Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/FEGqNE7AZdLccSm_Ooe_X1LJ_YA.roa
File:                     FEGqNE7AZdLccSm_Ooe_X1LJ_YA.roa (raw, json)
Hash identifier:          dI6QvoIAEm2FlAl6rw3mqTVggeTpiCJOb2/EhyCa1xs=
Subject key identifier:   14:41:AA:34:4E:C0:65:D2:DC:71:29:BF:3A:87:BF:5F:52:C9:FD:80
Certificate issuer:       /CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Certificate serial:       018936C9041D689A59F62C169C00234876B9
Authority key identifier: 26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/FEGqNE7AZdLccSm_Ooe_X1LJ_YA.roa
Signing time:             Sat 08 Jul 2023 18:34:50 +0000
ROA not before:           Sat 08 Jul 2023 18:34:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        103.112.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 15 Jul 2023 12:49:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:36:c9:04:1d:68:9a:59:f6:2c:16:9c:00:23:48:76:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267ef37f3dcd607f9871d239502badbf9b56bc57
        Validity
            Not Before: Jul  8 18:34:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1441aa344ec065d2dc7129bf3a87bf5f52c9fd80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b1:af:ab:ce:f8:3c:29:a1:e9:d1:c7:13:1d:
                    de:36:ab:e9:c6:cd:5e:3c:be:5c:a2:70:95:f9:8e:
                    d0:00:6c:eb:c3:d0:21:d4:5f:a6:d4:a4:7d:fb:dc:
                    26:5f:f7:34:f5:34:e4:e7:13:4c:2c:e4:69:5e:3a:
                    ce:96:05:e5:6a:3d:fe:71:a6:05:d8:d5:57:ae:8d:
                    cb:47:28:6b:e3:77:3a:5f:b3:30:38:5d:6d:7e:93:
                    b2:b9:f9:64:40:b9:a7:ae:56:ea:05:a5:f7:b1:60:
                    7c:aa:36:8e:d0:a0:26:bd:cb:8f:71:fb:9a:11:63:
                    f7:98:ce:a6:b1:16:83:d5:ee:a1:e9:79:57:5a:a1:
                    b3:7a:d0:17:de:e2:43:22:62:ec:09:05:fd:84:42:
                    22:12:45:c6:6e:60:d1:4b:0c:d4:5f:f9:b4:38:67:
                    59:9c:14:6e:58:7e:ba:1f:2b:50:ad:04:b5:b8:73:
                    7c:29:b9:bf:6d:06:b2:ef:62:a0:f6:43:2f:5c:22:
                    f1:08:9c:09:2e:c4:d5:98:cb:50:41:45:71:95:0b:
                    38:0e:c5:35:54:9a:e9:27:a2:4c:64:b9:e6:0c:52:
                    47:9a:84:07:c5:b8:0b:b5:94:eb:8f:9e:9e:89:ee:
                    6d:ef:64:79:d1:e7:9f:29:83:3f:23:0e:4f:58:5e:
                    38:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:41:AA:34:4E:C0:65:D2:DC:71:29:BF:3A:87:BF:5F:52:C9:FD:80
            X509v3 Authority Key Identifier:
                keyid:26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/FEGqNE7AZdLccSm_Ooe_X1LJ_YA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:bc:b2:f7:99:22:1c:4f:f2:1b:a6:34:9b:f6:27:09:e1:d0:
         4a:5d:aa:92:a1:59:05:31:bb:16:e0:64:7c:12:0e:88:8d:6a:
         80:cc:27:2f:b2:53:e5:d4:8c:69:14:7e:42:ec:a0:b3:10:15:
         df:b3:94:b2:2c:a5:50:84:57:9a:cc:37:c8:fd:eb:2c:5b:8c:
         a2:4b:d4:be:30:82:0b:9e:0d:78:00:9e:06:c3:82:2d:2e:51:
         47:32:b0:31:8a:30:96:79:e7:ea:c9:17:22:e9:13:be:1f:1d:
         b0:fb:1e:7c:8d:b5:51:14:7d:aa:6e:40:75:78:b2:d5:07:3b:
         b7:1e:d7:ea:db:5c:09:61:4e:17:ed:42:90:be:b9:f6:d7:bb:
         0c:2f:d8:55:e0:82:32:cc:b7:b1:7c:25:ce:78:dc:a0:57:dd:
         26:13:43:73:fd:66:f0:51:c2:12:67:43:37:80:81:49:a2:43:
         4e:ef:62:e7:40:a9:1f:20:0d:5b:40:67:7d:25:b5:43:f6:aa:
         7f:a0:59:7d:49:e5:e5:f8:be:7d:d4:f4:97:ef:b7:8d:de:e2:
         7b:49:2a:82:1e:b4:66:25:e9:3c:94:06:35:a5:59:0d:6b:24:
         10:fc:e5:cf:18:78:cb:c0:60:7b:21:dc:ee:0f:ab:03:83:23:
         ea:74:8f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:31 2024 by rpki-client on console-fra.rpki-client.org