Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/IuEeT-fTcCjQIpZ4pHyDyJ2sbZE.roa
File:                     IuEeT-fTcCjQIpZ4pHyDyJ2sbZE.roa (raw, json)
Hash identifier:          QJSzxD4oAMBr8UyGT3DbQvUUH/pjkZM5k+zTh2/o8MM=
Subject key identifier:   22:E1:1E:4F:E7:D3:70:28:D0:22:96:78:A4:7C:83:C8:9D:AC:6D:91
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       018857B559B75F61814F860648D63F192A86
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/IuEeT-fTcCjQIpZ4pHyDyJ2sbZE.roa
Signing time:             Fri 26 May 2023 10:58:02 +0000
ROA not before:           Fri 26 May 2023 10:58:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     30823
IP address blocks:        163.5.185.0/24 maxlen: 24
                          163.5.140.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 19 Jun 2023 15:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:57:b5:59:b7:5f:61:81:4f:86:06:48:d6:3f:19:2a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: May 26 10:58:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=22e11e4fe7d37028d0229678a47c83c89dac6d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:20:bc:36:54:2d:6e:cd:65:38:ba:ca:56:
                    eb:89:32:f4:1c:21:e8:c1:ea:68:9e:7a:15:46:13:
                    89:6f:8c:f1:bb:72:42:06:fc:27:09:f1:b1:8f:38:
                    0e:ad:10:3e:e0:d8:b3:e1:04:cc:9c:19:31:35:42:
                    4e:05:b9:13:d0:a2:35:0c:2c:4f:1f:e6:12:02:7b:
                    27:6d:fb:83:17:6a:cf:bb:a1:11:1d:56:01:06:a0:
                    87:3f:33:99:3d:47:17:b1:ea:96:5e:38:98:5c:e1:
                    7c:8a:38:0d:68:39:d4:68:a8:32:b7:7f:25:de:a5:
                    bc:dd:3a:06:82:fc:8a:b9:2e:a4:b4:7c:d1:e7:fa:
                    13:43:4f:04:d2:c6:a8:84:5d:6d:97:2d:d1:4c:81:
                    21:08:f6:81:26:e6:47:9c:1e:77:cf:ac:e6:5f:53:
                    18:1e:3b:66:6b:4c:50:35:15:d7:62:64:6a:f7:70:
                    fc:2c:18:7f:fc:66:1a:45:5c:90:41:bb:dc:d9:f4:
                    ef:7e:66:21:c3:79:f4:5d:9b:3b:04:be:6b:81:be:
                    e0:d2:8c:f9:23:69:f2:5a:29:c2:04:84:57:ed:bc:
                    6a:c4:3a:7c:37:ac:e3:2d:95:f8:f7:1e:50:f7:d3:
                    cc:63:53:eb:86:42:d8:8a:e8:f7:a9:4e:a3:dd:72:
                    dd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E1:1E:4F:E7:D3:70:28:D0:22:96:78:A4:7C:83:C8:9D:AC:6D:91
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/IuEeT-fTcCjQIpZ4pHyDyJ2sbZE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.140.0/24
                  163.5.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:bf:7a:94:e1:83:9d:3d:84:4e:6e:f1:ac:00:9e:61:45:92:
         37:c6:c5:82:3a:15:b1:93:9f:4f:57:f8:f0:2b:54:75:d8:37:
         86:0e:55:ab:63:fc:6b:ed:c4:96:a7:3c:1f:19:d0:0b:68:87:
         4e:96:a0:9b:85:e8:0d:e0:ab:72:68:77:b0:45:34:da:7b:f1:
         de:a0:2b:8f:25:8b:3d:c6:4a:0f:5b:e0:86:9c:5a:0b:dc:e2:
         ab:09:cc:e7:4b:9f:0d:e2:e6:18:70:dc:7d:0f:d8:59:0f:8d:
         30:4c:93:44:ce:ff:11:a2:ba:90:9d:1f:ca:bc:70:a1:ad:07:
         8a:90:d4:8d:73:de:3e:2a:7e:cf:33:f5:51:80:69:f3:4d:57:
         02:0b:c4:1f:d8:93:d2:c2:8a:fa:65:9d:d7:ae:84:48:13:65:
         ed:63:29:2e:8f:b5:50:a5:18:61:2b:55:14:e3:fc:cb:0c:a4:
         0e:4f:92:40:39:9f:b4:b4:c5:9c:96:f2:60:5b:77:b0:83:13:
         af:72:d1:4c:23:2b:dd:82:a6:b0:c7:d3:a0:c9:cd:a9:3d:e6:
         d4:0d:cf:3f:64:cc:25:4d:90:1c:6f:15:86:25:80:37:8e:1f:
         90:d6:bc:e4:2f:9d:6a:0d:17:0c:4c:06:93:47:c2:13:04:61:
         c5:32:90:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:30 2024 by rpki-client on console-ams.rpki-client.org