Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/V4UxC8wTaww_mB-ZIiY_XwGUIpI.roa
File:                     V4UxC8wTaww_mB-ZIiY_XwGUIpI.roa (raw, json)
Hash identifier:          ah93ndQYOXJEuPASmpelZuhup3y3OIRtHx0858Qo2Gg=
Subject key identifier:   57:85:31:0B:CC:13:6B:0C:3F:98:1F:99:22:26:3F:5F:01:94:22:92
Certificate issuer:       /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial:       01906140DC0A889D7F54EF1AB4CECEFE5A15
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/V4UxC8wTaww_mB-ZIiY_XwGUIpI.roa
Signing time:             Fri 28 Jun 2024 23:49:18 +0000
ROA not before:           Fri 28 Jun 2024 23:49:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     20473
IP address blocks:        212.81.44.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 29 Jul 2024 07:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:61:40:dc:0a:88:9d:7f:54:ef:1a:b4:ce:ce:fe:5a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
        Validity
            Not Before: Jun 28 23:49:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5785310bcc136b0c3f981f9922263f5f01942292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:59:f4:29:7d:ff:5e:16:25:a9:c6:d9:60:a0:
                    53:55:08:7c:54:ac:e3:64:9c:b3:ac:ad:20:ec:2c:
                    22:62:7c:2e:08:89:d2:76:88:6d:95:4d:b0:2a:73:
                    33:b9:96:8d:ec:fc:4d:8d:ee:81:6a:10:1d:b2:30:
                    f2:53:7b:22:8e:87:76:f6:0f:7a:35:cc:7d:63:92:
                    80:04:cd:1e:92:0a:75:ab:77:f6:9d:61:b8:c8:38:
                    97:d7:a7:8d:f8:f4:e5:4e:bf:ae:13:77:ef:19:0e:
                    a9:40:9e:2e:38:a9:90:6b:86:f8:92:61:a2:27:75:
                    93:89:bf:7b:75:91:9b:26:ac:90:1b:83:64:ab:e3:
                    71:39:68:d2:4e:c8:23:23:ab:2b:63:cc:49:c1:09:
                    2a:80:fa:ca:c1:d0:55:63:43:54:e2:29:62:c1:f5:
                    a5:99:cb:16:4b:aa:4a:07:eb:13:61:d0:f6:df:ba:
                    fb:06:ee:30:18:00:49:16:a7:a3:c1:17:a2:51:68:
                    f5:74:c8:65:93:37:70:38:b5:c8:2d:7a:d7:7c:23:
                    ea:d1:f7:24:98:af:cf:0f:0d:7f:28:47:a2:13:bc:
                    c9:a8:46:51:ad:9e:81:19:98:12:8f:19:db:7a:0a:
                    c6:7a:ff:a4:5d:86:87:00:1e:cf:62:69:ae:ad:1a:
                    ce:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:85:31:0B:CC:13:6B:0C:3F:98:1F:99:22:26:3F:5F:01:94:22:92
            X509v3 Authority Key Identifier:
                keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/V4UxC8wTaww_mB-ZIiY_XwGUIpI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.81.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:ec:f3:cd:76:33:a5:dc:c7:b6:80:96:6b:2c:65:43:53:07:
         ed:78:ca:02:be:b1:1f:6f:cd:44:75:b9:04:a8:e0:84:90:b5:
         de:fd:ce:f6:3b:47:3e:06:83:db:87:07:af:bc:58:11:3f:c3:
         c1:f3:47:82:7e:a5:52:0b:9c:dd:57:c2:69:45:4a:5c:e5:13:
         b1:79:56:a7:fc:0f:f0:a0:79:fb:a2:07:d1:70:2b:af:7b:e7:
         15:cd:a8:30:98:75:62:eb:11:0c:d0:93:66:58:86:48:4d:cf:
         df:4b:6d:c0:b2:12:c4:4b:ed:e7:85:87:f1:95:79:de:94:e5:
         43:16:06:fa:7f:07:c3:c8:69:7d:8c:b6:3c:2a:84:e8:6e:4f:
         9b:91:6a:6d:4a:1e:f7:25:86:05:26:63:43:a7:46:f7:57:ec:
         3d:c1:76:c3:44:2d:99:59:96:03:ab:87:39:97:44:e4:1b:21:
         f4:3d:bf:bd:99:46:c6:fb:c8:0b:e9:5e:3f:cb:db:f0:05:55:
         48:3e:92:f9:60:c0:18:36:12:91:3a:d9:a2:dc:9a:c2:7b:cb:
         ca:cc:d7:f0:fb:65:36:fc:6d:53:1f:be:9c:29:3e:09:1e:57:
         dc:1a:88:20:61:94:94:a3:a7:fe:39:dd:38:c8:95:68:66:a3:
         9d:70:88:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 10:02:43 2024 by rpki-client on console-fra.rpki-client.org