Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/JsrzFfVsu4_ntdk7SaTGv1KbHwM.roa
File:                     JsrzFfVsu4_ntdk7SaTGv1KbHwM.roa (raw, json)
Hash identifier:          Vb3ivtnOcuhxSLEX5HLfsFGQ6EY3YqCDxPU3YYFDhX0=
Subject key identifier:   26:CA:F3:15:F5:6C:BB:8F:E7:B5:D9:3B:49:A4:C6:BF:52:9B:1F:03
Certificate issuer:       /CN=8fe613beebb7ef36992c0491ad13b26707057260
Certificate serial:       01856E01BBBFC916EAF38BF774CDC1929BDA
Authority key identifier: 8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/JsrzFfVsu4_ntdk7SaTGv1KbHwM.roa
Signing time:             Sun 01 Jan 2023 15:44:45 +0000
ROA not before:           Sun 01 Jan 2023 15:44:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201887
IP address blocks:        5.255.128.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:01:bb:bf:c9:16:ea:f3:8b:f7:74:cd:c1:92:9b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fe613beebb7ef36992c0491ad13b26707057260
        Validity
            Not Before: Jan  1 15:44:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26caf315f56cbb8fe7b5d93b49a4c6bf529b1f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7b:f3:48:c3:9f:6b:56:60:0e:71:53:f1:d6:
                    d0:47:87:04:c2:ce:09:49:c2:ec:cb:9c:79:46:c0:
                    02:42:28:f7:28:42:86:cc:1e:e9:ea:1d:63:0e:25:
                    75:d6:d4:58:f5:57:26:8f:1e:29:88:02:03:52:b0:
                    2b:91:e6:a7:1a:57:67:24:c2:68:11:2b:9f:c1:31:
                    ba:48:75:5a:3b:81:f8:95:7b:dc:ea:db:ae:8b:bf:
                    22:5c:7b:b1:33:f2:ba:ef:c5:6e:68:af:50:93:d4:
                    43:68:f9:40:d4:47:31:00:71:fc:24:11:ed:5a:66:
                    b5:d8:ce:be:33:ac:aa:23:1c:3d:a9:d1:13:af:58:
                    32:d4:e7:3f:ac:11:82:23:db:04:7e:4d:ba:63:c1:
                    5c:3b:62:f5:ef:46:85:5d:be:34:98:86:3a:91:d5:
                    6e:78:c1:c6:06:f7:a1:97:4f:c1:b6:6c:45:2a:71:
                    b8:34:8d:24:29:30:6f:a6:4d:1d:81:e7:ef:de:c6:
                    e5:78:d4:7b:f4:c8:2d:c3:96:f7:e5:2a:97:45:c9:
                    08:b4:d0:2f:30:66:42:7d:da:f7:fb:ed:43:64:9e:
                    a8:b4:18:c2:09:99:5e:b7:65:b1:c2:cc:d4:8f:b2:
                    27:eb:c8:ad:1a:2a:48:7f:2b:83:0e:4f:b2:27:27:
                    a4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CA:F3:15:F5:6C:BB:8F:E7:B5:D9:3B:49:A4:C6:BF:52:9B:1F:03
            X509v3 Authority Key Identifier:
                keyid:8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/JsrzFfVsu4_ntdk7SaTGv1KbHwM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.255.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         67:bf:52:74:01:d6:5f:3f:81:5c:69:5a:aa:bd:00:d6:40:52:
         ab:97:a5:5d:b1:5d:30:b4:33:a0:47:3e:fe:bc:f7:b0:19:4a:
         0f:25:a9:7e:a1:14:14:dc:72:2f:9a:b5:3b:a1:5b:09:fd:91:
         21:b7:69:38:58:94:30:9c:92:d0:1f:0a:58:de:03:18:38:bd:
         e3:24:19:1c:ff:55:b6:4b:05:fa:93:a1:39:12:e3:b5:96:e1:
         d4:a8:da:e8:61:44:af:b1:99:79:1f:83:8e:c4:b4:9c:b1:ae:
         82:e4:de:60:27:ea:c1:bf:b6:75:a0:1b:6a:0d:01:f9:a0:0a:
         b3:8e:41:13:72:e2:22:cb:b8:b8:1d:b8:6c:4d:ef:90:e3:d9:
         b8:55:e0:42:b2:fb:ed:30:90:8b:d5:60:2c:a0:7a:c0:f1:38:
         d8:95:8e:f1:b1:2a:01:20:80:b1:22:42:b3:6d:88:54:e6:94:
         0a:7a:fb:7a:6e:16:0a:50:f4:f5:b2:d5:85:7b:1d:9c:e9:26:
         1d:5b:38:76:2f:81:56:f6:bd:b9:ea:0b:68:d2:95:c4:9e:9e:
         db:25:43:e9:56:2a:b7:f7:23:b9:40:a2:80:d3:c9:e7:2d:80:
         f1:0c:4b:b6:1e:75:10:de:0c:10:1c:01:49:f0:7c:18:99:9c:
         f5:da:f6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:20 2024 by rpki-client on console-ams.rpki-client.org