Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/E-dXb9A4z50nS97Lcb5XtJ072YA.roa
File:                     E-dXb9A4z50nS97Lcb5XtJ072YA.roa (raw, json)
Hash identifier:          38taPg674YaB86JgUM/c33knG++tGTQtJTmsYC1ZBEo=
Subject key identifier:   13:E7:57:6F:D0:38:CF:9D:27:4B:DE:CB:71:BE:57:B4:9D:3B:D9:80
Certificate issuer:       /CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
Certificate serial:       0185720C97619BEB6FFEE18C79BAE3F842E5
Authority key identifier: 47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/E-dXb9A4z50nS97Lcb5XtJ072YA.roa
Signing time:             Mon 02 Jan 2023 10:35:05 +0000
ROA not before:           Mon 02 Jan 2023 10:35:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     395886
IP address blocks:        5.183.80.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:0c:97:61:9b:eb:6f:fe:e1:8c:79:ba:e3:f8:42:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
        Validity
            Not Before: Jan  2 10:35:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13e7576fd038cf9d274bdecb71be57b49d3bd980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:21:44:8e:84:44:69:37:2f:70:07:6c:60:e5:
                    de:78:ed:b8:e1:a6:90:9f:27:fb:c0:7f:23:d5:2e:
                    ad:da:58:b2:8a:eb:74:9c:de:a7:2a:c6:46:4c:75:
                    7e:5f:37:23:c9:af:9b:a0:e0:54:ab:89:d8:dd:c0:
                    5f:0f:92:7e:23:01:bf:65:5f:c1:18:03:6e:ab:95:
                    1b:b0:23:2c:47:72:ee:c2:5c:48:66:92:20:a8:e5:
                    6c:d6:10:c4:d4:ad:82:d1:d5:14:c9:d1:8d:0f:4d:
                    04:a6:c5:ab:88:ae:0e:10:b3:7e:48:3c:b2:75:da:
                    3e:00:fd:ba:9d:87:b7:9e:98:55:84:e6:37:a0:01:
                    f4:8e:f0:80:dd:2c:41:28:77:c4:1b:62:40:d3:6c:
                    05:59:3d:06:df:aa:1f:ce:0f:42:82:b9:3e:85:31:
                    cb:6b:4e:67:2a:a1:03:1a:db:12:4a:58:b5:e3:26:
                    d0:d7:17:18:2a:18:d7:15:22:9a:06:fc:e5:5d:33:
                    05:e0:dd:92:a2:6a:58:71:46:ee:7c:06:96:3e:af:
                    e0:6a:48:6d:3a:ed:42:bf:59:7d:4a:d9:52:0e:f8:
                    e2:e3:71:c7:c6:20:17:03:b6:fc:37:13:32:6e:06:
                    6b:1c:19:82:b0:01:af:9a:44:8f:42:83:58:e9:b5:
                    3b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E7:57:6F:D0:38:CF:9D:27:4B:DE:CB:71:BE:57:B4:9D:3B:D9:80
            X509v3 Authority Key Identifier:
                keyid:47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/E-dXb9A4z50nS97Lcb5XtJ072YA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:67:8b:db:8a:26:5c:26:15:e1:5e:85:4e:7b:84:dc:ac:cc:
         bd:be:aa:d5:21:26:c3:6c:be:ed:b3:c9:50:48:49:10:aa:38:
         20:63:1a:92:cf:0b:df:6d:b1:26:b4:3f:bd:13:16:df:9a:b0:
         67:c7:e6:94:50:75:9c:4a:71:06:78:21:b3:83:89:c5:c3:4d:
         17:b4:2b:91:48:b7:dd:6d:34:78:e4:36:f7:de:0b:9f:0e:5d:
         61:52:08:15:4a:bd:2f:6d:5b:c4:d9:de:5a:8e:8e:42:af:8b:
         5c:53:7b:85:c9:42:63:6a:59:38:b0:22:11:cf:dd:d9:91:f7:
         13:55:0e:27:8e:52:1b:65:69:e3:8e:74:57:08:63:1c:53:23:
         20:11:b2:74:d8:ac:88:ab:0d:d5:4d:e4:40:fb:d1:40:25:ee:
         d3:17:c4:4c:4e:50:74:03:df:1a:b2:ac:40:ee:46:62:b2:b7:
         6b:fb:3a:c2:2b:4e:62:42:76:92:75:7e:c2:13:51:8a:39:cd:
         83:21:e7:6c:97:fd:9f:2b:fa:c1:c8:15:35:df:b0:39:6b:d2:
         97:1a:cd:bb:6a:87:f0:7d:d6:b9:1a:bd:fb:80:79:04:42:0f:
         5c:a5:d7:f8:c8:53:3d:c4:9d:50:49:4e:31:55:01:66:4d:2e:
         01:47:c3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:45 2024 by rpki-client on console-ams.rpki-client.org