8:10:b0:98:08:15:d4:4b:49:7e:b9:
                    49:47:ee:87:5a:aa:88:50:65:cc:ab:05:1d:9b:a8:
                    62:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DF:D3:1C:84:E2:7D:F5:B3:AD:0D:BC:A7:BB:A7:FF:26:3F:A5:29
            X509v3 Authority Key Identifier:
                keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/vN_THITiffWzrQ28p7un_yY_pSk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.64.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:57:cb:06:75:4b:20:96:fa:76:dd:73:0b:ee:2f:c7:30:b1:
         4d:a4:7a:b9:55:d6:9b:b6:f8:98:01:7e:32:6c:74:84:64:4f:
         ab:ce:90:17:cc:25:7b:ea:a0:50:b1:4c:db:48:bc:48:56:ec:
         b3:8d:63:0b:50:86:c3:04:f7:6e:f5:2d:54:42:7b:49:46:25:
         b5:d5:2c:1c:d7:5b:05:a2:f3:ed:eb:95:32:8f:a4:f0:c1:75:
         f2:26:2d:3c:5a:39:0b:b3:55:a6:7b:4d:0c:bf:62:3a:46:f4:
         ed:b8:22:09:65:0f:8c:90:2f:dc:78:96:05:20:f6:9c:3f:ba:
         d8:1f:2b:23:55:a7:ce:d4:ec:ee:c0:74:a4:22:d4:f6:25:e0:
         18:c7:8d:84:03:14:62:97:28:ce:9e:f1:51:91:57:40:ca:12:
         a1:c9:9e:7c:c4:07:e4:40:ad:32:cf:48:a1:72:5c:6f:d4:f1:
         eb:4d:2e:76:47:21:c9:ee:6a:db:92:73:a8:8d:c0:c7:d5:20:
         a3:95:b2:d1:0b:b1:6c:08:70:de:7f:a7:10:fb:79:57:48:e3:
         d4:53:2c:7c:1d:b2:be:d1:45:ba:67:93:c1:bb:cc:0d:7a:02:
         bc:15:a9:a4:15:61:45:6d:e3:c7:73:d9:d7:04:c1:ba:23:cc:
         b3:e8:3a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:35 2024 by rpki-client on console-ams.rpki-client.org