Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/LepBt0RJDty800SB3yR2nhORNH8.roa
File:                     LepBt0RJDty800SB3yR2nhORNH8.roa (raw, json)
Hash identifier:          rhXImWk9ZOS/I4afY1GoqyPVZZ+Ksv6pJW3eLfCMoo4=
Subject key identifier:   2D:EA:41:B7:44:49:0E:DC:BC:D3:44:81:DF:24:76:9E:13:91:34:7F
Certificate issuer:       /CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Certificate serial:       01856F2FE4B5678BE6A93F827565EECE7DDE
Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/LepBt0RJDty800SB3yR2nhORNH8.roa
Signing time:             Sun 01 Jan 2023 21:14:47 +0000
ROA not before:           Sun 01 Jan 2023 21:14:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206565
IP address blocks:        167.160.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:2f:e4:b5:67:8b:e6:a9:3f:82:75:65:ee:ce:7d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6
        Validity
            Not Before: Jan  1 21:14:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2dea41b744490edcbcd34481df24769e1391347f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:0c:12:59:77:0b:5c:e0:c4:a4:08:f7:80:
                    38:e4:18:75:5d:80:8e:97:13:64:8e:f7:e1:39:41:
                    3b:34:0e:a3:a4:66:40:80:67:39:4e:fe:c8:07:82:
                    53:70:50:8b:d7:ad:05:19:c6:1f:df:0f:3f:5e:29:
                    43:71:66:32:05:ce:80:a4:ae:6f:de:58:92:64:3f:
                    31:8e:c8:54:6e:e0:e7:e0:75:5e:4f:f4:58:43:8b:
                    d8:d7:87:78:b4:a0:40:03:10:49:42:52:29:de:cc:
                    a2:51:c3:55:d3:66:50:95:45:16:9f:cb:45:eb:65:
                    80:41:55:03:44:54:5b:2e:29:a5:7a:2b:8f:16:40:
                    98:ab:84:9d:b1:66:21:ab:70:aa:71:b3:da:bd:40:
                    e0:60:f8:20:78:e6:8e:73:95:1e:f7:ae:a5:ac:c9:
                    74:84:62:ff:cb:11:57:b4:f1:86:89:f7:46:9d:bf:
                    fe:a4:9d:f8:30:aa:a7:4d:a8:83:0d:83:df:d2:9e:
                    f7:bd:58:2b:59:32:a1:0c:e4:4e:55:d6:d1:1e:af:
                    b6:8d:d4:63:3d:de:c9:96:ce:fa:6d:df:d8:dc:a9:
                    97:78:91:9d:58:0d:3f:64:f8:57:d8:d1:62:6d:38:
                    7e:a4:0c:5c:29:1b:61:e2:8f:a7:0b:58:86:64:b0:
                    be:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EA:41:B7:44:49:0E:DC:BC:D3:44:81:DF:24:76:9E:13:91:34:7F
            X509v3 Authority Key Identifier:
                keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/LepBt0RJDty800SB3yR2nhORNH8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.160.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:e7:1f:64:3d:e8:9a:5f:aa:af:e4:bb:e7:10:94:58:79:5b:
         93:34:fd:01:0a:3e:94:39:b0:0e:b9:72:05:ab:81:18:d6:dd:
         2b:f2:5d:6a:8d:2b:36:75:47:b1:92:12:53:ba:81:74:de:fc:
         79:a7:d9:3b:cb:d0:58:2e:e4:4a:8c:54:3a:42:1b:5c:bd:65:
         33:77:75:89:7c:57:9d:41:b0:8e:25:8e:d6:9f:19:54:ef:64:
         8a:31:67:65:34:62:c8:7b:d5:a7:31:3c:0e:81:ae:6e:a3:26:
         5e:cf:22:44:3c:98:8b:0f:8b:3a:fe:f5:e9:21:a4:53:db:5c:
         9f:f8:cb:b4:e4:c1:1a:72:d9:bf:76:79:1a:06:6e:8f:c2:28:
         93:85:3f:45:07:ee:f8:2a:fe:5b:e3:28:37:76:35:5b:7f:60:
         79:07:74:e8:ce:ba:3b:4b:b0:24:e6:a7:5e:ff:26:f9:cb:bc:
         8b:8f:83:9a:a7:9b:88:9d:1b:ff:c8:a7:72:5f:f8:48:5c:dd:
         a2:31:19:18:69:dc:fc:2d:ff:7c:42:54:be:9f:e5:78:8c:d2:
         bd:d6:c3:ad:b0:c4:d3:04:a3:ca:a2:9e:a7:4f:f1:f1:d5:77:
         60:2c:66:22:5e:1a:4e:fe:4a:81:44:c2:a7:e6:1a:7d:81:63:
         a3:9c:c8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:08 2024 by rpki-client on console-ams.rpki-client.org