Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9cPcuSX4-guRUO1xL-F_ESCOmoE.roa
File:                     9cPcuSX4-guRUO1xL-F_ESCOmoE.roa (raw, json)
Hash identifier:          Xls1Q3Iw65wRsto2PJ2eolmyLEjjHmMvIbhULoRAaaQ=
Subject key identifier:   F5:C3:DC:B9:25:F8:FA:0B:91:50:ED:71:2F:E1:7F:11:20:8E:9A:81
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       018DEB2B20792E08A11C6539E8E49D775C2C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9cPcuSX4-guRUO1xL-F_ESCOmoE.roa
Signing time:             Tue 27 Feb 2024 15:24:48 +0000
ROA not before:           Tue 27 Feb 2024 15:24:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7018
IP address blocks:        163.5.110.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.145.0/24 maxlen: 24
                          163.5.212.0/24 maxlen: 24
                          163.5.223.0/24 maxlen: 24
                          163.5.244.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 28 Apr 2024 15:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:eb:2b:20:79:2e:08:a1:1c:65:39:e8:e4:9d:77:5c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Feb 27 15:24:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f5c3dcb925f8fa0b9150ed712fe17f11208e9a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9a:bc:bf:05:8b:30:0b:08:af:71:cc:ab:cd:
                    95:d6:98:e2:97:47:6f:28:5c:e3:b1:6c:96:5c:19:
                    63:ca:09:e0:dc:f5:3d:32:af:98:89:bf:62:c1:06:
                    30:56:73:b6:d9:db:d8:39:79:1a:d5:d2:f4:75:5a:
                    45:c4:0c:8f:50:a2:ff:f9:bd:52:7d:b8:f2:ad:7d:
                    33:90:36:af:7f:47:0c:07:07:81:75:e7:3d:c9:ab:
                    af:d3:cf:fa:09:bd:c8:8f:2e:b3:dd:28:e8:e0:c3:
                    b8:4a:4e:9c:b9:85:99:f6:6e:85:6f:3f:b1:90:18:
                    f3:ad:ce:0f:28:fa:a4:b8:0f:d7:5b:7d:7e:b9:e8:
                    7c:49:f6:8b:05:44:eb:29:d3:96:c9:2a:77:2c:a0:
                    a4:96:5c:35:d2:a4:6c:95:04:9c:58:4a:96:22:47:
                    f6:ca:a1:ca:cb:6e:d2:d9:ef:b8:2d:88:e6:cc:ad:
                    cd:5c:ec:21:99:96:a7:c9:0d:42:2b:ca:2d:a4:51:
                    98:01:7e:e9:01:4e:6a:8e:8b:a9:09:f8:a4:ce:1b:
                    6f:30:5c:72:ba:bf:c5:9a:36:b5:51:a4:26:58:b0:
                    10:8a:0c:f5:8e:85:28:b2:06:2d:8b:3e:74:24:a8:
                    de:46:e7:fa:28:0f:a6:e9:ac:8e:b3:45:4d:ba:1f:
                    09:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C3:DC:B9:25:F8:FA:0B:91:50:ED:71:2F:E1:7F:11:20:8E:9A:81
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9cPcuSX4-guRUO1xL-F_ESCOmoE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.110.0/23
                  163.5.126.0/24
                  163.5.128.0/24
                  163.5.145.0/24
                  163.5.212.0/24
                  163.5.223.0/24
                  163.5.244.0/24
                  163.5.250.0/24
                  163.5.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:89:5d:48:66:43:3a:0d:3d:60:ea:45:e5:9f:3c:b9:43:1c:
         d7:1a:0f:b0:eb:dc:b4:8a:5b:f2:fb:a7:57:4e:5a:7a:20:21:
         d4:70:5a:77:49:31:69:0e:66:98:b0:81:c7:51:c3:3c:2b:a2:
         c9:e7:7f:50:5d:c1:d8:41:99:51:e1:ec:65:3e:05:43:13:15:
         bc:e6:b4:b6:58:f4:a6:50:d3:30:84:14:d8:b7:ea:ee:8b:61:
         42:55:f7:33:f9:cf:9b:70:a9:e1:97:1a:ab:6a:4f:e8:83:c0:
         ff:f6:91:34:b5:58:36:fa:d2:1f:51:69:f0:ce:90:f6:26:12:
         19:bc:19:80:97:72:3c:54:12:51:16:b8:c4:fe:0e:d5:6c:45:
         6f:93:65:02:18:75:a0:7f:ea:59:14:35:07:71:45:18:80:2c:
         cf:70:c7:10:3e:ca:32:0c:96:ab:be:9b:df:8d:16:23:d9:44:
         ef:88:13:9c:a3:f2:24:f3:05:63:f1:28:71:aa:3e:67:44:c6:
         0b:24:0d:a5:02:d6:f6:64:bf:42:a5:a6:57:3d:ae:c3:06:2a:
         7a:e5:0d:a7:f5:9e:37:7d:23:19:e2:21:b4:41:0b:93:d8:3b:
         77:8a:fd:1d:e7:54:4b:89:5f:0d:35:a6:a2:47:87:27:74:79:
         f8:bf:6b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:03 2024 by rpki-client on console-fra.rpki-client.org