Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/3u96TA3FXFHoIMXko_-HSPy8Azw.roa
File:                     3u96TA3FXFHoIMXko_-HSPy8Azw.roa (raw, json)
Hash identifier:          gploFhS0tBy2xMym1z/KSxu2RVuk+GowLn94IDYwgeE=
Subject key identifier:   DE:EF:7A:4C:0D:C5:5C:51:E8:20:C5:E4:A3:FF:87:48:FC:BC:03:3C
Certificate issuer:       /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial:       018901B7E9B6504E54B88D27CA75AEC1F3A6
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/3u96TA3FXFHoIMXko_-HSPy8Azw.roa
Signing time:             Wed 28 Jun 2023 11:16:17 +0000
ROA not before:           Wed 28 Jun 2023 11:16:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42846
IP address blocks:        104.247.162.0/24 maxlen: 24
                          104.247.161.0/24 maxlen: 24
                          104.247.160.0/24 maxlen: 24
                          104.247.165.0/24 maxlen: 24
                          104.247.164.0/24 maxlen: 24
                          104.247.163.0/24 maxlen: 24
                          104.247.166.0/24 maxlen: 24
                          104.247.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 10 Oct 2023 04:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:01:b7:e9:b6:50:4e:54:b8:8d:27:ca:75:ae:c1:f3:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
        Validity
            Not Before: Jun 28 11:16:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=deef7a4c0dc55c51e820c5e4a3ff8748fcbc033c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8a:2a:ce:27:ca:73:3d:8e:96:0b:8e:f3:db:
                    d8:a8:37:55:05:30:18:29:02:f0:49:80:9f:5f:90:
                    29:8a:3e:f4:f0:bc:35:7f:e9:0b:11:3e:b1:71:de:
                    ce:95:96:89:cd:68:07:56:f1:4b:85:1f:d3:1c:0f:
                    a8:06:5b:53:c2:7b:d5:44:28:a9:af:e3:a1:86:0f:
                    fe:6d:d1:8d:18:8c:62:04:00:73:9a:cf:e0:5d:ad:
                    7e:22:79:08:ab:43:28:77:fd:8e:45:ca:10:d4:1f:
                    2c:2b:0a:c4:dd:df:e5:93:8f:53:5a:f8:b4:f7:85:
                    64:e4:08:0b:1f:c1:82:60:12:b5:6e:7a:00:52:5f:
                    bd:e4:31:9a:ca:97:66:79:24:ee:6b:ab:30:42:d3:
                    ec:25:29:9e:8e:39:1e:a6:80:ea:2b:48:eb:af:40:
                    e6:71:0c:30:ae:db:ea:ad:37:e3:24:fb:9e:38:5e:
                    a6:79:52:53:9c:7c:d4:88:31:a5:51:b0:19:f5:1f:
                    79:d2:d3:93:62:6f:ff:26:90:f3:13:01:7d:6c:f4:
                    ff:e5:b9:04:39:0b:07:b9:14:a5:cf:c4:fe:5a:7f:
                    11:e7:8f:58:a1:82:cd:b2:29:f7:63:88:d7:1d:d1:
                    02:0b:ba:3f:7d:22:0a:96:21:21:56:80:30:80:d9:
                    b3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EF:7A:4C:0D:C5:5C:51:E8:20:C5:E4:A3:FF:87:48:FC:BC:03:3C
            X509v3 Authority Key Identifier:
                keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/3u96TA3FXFHoIMXko_-HSPy8Azw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         11:06:c3:cb:07:53:fc:02:99:64:69:cb:2a:90:b3:8e:9b:9d:
         ad:7b:79:b3:91:ea:5d:2d:68:cb:ed:14:96:27:2c:2e:62:01:
         fc:32:d4:1f:c8:54:6b:cb:b6:2e:7f:e4:9a:a8:f4:d6:2b:e0:
         dd:fc:7b:d1:0d:ed:ae:34:b7:05:cf:e1:91:0e:91:a8:64:2e:
         b3:d9:1f:3e:2a:3c:5c:1d:b7:55:75:b6:bb:4a:80:a3:16:fa:
         11:d3:23:0e:a8:4f:d3:4a:ac:c9:fb:93:81:31:de:6c:db:0f:
         1c:42:0e:5f:8c:08:fc:14:b7:d9:3c:0d:0a:a8:a3:c7:b8:e5:
         80:f3:fa:bc:15:10:9e:8e:53:05:ab:31:f1:a7:a3:8a:43:98:
         ee:1f:cc:3a:12:55:6b:83:4b:d9:12:d5:1f:9b:42:9f:18:cd:
         78:ae:93:4c:79:c7:14:57:40:92:51:ab:8b:ce:76:29:83:d6:
         d0:8d:b0:40:16:38:b7:b5:a1:b8:92:d7:4e:ca:67:7e:a7:22:
         ee:8d:3d:d3:af:2f:b7:3c:ab:ab:64:98:e2:7e:fe:20:df:7d:
         59:85:d9:fa:65:94:ac:72:f7:6f:62:c2:e6:22:0e:8c:19:84:
         07:37:1b:fc:e7:8c:fc:ac:1d:c6:88:75:89:d8:bc:13:73:6f:
         5c:2f:bb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:08 2024 by rpki-client on console-fra.rpki-client.org