Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lNt-frolJf7I6ZBJqO-VdA5aBcg.roa
File:                     lNt-frolJf7I6ZBJqO-VdA5aBcg.roa (raw, json)
Hash identifier:          kgPG8GA1z2w12uqEKBssTSMxp2UbrhB/4ov4NQowJq4=
Subject key identifier:   94:DB:7E:7E:BA:25:25:FE:C8:E9:90:49:A8:EF:95:74:0E:5A:05:C8
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       0188B64B3A9F889B82E07D54421C46A913C6
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lNt-frolJf7I6ZBJqO-VdA5aBcg.roa
Signing time:             Tue 13 Jun 2023 19:46:03 +0000
ROA not before:           Tue 13 Jun 2023 19:46:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     23470
IP address blocks:        163.5.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 11 Jul 2023 09:21:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b6:4b:3a:9f:88:9b:82:e0:7d:54:42:1c:46:a9:13:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Jun 13 19:46:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=94db7e7eba2525fec8e99049a8ef95740e5a05c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:07:e3:7c:68:fc:e1:98:c1:12:d8:89:e7:74:
                    c4:78:91:f0:58:21:ce:7d:99:e4:51:2a:2a:0c:d3:
                    54:e0:9b:77:c9:4c:db:f8:c4:5d:99:94:d8:97:29:
                    a6:35:77:76:41:5d:ec:86:6b:02:a2:80:58:08:68:
                    ff:95:67:90:28:ad:d4:a1:d7:1d:91:20:30:b6:fb:
                    51:d7:be:de:31:ff:0c:86:b1:bd:e7:5b:a1:5d:6b:
                    24:ee:19:72:51:ae:b0:db:63:5a:78:8a:b0:1f:5b:
                    9c:a2:23:be:da:f4:c0:47:79:03:22:0f:ee:65:a8:
                    d3:8a:45:53:3b:eb:cf:3d:85:b8:12:37:59:f6:65:
                    1c:d5:66:7e:60:51:2f:97:27:3a:a6:4f:4c:94:c2:
                    c3:1f:c4:7e:9f:c9:9b:36:ad:4a:6c:30:ca:73:2b:
                    f0:b7:3b:08:49:10:77:81:36:62:01:88:e1:c9:dd:
                    da:ac:da:fe:8a:f8:49:1a:5e:56:04:e3:ef:a2:3e:
                    98:7a:32:8d:ce:92:c4:d1:cd:5a:32:ab:15:85:61:
                    ed:0b:66:2f:d6:27:fc:0e:a5:ee:a3:f0:b7:6c:8b:
                    db:e3:de:c9:a3:5f:58:2c:31:30:d6:d4:1a:fb:75:
                    be:c8:4e:4d:d8:35:9b:fb:4b:63:53:f8:95:43:ee:
                    2d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DB:7E:7E:BA:25:25:FE:C8:E9:90:49:A8:EF:95:74:0E:5A:05:C8
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lNt-frolJf7I6ZBJqO-VdA5aBcg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:75:ed:1f:87:b2:0d:da:12:04:eb:2f:6b:3d:7e:0d:5c:7d:
         bb:b3:ba:f7:73:ac:81:24:28:d8:6f:3e:43:8b:ec:92:6d:ea:
         54:e0:50:83:72:33:c0:ac:ef:8f:50:c6:05:f8:bf:dd:04:95:
         23:52:14:a1:e1:c4:0f:f1:04:d9:f3:1c:a7:89:7d:17:54:c4:
         1b:89:72:32:f6:0e:8d:3a:cb:46:f6:eb:51:aa:aa:b2:54:09:
         8a:68:bc:d8:32:52:82:15:b9:06:39:34:43:43:cc:37:40:1d:
         e2:b6:4e:e5:38:b5:54:5c:16:81:c9:be:bb:94:e1:c8:42:e0:
         08:87:90:85:f8:08:5f:79:bd:de:0b:f0:86:fd:7d:ba:9a:b5:
         b4:74:a8:75:c3:e3:4c:c7:0c:55:28:aa:42:a1:3d:b2:21:fa:
         85:b6:c9:cd:09:20:65:27:ee:57:f7:53:f0:b9:27:e0:a0:ca:
         c4:5e:f2:b5:42:b3:64:f2:25:ca:d0:c7:4d:d0:f6:99:7e:58:
         b5:9b:10:6e:49:af:e8:3c:7e:79:00:dc:8c:3c:ee:68:01:ae:
         0f:bc:32:80:2f:e2:a2:41:04:b3:15:b9:60:cc:21:e5:b5:95:
         ae:84:f1:4c:75:60:7c:be:9b:62:cf:9a:89:2f:53:fa:20:cf:
         19:67:73:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:35 2024 by rpki-client on console-ams.rpki-client.org