Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7rEFQfh_o-945uhHHiHQfjZ1By8.roa
File:                     7rEFQfh_o-945uhHHiHQfjZ1By8.roa (raw, json)
Hash identifier:          Li0JJljpsSmcEx4EoQwhQaZKaYxt+YknhNsbVYEheQw=
Subject key identifier:   EE:B1:05:41:F8:7F:A3:EF:78:E6:E8:47:1E:21:D0:7E:36:75:07:2F
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       0186C07CF736B2AD2706F032B20E67052261
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7rEFQfh_o-945uhHHiHQfjZ1By8.roa
Signing time:             Wed 08 Mar 2023 09:11:00 +0000
ROA not before:           Wed 08 Mar 2023 09:11:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60781
IP address blocks:        163.5.178.0/24 maxlen: 24
                          163.5.187.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 23 Mar 2023 17:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c0:7c:f7:36:b2:ad:27:06:f0:32:b2:0e:67:05:22:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Mar  8 09:11:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eeb10541f87fa3ef78e6e8471e21d07e3675072f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:df:fb:4c:4c:39:ab:35:9b:0a:ca:d7:0b:95:
                    29:1e:28:1e:e5:1c:52:f6:2e:7b:59:83:4e:c3:c5:
                    df:7c:75:a5:7c:e8:0b:27:3f:9f:1a:8b:45:c2:72:
                    15:73:c3:e6:17:9d:e0:4d:98:30:b1:96:1b:03:75:
                    06:fe:9b:ce:31:7c:87:26:01:3c:c7:7c:58:98:45:
                    6e:a7:90:89:9d:5d:1e:00:ae:5c:13:8c:f0:9d:13:
                    79:f6:ba:6b:e8:f5:ac:23:e7:3c:9c:0c:33:34:b0:
                    66:58:09:a9:ac:c3:20:3e:6f:4b:da:80:c5:7b:0b:
                    95:02:c8:30:8d:85:ec:ed:17:b3:d2:37:32:e4:fc:
                    b6:cb:c9:56:5c:e1:8a:f0:82:40:5b:72:33:ef:90:
                    73:6e:3d:10:47:8f:33:80:33:81:99:09:89:51:77:
                    7a:42:92:70:65:2e:99:30:ca:d3:bc:ef:92:04:60:
                    69:da:8e:96:42:69:b2:b9:45:57:a4:cd:78:f4:9e:
                    33:25:66:28:30:02:09:3d:13:24:61:57:81:18:a6:
                    7e:11:f9:b7:7c:3b:38:c3:b2:72:da:78:ee:1a:10:
                    d9:2d:85:7c:7c:11:0a:24:4e:df:1e:36:89:9d:d2:
                    88:04:88:d7:cf:81:5b:cf:c0:a1:db:e8:c4:b9:d7:
                    bd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B1:05:41:F8:7F:A3:EF:78:E6:E8:47:1E:21:D0:7E:36:75:07:2F
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7rEFQfh_o-945uhHHiHQfjZ1By8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.178.0/24
                  163.5.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:c4:5c:1f:c2:1e:ad:29:af:0f:9d:2b:28:9b:d5:c3:37:6e:
         25:d4:77:ce:23:71:f4:90:fe:81:86:8f:fd:0e:1e:00:5b:85:
         96:50:ef:56:81:ec:71:3d:a5:0d:57:df:ef:bd:5e:60:4e:ac:
         ed:d3:b8:5f:a4:6c:dc:4f:59:5f:57:a7:9e:28:d9:46:ab:cb:
         d6:dd:e6:06:ff:9b:53:2f:75:6b:50:41:87:fc:57:3a:ba:51:
         46:bb:b3:39:48:f3:95:0c:84:65:9c:71:a3:89:b0:3c:a9:cb:
         8c:61:3e:d4:ff:cc:af:b3:34:14:f0:84:24:5f:83:bd:25:3d:
         30:a0:15:df:a2:78:9e:d4:25:37:a7:77:26:a6:2d:7f:26:96:
         13:bd:49:82:aa:13:de:4e:23:a2:b5:92:94:24:01:78:93:21:
         96:bc:b1:fb:bf:af:a9:b0:27:4c:0b:fe:ec:30:23:63:bc:59:
         c6:fd:78:fd:6c:91:61:56:0d:32:6b:bd:f6:f2:d8:5a:c5:a9:
         d7:19:35:06:7a:6e:cd:5e:4c:da:c1:8a:e3:d1:64:c0:63:60:
         32:d5:5b:5f:83:b7:b8:ed:4c:12:ac:53:18:9a:29:5a:46:1a:
         de:c2:03:b4:6c:88:d6:13:94:ad:34:08:ca:64:ff:b9:0d:f1:
         2e:38:c7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:03 2024 by rpki-client on console-fra.rpki-client.org