Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/X-AZixkXIL0-SWTDIEFdlUEY8yU.roa
File:                     X-AZixkXIL0-SWTDIEFdlUEY8yU.roa (raw, json)
Hash identifier:          q41A2CgwjEZEO5ggIUxlKVqqlRfvxKd2GrLq9RcSbHY=
Subject key identifier:   5F:E0:19:8B:19:17:20:BD:3E:49:64:C3:20:41:5D:95:41:18:F3:25
Certificate issuer:       /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial:       0189681FA7BADAEA85EA36A1FF23079852A2
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/X-AZixkXIL0-SWTDIEFdlUEY8yU.roa
Signing time:             Tue 18 Jul 2023 08:30:52 +0000
ROA not before:           Tue 18 Jul 2023 08:30:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57827
IP address blocks:        176.108.182.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 19 Jul 2023 08:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:68:1f:a7:ba:da:ea:85:ea:36:a1:ff:23:07:98:52:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
        Validity
            Not Before: Jul 18 08:30:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5fe0198b191720bd3e4964c320415d954118f325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0c:79:fd:22:df:c8:c1:d1:e5:68:9a:3b:71:
                    31:9c:35:c6:be:94:17:c4:8a:99:12:20:51:ef:bb:
                    e5:0d:1d:9e:dc:21:bd:25:33:0e:87:85:88:6b:30:
                    37:d2:c2:38:ac:7c:6f:3a:a3:2f:30:71:ce:5e:07:
                    b4:37:c9:b6:42:c4:02:a3:67:43:3d:2a:0a:76:5f:
                    e4:7f:4a:c3:3b:3c:db:bb:c6:c0:0b:81:39:03:ed:
                    14:5a:d9:0c:17:b5:ef:8c:f8:ff:7f:96:02:ec:7f:
                    a3:b5:a0:cf:f2:b3:13:d2:73:76:80:8d:07:c3:72:
                    39:bb:cf:23:49:01:5b:9d:ab:dd:f0:a3:28:d3:c8:
                    dc:87:1d:e6:84:79:b6:10:3b:c4:c3:b6:c6:85:72:
                    a8:f3:21:ae:10:3f:2f:8a:3a:36:c9:49:f5:07:b1:
                    6d:36:37:7b:b6:19:40:6d:e1:f3:82:89:d9:fd:2d:
                    74:e8:35:31:76:bc:d0:b8:c6:7a:c6:6d:1a:da:fb:
                    e4:b7:08:62:1e:56:26:22:1a:7a:d4:cf:a0:85:d7:
                    75:0d:11:06:67:4f:8c:9c:3f:6e:c4:cd:ed:af:5a:
                    b6:d6:1c:0c:1c:52:b9:10:70:72:6c:b1:53:7f:1e:
                    66:24:56:76:9d:f0:a5:f8:2d:3c:ff:20:9b:57:b7:
                    03:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E0:19:8B:19:17:20:BD:3E:49:64:C3:20:41:5D:95:41:18:F3:25
            X509v3 Authority Key Identifier:
                keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/X-AZixkXIL0-SWTDIEFdlUEY8yU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.108.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:7a:f5:25:7a:da:24:86:25:10:12:c2:5d:3a:e1:9c:d8:52:
         a1:d0:05:af:ff:c4:bd:29:0a:09:e2:9d:8f:93:e0:c8:9d:67:
         6f:ea:26:0a:fc:97:e9:3e:53:26:b7:7b:00:27:10:54:8e:ec:
         83:4e:62:d1:49:fe:fa:98:cf:51:b9:31:4b:f1:72:bd:b3:da:
         14:d2:3d:e8:ee:d2:77:79:eb:a1:26:30:aa:70:14:77:8a:0f:
         98:45:d0:b5:c4:b9:12:f0:78:69:a3:18:c9:d6:cf:af:40:c2:
         64:80:c4:22:2b:db:33:87:7e:ce:ec:2f:dc:fc:ad:0f:58:89:
         23:18:a9:f8:2c:23:da:3b:cc:cf:a0:3c:73:f1:7b:ef:c7:bc:
         74:d5:e9:04:58:31:dc:84:b1:8b:39:c1:72:3b:9f:b5:4a:64:
         70:15:0c:24:e7:db:5d:24:38:72:df:60:1b:9b:68:f4:4d:cc:
         15:7b:4f:a8:73:e4:30:c0:89:8b:17:54:02:e2:5b:50:44:53:
         de:f0:98:94:af:0a:5c:6c:3f:74:e2:47:4f:00:ac:4d:6a:03:
         f9:a4:13:d3:87:40:cb:53:77:37:fb:4a:20:7e:c3:20:da:0b:
         3f:d8:bb:60:7e:06:bb:89:ef:c6:d8:d8:3c:8e:b6:1a:fa:10:
         ec:03:02:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:25 2024 by rpki-client on console-fra.rpki-client.org