Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/uZbyQbJndqv7HZeMdLNqnIdwfok.roa
File:                     uZbyQbJndqv7HZeMdLNqnIdwfok.roa (raw, json)
Hash identifier:          itUQYOMJMtbxfa6QXHrQOxfZ+SYH7YyRrpKiyMra97o=
Subject key identifier:   B9:96:F2:41:B2:67:76:AB:FB:1D:97:8C:74:B3:6A:9C:87:70:7E:89
Certificate issuer:       /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial:       018967C6D5AF2F89710E32133485003661B6
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/uZbyQbJndqv7HZeMdLNqnIdwfok.roa
Signing time:             Tue 18 Jul 2023 06:53:51 +0000
ROA not before:           Tue 18 Jul 2023 06:53:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24837
IP address blocks:        176.108.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 19 Jul 2023 05:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:67:c6:d5:af:2f:89:71:0e:32:13:34:85:00:36:61:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
        Validity
            Not Before: Jul 18 06:53:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b996f241b26776abfb1d978c74b36a9c87707e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8f:4d:96:7d:4b:21:3f:d5:8c:9f:78:f5:b0:
                    f2:4f:9c:6d:55:a2:b5:41:c6:8b:4e:68:92:39:fa:
                    f9:ee:af:e6:d7:6c:7d:80:69:91:66:2c:0b:71:6f:
                    00:66:58:c7:a5:f9:92:24:33:15:01:8c:2a:8d:46:
                    02:5a:49:07:fe:a9:41:93:9d:13:a6:74:a0:af:13:
                    61:4b:af:04:32:f7:3b:5f:d1:c4:be:79:0d:60:0d:
                    d5:9b:8c:63:87:89:ff:a3:f3:cc:a5:6b:56:e6:fd:
                    68:c0:f2:4f:d2:cc:13:b6:85:27:7d:91:33:76:c9:
                    09:f0:7d:db:d0:1b:f4:b3:40:93:34:d3:0b:d2:d4:
                    1f:11:e5:07:f4:aa:4a:62:97:82:a6:f6:06:55:46:
                    bb:c9:7e:9b:c4:99:f0:4e:27:69:7c:e0:66:80:7c:
                    1b:81:ce:b4:87:83:9a:17:c7:5c:84:fe:93:9f:ea:
                    c1:fc:1a:08:23:4e:ee:85:0a:01:3d:c3:54:f2:13:
                    c9:ef:48:52:9b:9f:76:13:18:fc:98:af:cc:b4:e9:
                    1a:85:75:eb:b0:49:84:cd:1c:31:36:55:e7:d9:38:
                    02:f4:1a:68:d8:53:70:28:cb:a9:22:bd:f2:9d:3a:
                    df:cb:66:e8:a5:f4:7a:8a:4c:4b:df:37:37:2c:10:
                    d1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:96:F2:41:B2:67:76:AB:FB:1D:97:8C:74:B3:6A:9C:87:70:7E:89
            X509v3 Authority Key Identifier:
                keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/uZbyQbJndqv7HZeMdLNqnIdwfok.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.108.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:1d:5e:a5:53:fa:89:91:d7:93:a6:46:9f:5e:17:7b:f9:ab:
         4a:73:d6:3f:76:99:4c:6c:4c:65:01:c2:4e:e4:71:32:f6:4d:
         6d:3d:ce:29:9a:f8:34:2b:aa:5b:a0:9f:5b:65:a6:66:73:df:
         c0:c4:be:aa:43:e6:93:96:ad:8d:a7:1c:cf:cc:54:17:19:68:
         fc:8d:81:6f:8e:02:7d:16:b6:27:37:ec:a9:fc:27:d2:6a:27:
         8c:62:b2:ce:0e:89:74:6c:15:f9:e6:cf:1a:c8:69:b0:bc:1f:
         98:1a:5e:c9:fc:dc:b7:37:1d:0b:ac:e0:44:3b:30:d8:ac:df:
         f1:97:01:e7:88:7d:53:7e:66:01:be:2e:ce:36:cf:5c:8c:91:
         c5:c2:bd:47:39:23:57:dc:a4:08:70:e0:bd:f1:3d:7f:77:6b:
         58:2f:0c:d0:5b:ba:d6:bc:6b:c4:2e:ae:8f:2b:05:b7:12:41:
         3f:0a:3f:ff:78:25:86:59:c2:f7:1e:82:9c:73:7c:f1:30:24:
         b1:29:72:e1:dd:be:da:80:d6:9c:fd:92:1f:ff:6b:09:67:de:
         ee:3c:1f:86:6d:30:86:64:ce:c1:d0:1e:82:a5:e3:2f:af:69:
         16:15:ef:41:4f:52:b2:ee:00:50:ec:25:fb:e4:2b:9c:8b:4e:
         b2:3b:1a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:07 2024 by rpki-client on console-ams.rpki-client.org