Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ElnWRy_sKWmtTwot6yfIaKpAVGs.roa
File:                     ElnWRy_sKWmtTwot6yfIaKpAVGs.roa (raw, json)
Hash identifier:          SVxjbyuCQDm4BrKW035Rip+jF8jBJXi9wbSjYXoSC3g=
Subject key identifier:   12:59:D6:47:2F:EC:29:69:AD:4F:0A:2D:EB:27:C8:68:AA:40:54:6B
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       01896EC70F5165C5A39304807F81D6BB7745
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ElnWRy_sKWmtTwot6yfIaKpAVGs.roa
Signing time:             Wed 19 Jul 2023 15:31:26 +0000
ROA not before:           Wed 19 Jul 2023 15:31:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209940
IP address blocks:        163.5.145.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 08 Aug 2023 11:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:6e:c7:0f:51:65:c5:a3:93:04:80:7f:81:d6:bb:77:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Jul 19 15:31:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1259d6472fec2969ad4f0a2deb27c868aa40546b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:14:86:09:c2:fb:a5:91:3a:98:ab:23:a5:5b:
                    81:51:06:88:a4:5d:a4:61:83:87:c0:00:ac:2f:19:
                    1f:48:72:9e:35:20:eb:cd:06:5a:a5:89:bd:f9:1c:
                    3f:96:59:c8:d5:7f:84:e4:5c:8e:13:1d:87:03:a5:
                    33:b2:d8:a5:2f:76:50:53:dc:8f:04:5e:29:c7:c7:
                    04:81:ed:58:50:90:db:2d:e4:18:54:34:49:8f:f6:
                    d8:4a:04:49:5e:d3:0d:de:9a:cb:7b:26:ef:05:71:
                    62:6c:d5:f9:12:06:d1:1a:18:15:ae:8c:16:05:13:
                    9f:26:d9:ee:40:1a:a8:00:18:e4:db:5c:f4:f2:1d:
                    70:94:98:3d:8e:68:32:f4:96:59:b1:ab:61:e8:de:
                    b4:d8:5a:4f:b0:0e:51:e4:b2:a2:d5:b5:a2:c2:39:
                    9f:27:88:cd:5e:5d:f0:79:53:22:33:70:f9:78:93:
                    7d:18:24:22:22:d4:ae:e3:55:dc:50:6f:d9:3c:b8:
                    a6:e1:c5:1b:b1:57:5b:df:a8:5b:ce:20:65:1d:3b:
                    a4:ce:02:4f:86:bc:a5:70:35:a6:fa:dc:6a:2a:df:
                    da:a5:6a:66:9d:ab:19:1c:d2:1e:fb:9a:3e:20:65:
                    14:bb:37:94:a5:91:e7:c1:a9:06:61:41:c4:f3:2f:
                    3b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:59:D6:47:2F:EC:29:69:AD:4F:0A:2D:EB:27:C8:68:AA:40:54:6B
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ElnWRy_sKWmtTwot6yfIaKpAVGs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:da:26:32:c2:aa:72:56:71:12:5d:77:9a:5b:ea:07:5a:ca:
         11:dc:9f:67:12:fa:49:95:70:d9:da:d0:09:fd:90:57:c0:bc:
         7a:91:16:88:d4:a2:05:86:61:a5:aa:20:bd:03:d2:6c:59:ac:
         d8:86:08:6d:63:e5:4b:b9:4d:a9:ed:ac:ad:a7:2e:60:24:fa:
         59:ca:b1:34:80:35:5a:a6:7c:97:51:a5:fb:00:a6:39:cb:5f:
         19:fe:06:50:b0:fa:78:ba:72:5a:b5:f9:c5:04:11:1b:3b:50:
         b7:f0:99:24:3d:98:5d:3d:93:b4:60:91:ec:da:57:69:c0:81:
         9c:e8:c4:5f:cf:67:27:89:3e:76:f7:96:6b:b6:ca:fa:81:66:
         a7:6f:d4:95:14:a9:a6:40:69:90:44:6c:c9:40:9a:a6:c0:dd:
         69:1c:1a:07:1d:68:ba:52:11:fa:d9:76:35:3d:cf:67:4c:a8:
         58:45:22:68:74:ab:bc:99:7b:b9:09:f2:3d:cf:88:9e:ff:ad:
         7e:05:1f:11:04:61:15:7e:db:19:40:16:80:c8:55:00:a6:f2:
         0f:ee:3a:c8:ab:94:2e:d8:5f:84:5a:6c:57:47:68:ec:ac:fb:
         96:7b:94:71:97:41:bd:10:79:28:2c:45:f0:56:79:0b:7f:a5:
         07:c5:fd:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYluxw9RZcWjkwSAf4HWu3dFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNzE5MTUzMTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjU5ZDY0NzJmZWMyOTY5YWQ0ZjBhMmRlYjI3Yzg2OGFhNDA1NDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBSGCcL7pZE6mKsjpVuBUQaIpF2k
YYOHwACsLxkfSHKeNSDrzQZapYm9+Rw/llnI1X+E5FyOEx2HA6UzstilL3ZQU9yP
BF4px8cEge1YUJDbLeQYVDRJj/bYSgRJXtMN3prLeybvBXFibNX5EgbRGhgVrowW
BROfJtnuQBqoABjk21z08h1wlJg9jmgy9JZZsath6N602FpPsA5R5LKi1bWiwjmf
J4jNXl3weVMiM3D5eJN9GCQiItSu41XcUG/ZPLim4cUbsVdb36hbziBlHTukzgJP
hrylcDWm+txqKt/apWpmnasZHNIe+5o+IGUUuzeUpZHnwakGYUHE8y872QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBJZ1kcv7ClprU8KLesnyGiqQFRrMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvRWxuV1J5X3NLV210VHdvdDZ5ZklhS3BBVkdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowWRMA0G
CSqGSIb3DQEBCwUAA4IBAQAX2iYywqpyVnESXXeaW+oHWsoR3J9nEvpJlXDZ2tAJ
/ZBXwLx6kRaI1KIFhmGlqiC9A9JsWazYhghtY+VLuU2p7aytpy5gJPpZyrE0gDVa
pnyXUaX7AKY5y18Z/gZQsPp4unJatfnFBBEbO1C38JkkPZhdPZO0YJHs2ldpwIGc
6MRfz2cniT5295Zrtsr6gWanb9SVFKmmQGmQRGzJQJqmwN1pHBoHHWi6UhH62XY1
Pc9nTKhYRSJodKu8mXu5CfI9z4ie/61+BR8RBGEVftsZQBaAyFUApvIP7jrIq5Qu
2F+EWmxXR2jsrPuWe5Rxl0G9EHkoLEXwVnkLf6UHxf2D
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:30 2024 by rpki-client on console-ams.rpki-client.org