Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/ptjrNeWdHPDlkPgfkaaAB6ScZ2Q.roa
File:                     ptjrNeWdHPDlkPgfkaaAB6ScZ2Q.roa (raw, json)
Hash identifier:          2CW1o2UvD+z3OMveHMnIYfP68JD4pqHUyFJ5Jq+X9cE=
Subject key identifier:   A6:D8:EB:35:E5:9D:1C:F0:E5:90:F8:1F:91:A6:80:07:A4:9C:67:64
Certificate issuer:       /CN=ffe70693454bc33485dec69d219d0502654ac04a
Certificate serial:       018C5CE207F974B62FF34C7ADDD77D3CCE6F
Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/ptjrNeWdHPDlkPgfkaaAB6ScZ2Q.roa
Signing time:             Tue 12 Dec 2023 07:16:06 +0000
ROA not before:           Tue 12 Dec 2023 07:16:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57099
IP address blocks:        5.181.57.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:5c:e2:07:f9:74:b6:2f:f3:4c:7a:dd:d7:7d:3c:ce:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a
        Validity
            Not Before: Dec 12 07:16:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a6d8eb35e59d1cf0e590f81f91a68007a49c6764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ad:8f:c3:c9:2f:a1:d7:bd:a3:38:71:27:1b:
                    3d:63:ec:76:10:a4:c3:05:9e:a0:04:87:d8:eb:de:
                    95:b0:f5:a4:97:2b:c8:bf:4a:79:00:17:2e:7f:fe:
                    a4:f5:77:16:d0:f4:65:b4:58:27:74:55:ad:aa:ce:
                    25:04:57:54:68:25:cd:28:42:04:71:c8:00:de:2f:
                    c2:1d:43:5c:96:42:01:f9:3c:a0:39:cd:b7:a1:3d:
                    f9:c0:4b:48:8f:cb:30:19:f9:dc:c1:55:e8:29:34:
                    e2:91:64:be:3e:f7:2e:7b:06:b2:37:ec:ed:43:4a:
                    49:fc:31:46:8e:a4:b5:01:6a:fb:9e:e9:9f:e8:36:
                    bb:54:6b:5e:70:49:eb:9b:2f:b9:bf:c1:f4:86:8d:
                    58:5f:d2:72:f6:8b:84:80:9f:5d:fc:63:56:b7:98:
                    db:b5:05:6f:45:19:5d:a3:a1:c8:9c:05:9c:af:57:
                    f7:45:df:07:bc:08:4b:5d:01:8d:7c:a5:ac:44:32:
                    08:2e:8e:c5:52:55:b6:82:f9:d2:35:f1:3f:15:12:
                    bd:ad:82:c1:b6:75:c5:a5:fe:d5:1f:2f:e7:5a:4d:
                    ce:aa:47:5c:6a:dd:10:f4:21:0b:9c:18:e5:c4:2b:
                    f7:0d:62:1a:3c:79:a8:b8:c2:cd:d0:3d:58:96:ba:
                    55:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D8:EB:35:E5:9D:1C:F0:E5:90:F8:1F:91:A6:80:07:A4:9C:67:64
            X509v3 Authority Key Identifier:
                keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/ptjrNeWdHPDlkPgfkaaAB6ScZ2Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:72:50:95:8f:c4:34:d9:76:40:58:f2:0f:cf:58:f8:b9:58:
         51:a9:03:f3:37:e4:75:b4:41:e6:9f:8a:00:17:34:85:a3:fa:
         2d:20:5c:12:63:b6:6d:38:6e:7e:00:9a:ca:57:ce:f3:d5:e4:
         7d:86:d6:cc:96:f4:4a:d0:5b:81:93:b1:a4:81:04:71:14:17:
         46:42:bd:51:36:6d:7a:83:76:d6:65:ee:7b:7c:b0:43:b8:c2:
         6e:e5:4a:99:14:04:95:05:d6:5c:14:71:45:61:61:f2:30:78:
         ef:a3:f6:ba:60:20:25:6c:13:fe:f1:4b:2f:ad:95:50:e3:ff:
         9d:91:d8:83:ad:44:cd:c3:07:10:f6:4c:a0:4c:c8:89:6b:9a:
         4a:6f:0c:56:6a:d0:f4:38:92:15:8f:09:85:0e:66:c9:56:c5:
         61:39:3e:4b:fb:17:4d:36:49:42:1f:a6:95:ed:b9:11:4c:32:
         bb:f1:39:32:cb:69:58:1a:0d:9c:a2:92:6c:26:05:c2:df:93:
         6b:c4:c2:a0:63:06:e0:26:4c:5f:88:6a:07:5d:25:91:8f:6e:
         7c:50:60:7a:21:f9:0c:5c:8d:76:6b:db:6b:14:2e:2b:f0:f2:
         65:47:d1:a6:95:72:96:29:6f:6c:70:69:d9:f3:c0:96:20:bd:
         68:c3:63:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:54 2024 by rpki-client on console-fra.rpki-client.org