Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/LF9gdVkmhYQLRmmKyJNJo1P1Zzk.roa
File:                     LF9gdVkmhYQLRmmKyJNJo1P1Zzk.roa (raw, json)
Hash identifier:          abqiLQMcGs2yHQewJYuakyA9CS7JHxvHQs5nlCiNll0=
Subject key identifier:   2C:5F:60:75:59:26:85:84:0B:46:69:8A:C8:93:49:A3:53:F5:67:39
Certificate issuer:       /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Certificate serial:       01856D2F230A8BAB986A07636D1A5E7213BF
Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/LF9gdVkmhYQLRmmKyJNJo1P1Zzk.roa
Signing time:             Sun 01 Jan 2023 11:54:43 +0000
ROA not before:           Sun 01 Jan 2023 11:54:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        194.230.56.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:2f:23:0a:8b:ab:98:6a:07:63:6d:1a:5e:72:13:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
        Validity
            Not Before: Jan  1 11:54:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2c5f6075592685840b46698ac89349a353f56739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e1:28:90:02:00:af:ba:ae:78:bd:6d:28:75:
                    ae:50:b3:ec:41:af:53:14:34:8f:b0:16:27:8b:e7:
                    d9:9c:9e:73:a5:8d:84:53:13:58:59:3b:11:a1:9d:
                    33:dd:f7:5b:6e:b0:98:c4:01:78:97:08:0e:c4:f4:
                    36:79:81:8a:cc:6c:80:ec:df:01:ce:94:0f:a1:9f:
                    04:24:9e:b4:36:4b:a2:4b:72:13:55:57:81:e6:1c:
                    b5:68:dc:85:a3:98:91:c7:a3:58:ee:4c:65:7b:2c:
                    45:32:fc:2c:ae:64:1a:06:9d:e3:04:1f:73:58:f3:
                    27:e8:71:2b:88:dd:4e:78:54:80:c8:25:90:3c:ab:
                    e0:ca:64:de:1d:03:ab:18:76:80:6e:b0:58:6c:83:
                    3c:56:25:d3:25:54:a1:f0:a0:9f:06:45:d2:b9:59:
                    89:6a:eb:1e:e7:a4:ad:99:3d:75:39:b3:99:14:71:
                    ed:39:5a:15:42:e7:04:5c:2c:99:70:bc:ac:ad:4a:
                    5b:19:43:53:72:af:b0:39:7f:6c:6e:38:16:ae:ab:
                    f6:95:2a:52:63:3e:6a:ef:01:8a:ef:4e:e4:89:e3:
                    0d:ec:56:9e:ce:83:6e:3a:06:cb:2a:9d:62:c6:4e:
                    78:fa:ff:ab:ef:e8:68:db:ae:03:b5:ac:e8:37:61:
                    4f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5F:60:75:59:26:85:84:0B:46:69:8A:C8:93:49:A3:53:F5:67:39
            X509v3 Authority Key Identifier:
                keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/LF9gdVkmhYQLRmmKyJNJo1P1Zzk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.230.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:cd:44:bf:69:8c:1f:a0:81:5f:e9:2f:20:92:55:00:1e:4f:
         8c:57:dd:e2:60:81:7d:55:1f:29:dc:94:a0:22:59:af:11:05:
         ae:4d:20:98:b2:1d:dc:3e:4a:c6:d4:ed:2b:bc:88:6b:d6:54:
         10:d9:f1:d4:30:29:b0:18:a1:6c:7f:09:92:70:ae:76:67:28:
         f6:84:8a:3c:a0:dd:39:4e:b5:7b:41:be:7f:ea:2e:65:2f:83:
         7a:46:e2:e2:c7:83:bf:69:c8:fd:a5:3c:0e:61:c3:22:43:52:
         1a:ef:c9:7f:6d:72:67:a7:a7:90:47:c9:e7:a1:9b:ff:31:4e:
         fe:fe:3d:65:f5:f0:67:c0:f2:70:50:db:f5:86:0e:69:4e:32:
         68:8a:e5:aa:48:bb:d4:28:74:e2:69:fd:c5:35:45:2f:b3:50:
         77:76:8d:b8:15:9d:42:b0:65:c7:7d:d4:44:39:c0:0d:bf:57:
         77:f4:d1:dc:27:50:50:eb:39:db:d5:23:1d:f5:67:da:27:4f:
         45:99:71:a0:7c:c9:79:b0:f7:75:68:c3:be:cf:8e:97:3e:ad:
         5e:3a:36:05:43:4c:2e:c7:8a:25:2d:58:71:c0:42:3c:c7:5a:
         c8:95:0a:9f:a6:84:22:63:f3:e9:66:ac:57:78:38:6c:16:94:
         ed:cf:65:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:53 2024 by rpki-client on console-ams.rpki-client.org