Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS263269.roa
File:                     AS263269.roa (raw, json)
Hash identifier:          W1FFGIfmhfFry1ZU8mHAyTUxdc3FsviooN8c/31UtCg=
Subject key identifier:   F4:EE:CD:F0:6B:92:37:42:66:05:40:83:7B:F9:44:87:11:C4:87:5A
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       74A2910C41242DF8F2BFEE8B9F89ECF703494EC4
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS263269.roa
Signing time:             Thu 08 Jun 2023 16:07:29 +0000
ROA not before:           Thu 08 Jun 2023 16:02:29 +0000
ROA not after:            Thu 06 Jun 2024 16:07:29 +0000
asID:                     263269
IP address blocks:        181.214.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 19 Jul 2023 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a2:91:0c:41:24:2d:f8:f2:bf:ee:8b:9f:89:ec:f7:03:49:4e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Jun  8 16:02:29 2023 GMT
            Not After : Jun  6 16:07:29 2024 GMT
        Subject: CN=F4EECDF06B923742660540837BF9448711C4875A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5e:22:21:f9:3c:7d:01:b0:a9:3f:db:e8:d1:
                    47:60:2b:80:d3:ad:40:f0:45:63:99:4a:c3:c9:65:
                    7e:b7:cc:e6:74:f5:8c:30:ac:1f:a2:98:4b:34:c4:
                    d3:0d:11:b9:fe:e5:1a:89:07:26:8c:ce:b2:52:2e:
                    13:b4:ce:0f:bd:ec:2a:f6:17:43:61:0b:92:7e:a7:
                    77:77:9b:35:03:b1:2e:2d:49:da:48:d5:2e:3d:89:
                    33:d3:72:25:8c:ed:2c:c4:18:3b:ed:6c:be:5c:9d:
                    3a:ee:5f:2f:db:6c:61:d3:e8:8f:52:07:dd:27:79:
                    99:5f:47:99:4d:de:97:2c:ea:17:0c:02:e4:7f:53:
                    e2:03:e6:ac:f6:ce:b2:b8:9b:17:58:cd:fa:f8:60:
                    bc:3c:2a:b0:71:c0:ff:b8:37:65:18:73:ba:e4:40:
                    4e:9a:56:a1:c1:63:c0:fd:57:30:cf:60:e4:23:7d:
                    5e:93:e5:83:d2:a2:90:65:62:2b:a9:29:d3:50:0f:
                    9c:50:9b:2d:d8:96:05:33:11:8c:2c:5d:af:ae:7d:
                    70:2a:01:00:b1:17:e3:2a:b9:d4:8e:61:b5:59:f4:
                    4a:dd:30:c1:89:b9:f8:86:bf:a6:a3:9b:cd:58:c1:
                    f3:fe:c0:28:7c:7a:1e:34:30:14:6b:da:b1:52:54:
                    6b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EE:CD:F0:6B:92:37:42:66:05:40:83:7B:F9:44:87:11:C4:87:5A
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS263269.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:46:d7:7e:c5:87:52:ee:1a:59:36:aa:5a:b2:2b:1b:03:76:
         06:49:a3:89:94:20:a3:c0:b5:53:98:6d:4c:39:8c:3d:cc:17:
         fb:09:ef:39:13:3b:38:c1:d3:ca:65:3f:9a:de:6f:c3:df:96:
         b4:ab:d6:cf:b8:60:80:55:32:6d:51:ca:d9:fd:1b:94:d5:e1:
         8b:67:97:da:85:c5:01:99:7d:ef:31:c3:b1:23:66:e5:a0:e9:
         ca:25:6d:c9:fa:84:ac:ea:c4:1a:e3:55:fa:fd:2f:8c:65:85:
         89:aa:fc:a3:22:c9:9f:4e:e6:8a:ed:58:cb:b4:47:b4:d1:b3:
         53:08:7f:c9:d6:ef:af:68:65:5f:5f:d1:11:5e:ee:80:e5:5f:
         ef:0c:17:d0:f5:45:38:2c:01:e1:66:70:36:4f:92:48:b0:ac:
         6d:04:f3:98:bd:1e:88:7a:f9:e0:ce:6e:ea:8d:61:a0:8b:45:
         ca:6d:62:df:c0:2b:89:02:63:5e:81:eb:21:c4:9a:6a:3d:4d:
         9c:1d:28:cf:79:88:6e:61:b5:52:05:be:d2:b6:2c:cf:c7:2c:
         e3:db:ae:28:51:e2:b1:2d:cc:f9:f0:72:07:ba:16:55:68:c0:
         5f:8a:e2:15:54:9a:4b:52:c5:e7:97:07:15:24:ba:c6:1e:08:
         ba:86:08:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:15 2024 by rpki-client on console-fra.rpki-client.org