Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/Ulx-uWyVwGzY1Pm_UaIIdzMAPNs.roa
File:                     Ulx-uWyVwGzY1Pm_UaIIdzMAPNs.roa (raw, json)
Hash identifier:          C8wEUHBiJYnLNUS/rYqZTV+IN/M0u3Rw2jh8r70N7xs=
Subject key identifier:   52:5C:7E:B9:6C:95:C0:6C:D8:D4:F9:BF:51:A2:08:77:33:00:3C:DB
Certificate issuer:       /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial:       01857139CCEB8480EB8F40F5094FDEE96991
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/Ulx-uWyVwGzY1Pm_UaIIdzMAPNs.roa
Signing time:             Mon 02 Jan 2023 06:44:51 +0000
ROA not before:           Mon 02 Jan 2023 06:44:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60195
IP address blocks:        185.238.61.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:39:cc:eb:84:80:eb:8f:40:f5:09:4f:de:e9:69:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
        Validity
            Not Before: Jan  2 06:44:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=525c7eb96c95c06cd8d4f9bf51a2087733003cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:35:c3:b0:11:b8:e2:e9:f9:5b:bc:00:dd:6e:
                    d6:14:f8:df:ad:ca:55:5c:6b:1e:60:15:3a:bc:16:
                    f5:f7:b9:38:e0:df:0e:57:51:a2:91:21:4a:c9:6b:
                    b6:b0:2a:b6:7a:6c:b9:0e:e6:e8:75:1b:5b:c3:f2:
                    4c:f5:e8:24:23:bc:8a:99:f5:c7:69:36:3e:f1:ac:
                    90:52:66:08:93:33:08:18:b4:ef:6a:d4:19:85:a7:
                    fd:60:dc:a5:5b:a6:37:c0:de:72:38:a6:e3:1a:48:
                    6e:a9:41:ca:cc:f2:cb:44:28:cc:c1:7b:b9:6e:0c:
                    4d:a7:17:01:c2:43:de:0e:56:a0:6e:e6:8b:60:5c:
                    43:5a:18:31:e5:f3:9f:9c:dc:fe:8b:14:9f:bc:55:
                    4e:0d:b7:64:1d:0c:e5:0a:cf:c0:1a:ac:6e:21:5c:
                    23:cc:89:ee:6f:82:e9:aa:33:6d:e7:c6:99:ec:ca:
                    89:85:45:f9:f3:a0:b0:79:f8:86:d6:29:7a:11:30:
                    cf:5d:a3:b2:04:30:a1:f0:ff:40:54:fa:7d:d1:30:
                    10:81:4f:fa:06:4e:05:8d:cd:89:16:67:58:5a:4b:
                    75:43:aa:1a:1b:a6:1b:ca:d5:5c:bf:7e:6e:e1:86:
                    36:c5:ec:4b:53:1a:54:87:02:24:aa:21:b5:65:85:
                    54:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5C:7E:B9:6C:95:C0:6C:D8:D4:F9:BF:51:A2:08:77:33:00:3C:DB
            X509v3 Authority Key Identifier:
                keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/Ulx-uWyVwGzY1Pm_UaIIdzMAPNs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.238.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:71:56:02:30:94:3f:e4:5f:02:9a:c0:58:c0:3a:3c:63:22:
         9d:0c:bd:37:ca:a3:b9:51:ba:ec:19:9d:9f:c1:42:05:a2:28:
         c6:3f:9d:58:2c:f2:b9:a8:74:59:0c:65:a7:57:33:c2:a8:ae:
         c3:7d:34:13:a5:cb:e3:c5:31:4a:6f:b2:35:a8:33:93:22:7d:
         49:38:97:4e:de:16:ed:04:8c:e9:40:a9:b4:b2:fb:88:46:55:
         cd:28:89:30:88:d0:fa:3c:f8:ad:18:8f:15:26:09:a2:63:d1:
         a1:d0:50:37:31:cc:f8:da:b7:3e:da:ff:18:65:ed:9e:5a:32:
         23:2a:5d:2e:cf:cd:b7:04:ee:ea:9e:60:fb:e6:85:79:23:58:
         6b:b3:ef:8a:e2:6d:2b:b2:6b:42:f8:f7:dc:de:74:81:67:7b:
         c1:84:0f:f2:b1:24:12:26:e2:9c:e2:da:b3:85:48:89:b9:07:
         91:16:7d:ac:6b:4e:30:5a:bd:bf:9e:e1:3a:a4:60:b5:9c:63:
         4b:7f:99:4c:f2:e9:85:ae:62:2d:50:b3:df:29:44:36:d2:39:
         fd:c8:da:2c:2d:b6:70:57:05:8a:37:5a:22:c8:4b:ae:bc:74:
         b8:1e:cd:5c:5a:c7:35:b2:52:fb:38:fb:1f:25:bb:6e:b5:b8:
         1d:8f:96:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:29 2024 by rpki-client on console-ams.rpki-client.org