Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/XxsxTDmz7bTSxE7pQfTt9PcrNw4.roa
File:                     XxsxTDmz7bTSxE7pQfTt9PcrNw4.roa (raw, json)
Hash identifier:          cfEuICO17LkGx89ZozuA7pvuhSX61B1NPSN57bdo4TY=
Subject key identifier:   5F:1B:31:4C:39:B3:ED:B4:D2:C4:4E:E9:41:F4:ED:F4:F7:2B:37:0E
Certificate issuer:       /CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Certificate serial:       0188059BB0668131B4073EA7397D0F2F1D08
Authority key identifier: 64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/XxsxTDmz7bTSxE7pQfTt9PcrNw4.roa
Signing time:             Wed 10 May 2023 12:21:09 +0000
ROA not before:           Wed 10 May 2023 12:21:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34273
IP address blocks:        193.138.200.0/22 maxlen: 22
                          46.17.192.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:05:9b:b0:66:81:31:b4:07:3e:a7:39:7d:0f:2f:1d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
        Validity
            Not Before: May 10 12:21:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5f1b314c39b3edb4d2c44ee941f4edf4f72b370e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4d:eb:f4:a8:4a:fd:29:3f:42:12:30:8c:92:
                    e8:6e:d4:fe:3e:4f:92:e9:b4:b0:9f:e0:ec:82:87:
                    18:e9:ca:4a:17:64:7a:e3:2b:6e:a8:d0:c8:1e:33:
                    24:0a:14:b4:7e:55:88:f7:e2:9b:b7:57:8d:83:e1:
                    11:b4:44:19:35:40:59:8d:e8:36:0b:cf:91:15:5c:
                    52:e6:b9:87:81:10:5a:9a:0c:88:7f:48:f7:62:81:
                    84:90:08:db:78:88:5e:e3:ad:06:0b:19:7d:e8:ec:
                    54:d6:be:a5:47:d8:41:59:56:81:ce:e2:bb:89:ef:
                    df:f7:eb:1f:ec:3d:cf:cb:0a:8c:cc:59:5d:3c:a4:
                    0a:c5:a8:64:19:e9:8e:87:60:65:36:83:7c:88:e9:
                    98:10:36:04:42:da:b2:a4:ec:8e:91:d3:7d:52:b4:
                    1e:86:5a:96:c5:23:f8:aa:21:b8:b0:ee:aa:3c:3c:
                    7e:58:ba:0a:3e:c7:c9:88:0d:80:b3:a1:60:e6:64:
                    e4:0d:be:64:e9:0b:46:2a:34:88:22:ee:68:a9:13:
                    d0:9e:ed:27:2e:d4:b7:e6:87:0e:fd:1f:c8:34:23:
                    34:6c:f0:11:88:66:9f:a7:e1:68:03:3f:a9:d0:09:
                    78:75:8c:df:77:5c:25:0d:a3:c1:bf:5f:79:42:14:
                    ea:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1B:31:4C:39:B3:ED:B4:D2:C4:4E:E9:41:F4:ED:F4:F7:2B:37:0E
            X509v3 Authority Key Identifier:
                keyid:64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/XxsxTDmz7bTSxE7pQfTt9PcrNw4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.17.192.0/21
                  193.138.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:d6:fd:eb:68:6d:61:bd:6f:22:fd:20:33:59:91:17:99:d9:
         cf:80:80:93:ec:be:dd:ad:17:b6:21:d1:c1:56:e0:cf:64:c0:
         70:90:b5:21:fb:68:4e:41:fb:ee:a8:ba:81:d8:e9:6b:54:fe:
         3a:57:2b:15:18:a7:2b:b6:dc:ca:a1:09:54:75:7a:d8:45:b5:
         23:01:fe:d4:43:e5:f5:09:43:38:fd:6b:8b:ea:53:75:50:43:
         f5:c9:d7:ea:cb:a8:3f:d1:56:e9:7d:e6:0f:61:8e:73:fa:9b:
         16:14:fd:f2:71:f7:91:05:ae:cd:fb:91:09:22:63:ee:f0:5f:
         73:2b:cc:18:a3:0b:f5:d5:0d:c2:b6:dd:81:12:37:7f:2a:71:
         f3:70:78:16:00:17:07:ae:f6:0c:f7:40:c2:ae:a2:a2:50:a9:
         8a:f2:b2:b7:55:19:f6:c0:07:30:49:35:96:2a:3a:47:ec:36:
         2c:fc:38:9e:37:b2:3d:1f:23:11:02:30:29:7d:bb:2e:41:a3:
         2c:a6:5d:8a:67:df:5e:20:41:50:00:59:23:a5:ba:51:f9:8a:
         f5:92:81:e4:63:33:78:95:ce:48:e1:ae:0b:e5:51:06:8b:1a:
         ee:b1:af:d0:48:b2:a3:01:48:34:1d:45:e4:65:8b:9c:c5:42:
         36:c7:22:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:57 2024 by rpki-client on console-ams.rpki-client.org