Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/qU0AhGWEzpbESGDiP-lVcxQEJRo.roa
File:                     qU0AhGWEzpbESGDiP-lVcxQEJRo.roa (raw, json)
Hash identifier:          1sf8eybl8iFEnzmCF5cDggSrzhuFI3hchNs1qrAspYc=
Subject key identifier:   A9:4D:00:84:65:84:CE:96:C4:48:60:E2:3F:E9:55:73:14:04:25:1A
Certificate issuer:       /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial:       0188BF034BE8E4D6A0D3D689DB8939BA9AB0
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/qU0AhGWEzpbESGDiP-lVcxQEJRo.roa
Signing time:             Thu 15 Jun 2023 12:24:04 +0000
ROA not before:           Thu 15 Jun 2023 12:24:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213273
IP address blocks:        81.163.192.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 16 Jun 2023 10:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:bf:03:4b:e8:e4:d6:a0:d3:d6:89:db:89:39:ba:9a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
        Validity
            Not Before: Jun 15 12:24:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a94d00846584ce96c44860e23fe955731404251a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:98:3e:55:a3:b0:66:76:5f:6f:21:b4:fc:5f:
                    49:70:5c:d4:12:78:bc:5b:33:e8:2c:b2:52:22:69:
                    75:16:f9:b1:45:33:2d:dd:2d:53:24:da:6e:f5:1f:
                    08:b7:6a:18:52:3e:2d:17:32:a5:cf:86:5e:e5:26:
                    4a:b3:f7:84:2b:0c:ab:cd:58:e8:2a:72:cf:9c:d3:
                    07:a2:27:61:b6:9a:23:28:18:ce:d5:5a:bc:a6:58:
                    7b:f5:3b:0f:b8:f6:48:31:35:89:8e:ba:de:98:88:
                    14:76:86:67:b0:7b:9a:d4:3b:87:f0:60:c7:71:0d:
                    21:ea:36:47:bc:4f:76:c3:92:59:5b:bb:6f:58:2a:
                    a5:23:a8:bd:e9:0d:32:75:d3:cf:3d:81:22:4b:73:
                    0c:2c:18:f1:7a:5b:fb:a3:fc:2b:a5:46:cf:74:20:
                    d0:d1:e7:2c:f4:e5:fc:9d:c6:28:fe:8d:9c:69:95:
                    8e:77:4f:ae:fb:7e:1b:c4:a3:14:cf:80:86:82:66:
                    e3:52:ee:47:dd:18:87:e6:56:75:2c:11:2a:2f:83:
                    f3:24:f3:b1:d3:57:85:e6:0a:a5:98:bf:0c:7e:dd:
                    7e:8c:26:d3:04:49:d9:65:74:45:53:b4:a5:cf:b6:
                    8f:28:c9:40:5b:6d:0b:af:b1:55:aa:9d:22:32:7b:
                    f2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4D:00:84:65:84:CE:96:C4:48:60:E2:3F:E9:55:73:14:04:25:1A
            X509v3 Authority Key Identifier:
                keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/qU0AhGWEzpbESGDiP-lVcxQEJRo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.163.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:00:d1:b0:8f:0b:b7:fd:90:0f:28:7a:4b:ac:d0:18:92:ac:
         3c:de:20:4c:21:eb:eb:33:ef:58:4b:8a:66:ce:78:48:1b:cc:
         1d:ed:8a:fe:54:86:49:8a:2d:a2:9f:1d:25:17:81:ed:16:b8:
         b6:cb:a6:bb:a0:d9:18:fe:a6:d3:ea:8b:b1:1f:0a:bd:21:a8:
         7b:ba:a4:3c:88:57:e6:cd:12:ae:c8:56:f8:0d:f4:a5:0b:f0:
         7d:9a:44:50:94:46:08:43:73:92:20:8e:b1:17:6a:79:64:b3:
         47:c1:cf:59:2c:e6:96:22:72:34:ca:db:a4:5e:0c:8e:af:e9:
         5f:91:e0:68:5c:bb:41:e5:4c:99:de:90:c0:b6:63:24:54:a8:
         16:6d:e2:e7:44:d0:b6:b4:0b:61:ef:80:ec:86:e8:6c:36:b6:
         bc:fb:28:95:c0:f9:cd:2e:0a:bd:29:a6:c5:f3:5d:c3:20:63:
         ea:95:72:d6:f1:81:5c:f9:60:00:74:ff:42:97:75:2e:a1:cb:
         08:58:8a:4a:01:a0:22:f9:fc:27:1a:2c:93:8b:d2:74:68:68:
         57:0a:79:ae:d2:6c:33:06:16:17:24:46:6d:4a:fb:7c:19:76:
         ac:69:57:7e:b1:b5:54:8a:f8:00:b9:de:d3:52:a8:3b:12:f5:
         d3:28:11:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:10 2024 by rpki-client on console-fra.rpki-client.org