Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/1VEZm21Xz-RQqJydsWGYilhMWAg.roa
File:                     1VEZm21Xz-RQqJydsWGYilhMWAg.roa (raw, json)
Hash identifier:          Wv/t4cLyTUc1SvdCGx3slP2EPs5uhmnTCZM43fiH1j8=
Subject key identifier:   D5:51:19:9B:6D:57:CF:E4:50:A8:9C:9D:B1:61:98:8A:58:4C:58:08
Certificate issuer:       /CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Certificate serial:       018936C904D2BA54B0067F84D8D70D735ABB
Authority key identifier: 26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/1VEZm21Xz-RQqJydsWGYilhMWAg.roa
Signing time:             Sat 08 Jul 2023 18:34:50 +0000
ROA not before:           Sat 08 Jul 2023 18:34:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206373
IP address blocks:        103.112.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:36:c9:04:d2:ba:54:b0:06:7f:84:d8:d7:0d:73:5a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267ef37f3dcd607f9871d239502badbf9b56bc57
        Validity
            Not Before: Jul  8 18:34:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d551199b6d57cfe450a89c9db161988a584c5808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:86:58:40:74:59:cb:2f:8b:7c:80:0f:fd:7c:
                    48:6a:09:f8:1f:ba:37:b6:94:56:ba:47:e6:c0:6d:
                    a4:0e:ad:c0:60:79:73:9b:ed:5e:76:8d:7d:25:80:
                    54:94:15:0d:c4:b6:6b:14:92:61:6f:64:e1:0e:5b:
                    99:ac:2d:b2:b7:e1:8e:6b:d8:e6:a3:e0:1e:d3:12:
                    d7:2f:07:d3:dc:27:28:3f:60:f4:25:7c:d5:ac:37:
                    87:e8:32:3d:85:96:2e:14:a2:0b:26:5e:2c:dc:1b:
                    f8:b0:6b:37:fd:69:9b:9a:64:d6:90:a5:81:6f:59:
                    f2:91:d9:2c:60:9c:ab:82:45:93:1e:05:a8:88:61:
                    fd:eb:4f:95:01:14:ee:a6:81:4f:0c:4c:26:79:7e:
                    c2:4a:a3:fd:07:57:b9:59:11:6c:c9:5e:a2:d6:4d:
                    fe:41:8c:7a:6c:2c:70:3a:b8:38:2a:90:9b:e8:cf:
                    31:2d:91:dc:da:1c:9b:11:90:e7:2c:c1:ba:75:0c:
                    26:80:13:93:db:ef:59:ca:6f:08:4e:ba:98:c1:ea:
                    d9:48:95:fc:91:8c:35:14:58:0e:c4:0f:3e:54:e4:
                    a1:0a:9c:85:9f:77:15:f9:96:fe:ac:af:e4:5c:29:
                    4b:44:42:cf:62:9c:3b:39:8a:0b:b9:fa:d1:86:65:
                    1d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:51:19:9B:6D:57:CF:E4:50:A8:9C:9D:B1:61:98:8A:58:4C:58:08
            X509v3 Authority Key Identifier:
                keyid:26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/1VEZm21Xz-RQqJydsWGYilhMWAg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:71:5c:6f:10:09:ef:55:ce:56:81:df:0f:cc:b7:6a:3f:4e:
         b3:3f:a8:f7:f6:9a:b7:e5:bf:3a:ce:e1:9c:2d:10:a3:38:7e:
         76:80:07:80:2c:fb:01:d3:61:c6:5a:74:f6:95:7c:d0:15:b5:
         fd:b7:83:93:74:9e:52:e9:d8:29:af:f6:63:48:44:d3:07:b8:
         16:64:22:da:b0:a8:f5:ef:59:54:86:82:02:ca:64:58:ec:ad:
         a4:eb:8a:e3:76:1b:12:e8:40:17:9f:10:09:83:e8:1c:78:ac:
         49:d3:d0:d8:2e:bb:a0:e9:6f:b9:2e:ce:f9:74:f3:c8:4c:2f:
         25:c7:a4:90:b7:dc:b7:df:20:62:60:26:6d:9b:9b:e5:64:35:
         bb:57:66:d2:b2:55:31:c7:95:29:be:fe:45:6f:f7:74:2a:19:
         2e:bf:cf:8d:39:d3:d6:92:14:14:da:bd:09:c8:cc:56:59:42:
         83:48:05:ae:0f:c4:d3:68:3b:66:69:f2:92:4d:10:ae:68:00:
         a0:4c:14:56:35:2e:01:a2:e5:b5:8c:63:4f:51:2f:41:36:ac:
         ff:07:19:5d:d7:29:60:49:e3:ab:b6:d2:d6:c4:43:9c:37:20:
         45:7e:fe:7a:2d:e7:5c:c6:bb:f0:fe:9b:eb:9b:30:96:c8:24:
         76:a9:14:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:17 2024 by rpki-client on console-ams.rpki-client.org