Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/c4wtuowFKOmJGCnYFXMGGENUO1Q.roa
File:                     c4wtuowFKOmJGCnYFXMGGENUO1Q.roa (raw, json)
Hash identifier:          u+LByn/YIga9l3fGuc25e/gUmGB8f/dsf+GCQs8rz6k=
Subject key identifier:   73:8C:2D:BA:8C:05:28:E9:89:18:29:D8:15:73:06:18:43:54:3B:54
Certificate issuer:       /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial:       0185707076C954AC714DA185660AB6843512
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/c4wtuowFKOmJGCnYFXMGGENUO1Q.roa
Signing time:             Mon 02 Jan 2023 03:04:56 +0000
ROA not before:           Mon 02 Jan 2023 03:04:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14445
IP address blocks:        87.254.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 29 Apr 2023 20:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:70:76:c9:54:ac:71:4d:a1:85:66:0a:b6:84:35:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
        Validity
            Not Before: Jan  2 03:04:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=738c2dba8c0528e9891829d81573061843543b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d9:23:25:8b:67:d6:13:d1:0e:81:47:46:f8:
                    4a:2d:18:55:ad:20:01:90:d5:4d:ce:04:33:5f:b6:
                    fb:d5:0c:be:be:44:e1:14:dc:d6:b0:03:94:41:89:
                    56:0f:b6:ea:0c:2b:0b:a5:3c:05:01:c6:0d:9b:f2:
                    c1:7f:12:bc:73:64:c8:b9:71:05:e9:25:ba:e6:2e:
                    88:7d:12:f5:51:09:35:25:c2:fe:a0:f5:07:3b:79:
                    24:c9:9e:ca:b5:68:2e:b9:0d:18:fd:15:d1:b4:42:
                    5f:f3:a1:2b:4f:b6:5e:74:b9:7e:3d:b7:f1:14:b5:
                    4f:20:8d:c9:23:94:21:56:c4:6d:63:2e:9b:bb:13:
                    09:ef:b5:16:0d:9b:13:e7:5e:26:fe:72:32:38:57:
                    2b:eb:0d:41:7f:1a:37:fa:9e:52:ac:3c:d5:62:5f:
                    60:6a:e6:95:06:1a:75:06:37:6b:df:d0:bc:0f:e4:
                    77:41:f1:90:88:6b:c2:55:cd:f3:9d:9d:59:aa:77:
                    2a:ee:72:90:41:b1:ad:e4:9c:da:ee:cc:56:f0:5b:
                    85:39:5d:52:49:eb:da:44:08:27:3a:f7:1e:40:08:
                    a8:56:d0:7f:2d:25:5f:ca:b0:94:6e:bb:86:4a:62:
                    1a:3e:b3:8a:70:6b:f9:e1:91:09:6d:14:e6:70:51:
                    ae:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8C:2D:BA:8C:05:28:E9:89:18:29:D8:15:73:06:18:43:54:3B:54
            X509v3 Authority Key Identifier:
                keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/c4wtuowFKOmJGCnYFXMGGENUO1Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.254.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:0f:7d:96:b5:8f:1d:74:39:e1:2d:ae:88:e4:df:21:c0:12:
         93:6f:01:8d:f2:8c:93:e6:c3:a8:c2:2c:f3:33:54:2d:c9:60:
         c7:fb:47:35:52:ea:fb:75:6d:84:db:5c:82:8d:f2:39:cd:db:
         b2:7a:3d:52:b2:12:43:32:04:d8:40:cf:ba:e2:94:6d:64:7c:
         b2:63:19:41:dd:78:82:82:d1:55:b4:88:b7:f1:c0:13:e3:c0:
         26:ae:10:2f:ef:97:b4:52:dd:61:bf:ae:4f:4a:3d:5c:1e:56:
         2c:07:93:de:9e:16:79:8b:03:29:85:cb:00:cc:f5:21:db:99:
         fc:05:7c:5d:53:28:a1:2c:7a:ef:3c:79:46:bb:3e:97:97:10:
         ac:e8:19:db:55:3f:a6:17:77:67:a8:bb:3a:c7:c0:02:00:23:
         a1:1c:66:e3:24:6f:3f:ea:77:52:e1:cf:c5:17:e3:34:ff:9d:
         5e:be:dd:0e:27:57:01:41:4b:59:58:2d:90:60:c0:23:1b:ef:
         e0:22:95:ce:cf:43:6c:19:2b:33:bb:68:42:54:21:12:b2:8f:
         a0:b2:7c:e7:1c:b4:41:8e:4b:e7:fa:64:c0:e3:95:cf:0d:a5:
         08:b5:d5:fc:97:e0:d1:e9:f7:23:eb:fa:10:e0:1f:db:eb:73:
         a3:61:ea:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:22 2024 by rpki-client on console-ams.rpki-client.org