Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/8FXuMbFtgb5dQpXv2GKcRp3Lq88.roa
File:                     8FXuMbFtgb5dQpXv2GKcRp3Lq88.roa (raw, json)
Hash identifier:          eyRmqE9mMsBxv7/uoWX2uTd41tOrsBzeDHSQBC3f38M=
Subject key identifier:   F0:55:EE:31:B1:6D:81:BE:5D:42:95:EF:D8:62:9C:46:9D:CB:AB:CF
Certificate issuer:       /CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Certificate serial:       018CC2DB02AC3C1800C5CBBAAA0D2CC28870
Authority key identifier: E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/8FXuMbFtgb5dQpXv2GKcRp3Lq88.roa
Signing time:             Mon 01 Jan 2024 02:29:42 +0000
ROA not before:           Mon 01 Jan 2024 02:29:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210767
IP address blocks:        5.183.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 29 Jan 2024 13:09:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:02:ac:3c:18:00:c5:cb:ba:aa:0d:2c:c2:88:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
        Validity
            Not Before: Jan  1 02:29:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f055ee31b16d81be5d4295efd8629c469dcbabcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:21:b2:f7:c7:0a:0c:12:68:f2:7d:c1:d1:59:
                    71:cd:80:d6:5b:6b:45:d8:a2:a9:ea:0f:01:f5:ff:
                    6d:7b:d8:76:82:21:1c:e1:3e:e0:c1:e2:0c:b7:45:
                    86:3f:6c:85:ba:f5:c2:37:33:5a:4c:b3:50:78:05:
                    fd:de:e0:e2:a4:e1:4a:14:dd:39:91:75:4b:65:40:
                    56:ca:0f:b8:dd:f8:39:30:c8:ca:57:1f:d4:c6:2e:
                    d8:e0:10:de:32:ba:31:0a:e8:46:30:4c:bb:03:bb:
                    64:4f:aa:92:9a:ad:11:52:26:cf:b7:c4:b2:45:45:
                    70:c4:6a:ba:78:be:8e:85:00:3a:85:cc:db:e1:91:
                    20:00:c2:14:42:b6:f0:f1:05:21:8a:c4:55:77:a6:
                    ba:89:f1:10:40:fb:72:4b:90:c8:0d:f5:05:f0:34:
                    33:53:dd:83:5e:a2:57:b8:10:23:8f:14:9d:c7:16:
                    e6:a2:03:b0:f4:ad:40:40:06:30:9b:f1:87:4e:a3:
                    9a:03:97:8f:43:81:20:0a:52:96:91:83:5f:21:d5:
                    f5:ec:3d:7a:c1:74:ec:85:68:6d:30:86:22:de:f4:
                    e3:24:91:e9:7a:63:ba:d3:6e:d2:94:02:86:92:50:
                    fe:78:d9:fa:a5:e4:d8:6e:2e:61:12:d9:3f:2b:32:
                    d5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:55:EE:31:B1:6D:81:BE:5D:42:95:EF:D8:62:9C:46:9D:CB:AB:CF
            X509v3 Authority Key Identifier:
                keyid:E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/8FXuMbFtgb5dQpXv2GKcRp3Lq88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:d0:46:81:cb:80:64:71:4e:b1:7b:44:4c:ac:b9:93:c0:01:
         9f:5c:1c:ee:49:50:30:af:55:0d:01:87:1d:56:af:ae:9b:7c:
         bb:8c:7b:8a:ca:e3:ec:23:41:73:bf:86:a5:c8:5c:d7:50:e6:
         2a:23:22:be:45:3c:6e:30:0f:db:b1:90:78:b1:6a:ab:1f:bd:
         17:eb:0e:3b:cd:99:06:28:1d:d6:59:f1:d6:45:d0:dd:af:ee:
         90:fb:94:44:3a:3c:5d:80:3c:5e:a5:e0:6b:c9:03:b3:7a:73:
         95:5d:20:ca:2e:6b:94:cb:54:10:40:7b:8e:7d:16:47:36:ea:
         66:91:92:b8:62:7a:d1:da:81:0f:ac:61:88:55:6b:ed:d9:e4:
         f4:f3:c1:78:0f:2d:37:57:05:b0:9e:f0:75:3d:46:b8:2f:1a:
         56:8d:f2:1f:81:d4:51:69:52:6b:78:8d:00:2f:7f:0c:ba:8a:
         c1:fb:37:ec:a2:df:a5:b5:dd:93:08:2e:bf:ee:1b:4d:e2:9c:
         dc:9c:94:cd:56:98:45:41:18:0e:bc:8d:98:91:7b:3a:2b:40:
         a9:97:56:b8:78:50:8d:45:8e:fe:49:d9:25:a7:73:67:8e:fd:
         0a:1f:f2:40:c1:63:c2:44:63:d4:9f:0e:0c:71:ba:2a:2c:8d:
         d8:05:85:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:23 2024 by rpki-client on console-ams.rpki-client.org