Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/jcQRF96z3yM1H3oCEFYy2O04Ujg.roa
File:                     jcQRF96z3yM1H3oCEFYy2O04Ujg.roa (raw, json)
Hash identifier:          nYi6xSolWL6IIbMfSTcvVL2//01bLzH561XICAyk6+c=
Subject key identifier:   8D:C4:11:17:DE:B3:DF:23:35:1F:7A:02:10:56:32:D8:ED:38:52:38
Certificate issuer:       /CN=984133b31d96b27c1af818114b169c9a5745e094
Certificate serial:       01856F824F604D8E1470E350AADBC8AFE75C
Authority key identifier: 98:41:33:B3:1D:96:B2:7C:1A:F8:18:11:4B:16:9C:9A:57:45:E0:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/jcQRF96z3yM1H3oCEFYy2O04Ujg.roa
Signing time:             Sun 01 Jan 2023 22:44:49 +0000
ROA not before:           Sun 01 Jan 2023 22:44:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198991
IP address blocks:        176.122.32.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:82:4f:60:4d:8e:14:70:e3:50:aa:db:c8:af:e7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984133b31d96b27c1af818114b169c9a5745e094
        Validity
            Not Before: Jan  1 22:44:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8dc41117deb3df23351f7a02105632d8ed385238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ea:6d:f0:7c:2c:f0:27:f7:77:20:44:a1:e5:
                    1f:22:ee:89:76:de:aa:d6:60:bd:97:2d:1a:f2:80:
                    ec:9a:13:a6:59:42:b6:ec:de:f4:6d:c6:fe:43:c2:
                    e6:ca:21:1d:7f:37:1d:fc:c5:ae:1a:be:46:ab:16:
                    49:c7:1d:4c:4d:a0:c6:c8:94:3a:bf:7d:7a:51:42:
                    be:6b:15:7a:8b:6b:8c:d8:61:5c:c2:b7:00:e0:5a:
                    c2:12:c7:68:2f:f4:da:c7:b8:27:c0:be:d6:cb:bf:
                    2e:09:ba:90:b7:d0:fc:8d:9d:cc:d6:cc:a7:c7:49:
                    b1:a0:6a:d1:51:02:69:a8:4b:6b:56:30:e3:93:e7:
                    6c:dc:fa:13:d6:dd:13:38:af:b9:50:11:63:b7:44:
                    de:97:ab:ef:cf:58:db:e0:88:7f:48:aa:28:46:83:
                    ce:7e:85:b6:03:51:08:66:57:a7:c6:68:f9:13:79:
                    df:09:68:35:b6:0a:89:60:d4:16:7f:f1:b8:64:93:
                    cc:02:2b:e0:5a:51:0d:12:71:97:53:35:47:72:32:
                    3a:10:97:b6:40:b3:61:af:a9:1d:af:b7:00:62:2a:
                    73:f8:69:6a:f3:bb:90:c5:bd:4b:63:e0:44:1f:bd:
                    1d:35:4d:20:0d:19:d3:28:39:ab:ca:d1:59:d9:30:
                    4b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C4:11:17:DE:B3:DF:23:35:1F:7A:02:10:56:32:D8:ED:38:52:38
            X509v3 Authority Key Identifier:
                keyid:98:41:33:B3:1D:96:B2:7C:1A:F8:18:11:4B:16:9C:9A:57:45:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/jcQRF96z3yM1H3oCEFYy2O04Ujg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.122.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:65:11:b9:e8:65:6a:9e:12:27:1c:a0:d1:1e:da:de:0e:45:
         cd:1b:cc:b4:14:0b:b2:18:ce:e4:bd:80:0b:38:9d:d8:47:ce:
         a5:8d:23:81:23:1b:50:de:b4:ac:11:9a:57:fd:8a:a3:3c:19:
         b1:27:93:b2:5c:d3:a2:38:61:90:de:df:67:c1:5c:1b:51:7d:
         bd:fa:58:3b:85:8a:63:bf:f3:5f:55:97:32:00:37:4a:6c:60:
         a7:1f:90:45:35:db:b0:34:4b:dd:85:0d:79:f5:eb:57:69:80:
         20:fb:17:2d:84:a6:ed:38:ca:f8:6a:9d:45:4d:7c:9a:56:11:
         f8:0e:e7:48:ad:85:f9:67:2f:c7:3b:2b:d1:18:87:b4:5b:45:
         f4:b3:0d:9c:1d:57:0f:e9:cc:45:bd:9b:a1:16:07:f4:30:07:
         30:58:cf:9e:52:ee:06:40:f8:d7:55:59:a9:9a:2e:ac:6f:0d:
         5d:0c:f3:2d:85:df:1b:e9:e0:c4:d6:bb:b9:d6:6f:06:90:b3:
         21:2a:36:2e:3b:40:f3:60:01:dc:56:5c:b4:68:d1:63:e7:d6:
         c2:f2:4d:5c:58:5c:ca:cb:5e:76:1a:b5:b9:51:64:47:ca:f6:
         f8:26:81:45:9d:4b:84:a4:54:af:e1:7a:6d:7b:48:19:95:bf:
         f1:02:08:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:26 2024 by rpki-client on console-ams.rpki-client.org