Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/VOGDNCPM0Uf6nreaUC9mIHp9opM.roa
File:                     VOGDNCPM0Uf6nreaUC9mIHp9opM.roa (raw, json)
Hash identifier:          PZDmM4wKNqZNgHIW6G1oWSYOrvTCFshHxnkg2B95vN8=
Subject key identifier:   54:E1:83:34:23:CC:D1:47:FA:9E:B7:9A:50:2F:66:20:7A:7D:A2:93
Certificate issuer:       /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial:       018FCAC2B0F934ABBBB33C9458AF5D57A761
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/VOGDNCPM0Uf6nreaUC9mIHp9opM.roa
Signing time:             Thu 30 May 2024 18:28:27 +0000
ROA not before:           Thu 30 May 2024 18:28:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        151.186.160.0/21 maxlen: 24
                          151.186.160.0/24 maxlen: 24
                          151.186.161.0/24 maxlen: 24
                          151.186.162.0/24 maxlen: 24
                          151.186.163.0/24 maxlen: 24
                          151.186.164.0/24 maxlen: 24
                          151.186.165.0/24 maxlen: 24
                          151.186.166.0/24 maxlen: 24
                          151.186.167.0/24 maxlen: 24
                          151.186.168.0/22 maxlen: 24
                          151.186.168.0/24 maxlen: 24
                          151.186.169.0/24 maxlen: 24
                          151.186.170.0/24 maxlen: 24
                          151.186.171.0/24 maxlen: 24
                          151.186.172.0/22 maxlen: 24
                          151.186.172.0/24 maxlen: 24
                          151.186.173.0/24 maxlen: 24
                          151.186.174.0/24 maxlen: 24
                          151.186.175.0/24 maxlen: 24
                          151.186.176.0/20 maxlen: 24
                          151.186.176.0/24 maxlen: 24
                          151.186.177.0/24 maxlen: 24
                          151.186.178.0/24 maxlen: 24
                          151.186.179.0/24 maxlen: 24
                          151.186.180.0/24 maxlen: 24
                          151.186.181.0/24 maxlen: 24
                          151.186.182.0/24 maxlen: 24
                          151.186.183.0/24 maxlen: 24
                          151.186.184.0/24 maxlen: 24
                          151.186.185.0/24 maxlen: 24
                          151.186.186.0/24 maxlen: 24
                          151.186.187.0/24 maxlen: 24
                          151.186.188.0/24 maxlen: 24
                          151.186.189.0/24 maxlen: 24
                          151.186.190.0/24 maxlen: 24
                          151.186.191.0/24 maxlen: 24
                          151.186.192.0/20 maxlen: 24
                          151.186.192.0/24 maxlen: 24
                          151.186.193.0/24 maxlen: 24
                          151.186.194.0/24 maxlen: 24
                          151.186.195.0/24 maxlen: 24
                          151.186.196.0/24 maxlen: 24
                          151.186.197.0/24 maxlen: 24
                          151.186.198.0/24 maxlen: 24
                          151.186.199.0/24 maxlen: 24
                          151.186.200.0/24 maxlen: 24
                          151.186.201.0/24 maxlen: 24
                          151.186.202.0/24 maxlen: 24
                          151.186.203.0/24 maxlen: 24
                          151.186.204.0/24 maxlen: 24
                          151.186.205.0/24 maxlen: 24
                          151.186.206.0/24 maxlen: 24
                          151.186.207.0/24 maxlen: 24
                          2a04:e4c4:5::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 12 Jun 2024 12:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:ca:c2:b0:f9:34:ab:bb:b3:3c:94:58:af:5d:57:a7:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
        Validity
            Not Before: May 30 18:28:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=54e1833423ccd147fa9eb79a502f66207a7da293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9f:ab:df:63:70:7f:1f:33:e5:67:1d:07:ed:
                    70:d6:a8:d5:e2:73:b6:ce:fc:ca:a3:f2:41:10:f1:
                    63:09:eb:b9:04:87:4e:7e:dd:8d:14:86:d8:cf:11:
                    f2:c3:a6:4b:a0:76:50:ac:7e:57:2b:16:35:ef:28:
                    c7:68:50:9f:f4:f3:7c:db:0f:60:69:c2:dd:4a:a4:
                    ea:ed:be:c4:45:60:c2:9a:1c:c2:dd:b8:11:31:16:
                    4a:8a:05:8a:87:ba:3d:f8:01:a2:77:5f:cd:3f:ec:
                    60:81:2f:5e:2b:33:f4:71:23:d5:09:46:06:48:1c:
                    79:bf:ec:26:d0:74:0b:58:8d:fc:32:1c:87:14:3f:
                    2a:da:7c:a0:1b:00:99:45:3d:6e:9f:bd:7c:6a:48:
                    df:c4:66:b0:47:47:45:35:9a:2e:5f:82:e3:c1:3a:
                    0d:0b:75:c0:0a:9b:6b:30:91:5b:db:dc:d4:01:6a:
                    4f:ee:88:c3:84:91:90:5e:5c:20:18:91:40:0e:6a:
                    0c:f2:2d:02:25:52:f4:e5:ed:b1:df:7c:f0:17:bb:
                    f2:cf:ff:3a:3c:51:46:4a:05:27:d9:bf:6b:fe:68:
                    03:b1:d7:cf:95:dc:a0:db:cd:07:91:4c:52:e2:3a:
                    00:46:e4:98:0d:c2:74:75:b0:7f:be:de:8e:88:fb:
                    2d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E1:83:34:23:CC:D1:47:FA:9E:B7:9A:50:2F:66:20:7A:7D:A2:93
            X509v3 Authority Key Identifier:
                keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/VOGDNCPM0Uf6nreaUC9mIHp9opM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.186.160.0-151.186.207.255
                IPv6:
                  2a04:e4c4:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:8b:fc:81:50:92:f7:1a:c6:f0:f6:d3:dd:e2:61:25:bd:8b:
         f2:ae:8f:39:ae:dd:dc:a7:4a:76:ec:d9:b0:00:47:a9:b9:a8:
         fa:e0:35:82:47:98:a8:6b:09:09:6a:20:90:6d:a4:22:3d:f8:
         32:cc:cd:7f:87:40:6d:b8:7e:7c:c3:e3:7f:c6:b3:2c:74:d8:
         2e:49:47:3b:d0:ac:2c:c1:9c:16:49:0b:04:74:7a:31:1e:05:
         ad:a9:ac:9f:d5:38:2b:de:3a:23:d4:56:dd:ba:78:a4:46:df:
         0a:91:26:f5:4d:a3:45:aa:fa:b5:a8:49:d4:c1:8b:8b:6b:ab:
         46:c0:2a:a8:f3:58:48:9f:d2:ae:b5:22:dd:ec:99:17:3c:22:
         9e:0a:de:65:e0:d5:05:3f:bc:0a:92:06:35:08:1a:bc:f4:5c:
         65:78:33:85:7b:23:3f:9e:97:9a:d8:b9:5a:5a:78:81:02:22:
         a1:23:b3:9a:1d:a6:8c:26:99:9f:e3:cd:6c:87:cb:85:37:88:
         fb:2c:db:56:d4:08:d0:3b:8b:cb:10:1d:85:8b:3b:37:9c:48:
         57:f2:9d:3f:75:0a:50:85:92:02:f6:e5:94:b4:84:af:0c:32:
         42:76:1c:b6:f9:e5:eb:23:cf:c2:ab:79:ec:5c:2b:dc:42:8e:
         24:6e:08:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 18:13:01 2024 by rpki-client on console-ams.rpki-client.org