Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e6b238-5355-40f0-be87-497fd6506ae5/1/FlJEtseN5YqpyRTYDloASTkE8xk.roa
File:                     FlJEtseN5YqpyRTYDloASTkE8xk.roa (raw, json)
Hash identifier:          2SCuj+BLdGGUNFMgExM4Hng3LCEodIdt1KEhP1kJe2Q=
Subject key identifier:   16:52:44:B6:C7:8D:E5:8A:A9:C9:14:D8:0E:5A:00:49:39:04:F3:19
Certificate issuer:       /CN=4a13b7758676de2ef127cc7750ee76c5a8341d78
Certificate serial:       018571B0AF1998BE0E6999A24B631CE43525
Authority key identifier: 4A:13:B7:75:86:76:DE:2E:F1:27:CC:77:50:EE:76:C5:A8:34:1D:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ShO3dYZ23i7xJ8x3UO52xag0HXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/e6b238-5355-40f0-be87-497fd6506ae5/1/FlJEtseN5YqpyRTYDloASTkE8xk.roa
Signing time:             Mon 02 Jan 2023 08:54:42 +0000
ROA not before:           Mon 02 Jan 2023 08:54:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1213
IP address blocks:        194.26.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:b0:af:19:98:be:0e:69:99:a2:4b:63:1c:e4:35:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a13b7758676de2ef127cc7750ee76c5a8341d78
        Validity
            Not Before: Jan  2 08:54:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=165244b6c78de58aa9c914d80e5a00493904f319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c8:29:4f:a2:48:0c:4c:d3:1c:09:7d:28:2b:
                    d8:2f:90:94:93:95:af:f9:7b:7a:16:ce:e9:8c:8c:
                    42:60:26:06:be:ec:01:21:67:78:89:60:4d:04:b8:
                    e7:f6:b0:35:79:4c:2a:ca:ab:42:71:bd:8a:c1:06:
                    25:e3:56:47:cc:17:1f:3f:c1:88:98:24:f2:96:f9:
                    4b:cc:88:59:7a:c4:c1:33:d1:d8:d8:f3:f0:2f:2c:
                    53:ec:5d:21:df:b0:1a:55:17:12:7e:d0:fa:27:aa:
                    4b:5e:fa:de:0f:77:c9:14:52:59:25:04:d2:49:47:
                    23:32:2a:e1:f2:46:83:ae:5b:1f:08:d2:26:e6:20:
                    d9:99:fe:d2:45:26:b8:9e:6f:e2:11:09:3e:f3:74:
                    e4:bc:56:3b:ed:bc:ef:ef:2d:a7:05:38:22:f6:9a:
                    fa:ba:3a:d5:17:4a:92:2d:be:97:24:ee:b6:48:cc:
                    07:02:8f:6a:0e:4a:ed:95:ee:fd:a2:7b:33:71:03:
                    3f:1e:2d:cd:29:ec:0d:68:1b:19:cc:0d:8b:b0:29:
                    c0:32:6d:49:7b:f3:74:34:aa:ab:cb:e7:0b:02:0b:
                    c7:5a:32:89:e7:7e:bb:24:21:6d:c1:3a:87:75:db:
                    92:d2:9d:24:10:80:5f:ee:3b:36:02:4e:ba:42:0e:
                    62:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:52:44:B6:C7:8D:E5:8A:A9:C9:14:D8:0E:5A:00:49:39:04:F3:19
            X509v3 Authority Key Identifier:
                keyid:4A:13:B7:75:86:76:DE:2E:F1:27:CC:77:50:EE:76:C5:A8:34:1D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ShO3dYZ23i7xJ8x3UO52xag0HXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e6b238-5355-40f0-be87-497fd6506ae5/1/FlJEtseN5YqpyRTYDloASTkE8xk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e6b238-5355-40f0-be87-497fd6506ae5/1/ShO3dYZ23i7xJ8x3UO52xag0HXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:ff:33:2d:db:02:73:7d:6c:c5:27:78:97:77:d6:90:f7:51:
         99:41:9e:78:3c:04:fa:f8:56:93:c0:2a:e1:b5:39:a7:b5:28:
         7e:88:29:1b:63:7f:fa:6f:c4:0b:5c:17:39:27:0b:9e:91:32:
         da:d0:aa:d5:fd:d1:ed:8d:25:c6:4e:ec:f5:4c:d7:62:a3:ff:
         0f:fc:19:04:0d:94:d4:54:c5:de:5d:57:81:16:5e:8e:e0:fd:
         75:8d:a9:ac:f4:51:f9:09:ca:0e:7f:a3:b9:5c:be:1c:3f:23:
         69:50:ff:44:83:bd:8f:39:51:d6:28:74:8d:89:8f:24:3d:b5:
         79:81:c4:52:1f:ab:42:4d:8d:57:9e:48:1c:95:16:3e:a3:ab:
         dc:1a:e8:e3:9d:3e:af:3e:0e:07:9e:9a:8a:bb:c1:f4:34:02:
         d6:2f:ca:e8:79:37:e3:30:19:2c:0f:87:70:fc:f0:e9:9a:95:
         76:a4:65:cd:61:c4:ee:80:0f:f2:43:c3:ee:76:16:93:42:69:
         76:42:3e:60:6a:b6:13:2d:c1:28:a3:53:c2:16:5e:3f:96:3e:
         39:ae:0c:2b:e9:84:a8:bd:86:da:6e:9d:a1:27:c0:41:a6:c8:
         e7:ab:be:cc:04:b8:de:9c:ed:f4:45:0b:a3:af:f5:7a:73:e4:
         b0:bb:57:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:30 2024 by rpki-client on console-ams.rpki-client.org