Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/AUqpe3--AK-Ij8kmbzAXdLnRRBM.roa
File:                     AUqpe3--AK-Ij8kmbzAXdLnRRBM.roa (raw, json)
Hash identifier:          mMZEBts/TLe8UcEOHe2uHpM2LGBjwvkTRxjeB58TfZ0=
Subject key identifier:   01:4A:A9:7B:7F:BE:00:AF:88:8F:C9:26:6F:30:17:74:B9:D1:44:13
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       01856FF98DB935C4C2E1BF4ACFA2C1F8FC6C
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/AUqpe3--AK-Ij8kmbzAXdLnRRBM.roa
Signing time:             Mon 02 Jan 2023 00:55:03 +0000
ROA not before:           Mon 02 Jan 2023 00:55:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206511
IP address blocks:        213.169.36.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f9:8d:b9:35:c4:c2:e1:bf:4a:cf:a2:c1:f8:fc:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Jan  2 00:55:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=014aa97b7fbe00af888fc9266f301774b9d14413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:84:42:8d:06:ab:94:47:2d:2f:77:11:1b:be:
                    af:4f:6f:e1:29:73:34:f7:d3:ed:fd:64:04:36:2d:
                    33:a7:90:5d:a3:bf:65:9f:b2:12:87:16:28:80:06:
                    fe:46:f9:35:26:ba:6e:57:ce:27:82:e1:a3:a3:6b:
                    d2:c0:b9:25:40:fc:dc:b6:1f:c6:57:a0:84:17:95:
                    42:29:80:d1:71:36:cb:d9:42:b8:9a:df:84:c9:88:
                    fe:cf:8b:6d:d0:fe:a1:5e:3e:0c:e2:f2:93:44:22:
                    c3:bb:cd:89:a0:66:50:5f:c5:53:9f:29:0a:b6:20:
                    ec:d7:77:10:2b:16:47:09:de:99:19:ca:d2:cd:a2:
                    82:34:94:30:9e:d6:d6:ea:27:dc:fd:dd:99:8a:51:
                    9d:f3:b8:66:a5:95:29:0a:43:47:59:0c:8a:73:1c:
                    79:b5:54:11:b9:a5:67:98:bd:4e:67:c5:0e:3f:ba:
                    2d:ab:e9:db:93:16:32:62:10:cd:70:18:ef:64:0a:
                    7e:5b:a2:a6:2b:ee:ba:23:21:b3:d7:9f:b0:0a:c5:
                    4c:fc:3e:6d:f4:6a:2b:3f:63:79:2e:25:4a:e4:26:
                    c1:ef:5a:06:43:1c:cb:e4:4c:1e:23:b9:c6:3d:6e:
                    73:b7:b6:7e:31:bf:b6:91:dc:d3:bd:0e:da:43:02:
                    a3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4A:A9:7B:7F:BE:00:AF:88:8F:C9:26:6F:30:17:74:B9:D1:44:13
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/AUqpe3--AK-Ij8kmbzAXdLnRRBM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.169.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:7b:4d:be:27:8a:ef:ef:9e:c8:07:c4:f7:67:e5:39:f2:92:
         1a:29:fa:20:14:5e:d3:b2:7a:45:77:fd:4c:85:59:ec:61:be:
         74:c5:a4:2d:8c:ee:53:11:88:83:b8:8d:89:3b:21:1d:7b:e3:
         dc:ed:a1:96:9f:1c:14:66:03:e0:1c:3b:fc:ff:1a:84:00:d3:
         0d:18:f5:5c:cf:b9:21:8a:da:39:5e:e3:96:79:1d:ad:3a:cf:
         03:4f:ff:7c:6c:c2:b2:d7:f0:12:8c:b2:1e:1f:15:ec:9f:cb:
         51:b7:78:b7:22:5d:75:51:77:62:b2:e3:c9:9c:68:ad:d6:24:
         9a:88:eb:51:b6:eb:50:f3:1d:d6:02:ad:7b:d3:ae:84:bf:e7:
         30:11:62:7c:20:d2:b0:86:7f:65:fa:9f:fb:88:aa:ae:51:4a:
         ed:bf:fc:81:2f:5f:9c:af:64:4e:c4:e2:34:f5:53:59:95:f2:
         80:94:d1:a9:d2:79:30:c1:02:eb:ba:13:ba:82:91:fd:98:fc:
         b7:7f:f9:67:1c:23:5d:02:cd:69:18:cd:72:df:cf:a2:4f:e6:
         7c:df:10:ba:10:f8:82:0f:1d:2b:b4:ca:64:e7:38:76:dc:c7:
         c3:da:04:a8:f6:0d:5a:33:d5:f0:55:0f:79:46:69:86:91:9e:
         2c:92:81:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:06 2024 by rpki-client on console-fra.rpki-client.org