Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/7B6fJe8I8GEm0jsfDtDpRx4vRYc.roa
File:                     7B6fJe8I8GEm0jsfDtDpRx4vRYc.roa (raw, json)
Hash identifier:          re7ZLj2Whc8IcostUj6cItNERPqorOSz5orGTmGL7mo=
Subject key identifier:   EC:1E:9F:25:EF:08:F0:61:26:D2:3B:1F:0E:D0:E9:47:1E:2F:45:87
Certificate issuer:       /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial:       0188B3D5585C3DB030061BED3D817AFA69FF
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/7B6fJe8I8GEm0jsfDtDpRx4vRYc.roa
Signing time:             Tue 13 Jun 2023 08:18:03 +0000
ROA not before:           Tue 13 Jun 2023 08:18:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7155
IP address blocks:        193.77.30.0/24 maxlen: 24
                          193.77.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b3:d5:58:5c:3d:b0:30:06:1b:ed:3d:81:7a:fa:69:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
        Validity
            Not Before: Jun 13 08:18:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ec1e9f25ef08f06126d23b1f0ed0e9471e2f4587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:55:ad:34:9b:47:b3:65:b5:c0:5f:69:3f:c6:
                    8a:03:f2:76:c5:3e:9e:b2:ad:18:52:b6:1c:48:d4:
                    50:cd:d2:de:97:62:c1:c3:a1:02:45:7a:70:29:7f:
                    4e:d2:86:bf:ff:45:87:2b:3a:dc:e8:1c:28:ee:31:
                    4d:52:87:35:e4:73:b2:cd:3a:f3:9f:a3:49:1d:59:
                    37:ea:8a:b4:bf:ff:17:89:45:cf:fa:6a:60:8c:f2:
                    2e:1d:5f:e2:ab:20:2a:bb:da:b2:59:86:a5:b7:eb:
                    fe:5b:91:6d:6d:4c:52:12:87:c6:4a:ac:7c:09:64:
                    f2:ce:a3:4f:c0:e1:04:31:ee:5f:5a:06:04:27:fd:
                    7d:d9:27:43:25:1b:4e:b3:ac:f4:d6:d3:d9:9f:86:
                    a3:64:e0:9e:28:66:a8:55:cc:18:38:2d:c8:ac:b7:
                    06:07:e0:3b:8f:8f:3e:02:86:cf:ca:3f:fb:b7:9d:
                    3c:d8:d3:96:9a:be:b2:dd:9c:5a:9f:5a:e5:10:52:
                    b1:0e:25:1c:72:03:9a:05:f2:e5:e3:87:1c:69:91:
                    4d:5d:60:3d:c6:0c:44:ef:b0:a0:cf:1f:af:10:45:
                    48:da:9a:61:fc:3c:ea:22:00:06:f4:c4:04:9a:e9:
                    cf:65:c7:a0:4c:74:e8:b6:11:49:14:7a:70:cb:9e:
                    10:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1E:9F:25:EF:08:F0:61:26:D2:3B:1F:0E:D0:E9:47:1E:2F:45:87
            X509v3 Authority Key Identifier:
                keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/7B6fJe8I8GEm0jsfDtDpRx4vRYc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.77.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:71:2b:f5:d2:aa:ea:f9:2f:e2:f5:c6:29:65:da:87:87:e9:
         fe:7f:86:d9:e5:e9:3b:97:f2:ba:0f:63:09:19:c1:f4:b1:ba:
         3c:bc:c5:04:91:c5:0d:69:e4:cb:bb:fc:80:0f:fe:73:04:55:
         c4:a0:be:3d:85:3e:be:68:b9:44:1f:ba:60:f7:c2:a5:bd:69:
         75:c3:d2:2c:55:1d:8d:3f:5b:27:00:e3:87:bd:a3:aa:a1:54:
         f1:41:b0:bb:2f:b2:2d:91:09:7f:c0:68:7d:4c:97:7b:ba:3b:
         8d:aa:4c:1b:39:9f:9c:c7:66:76:7e:78:6d:0d:49:64:80:5d:
         55:fa:c3:44:8d:e1:85:f6:79:45:f5:02:3e:a8:b3:35:e3:3e:
         f7:ee:b3:9d:0b:ee:12:ba:c1:7f:3e:2a:ff:03:9b:a9:c3:16:
         77:25:7b:1c:cf:33:cb:1a:7b:09:ef:a7:f0:42:ab:bd:1b:bf:
         f4:cf:98:2c:1d:42:f1:98:39:54:5c:8c:67:3c:04:08:1f:bf:
         06:74:61:42:48:71:f4:36:9d:78:02:22:8e:97:e5:01:50:33:
         37:42:35:99:1a:5f:79:5a:3e:f8:ec:33:49:f6:2a:91:0c:7d:
         bb:83:44:fe:af:07:08:ac:0f:ba:08:94:ce:5c:1e:c2:7f:24:
         c5:db:46:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:12 2024 by rpki-client on console-ams.rpki-client.org