Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JGLEZ1WGWI2yUOH_9N6Qc3ZazRo.roa
File:                     JGLEZ1WGWI2yUOH_9N6Qc3ZazRo.roa (raw, json)
Hash identifier:          OtKgOXk1/kRSpt3Z+0HVOgOs7lb8jcslovt9wr4d1gI=
Subject key identifier:   24:62:C4:67:55:86:58:8D:B2:50:E1:FF:F4:DE:90:73:76:5A:CD:1A
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       018B78785EFA454855C36D95B8FE68CFF29D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JGLEZ1WGWI2yUOH_9N6Qc3ZazRo.roa
Signing time:             Sat 28 Oct 2023 22:47:16 +0000
ROA not before:           Sat 28 Oct 2023 22:47:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14315
IP address blocks:        163.5.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:78:78:5e:fa:45:48:55:c3:6d:95:b8:fe:68:cf:f2:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Oct 28 22:47:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2462c4675586588db250e1fff4de9073765acd1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a9:b3:b5:f3:4e:34:88:00:69:49:42:52:f3:
                    88:7a:17:00:e2:48:ed:5a:ef:f0:95:5c:ea:77:71:
                    94:27:c9:2c:a7:67:0b:69:99:ec:57:fb:27:68:2d:
                    1f:55:4a:38:12:b2:35:1e:01:c1:d8:d5:b3:cf:db:
                    92:ae:14:19:3f:90:c8:f2:f0:b7:89:9e:61:59:44:
                    ba:64:01:94:3e:13:b4:8f:52:f2:b0:6b:71:26:c1:
                    17:2c:07:f6:bc:aa:30:70:f0:dd:d1:d9:7b:43:e3:
                    86:2c:cc:d4:e5:2c:8b:c7:58:83:68:1e:28:a6:8a:
                    27:03:17:fa:24:f0:a2:1f:3a:1a:db:6d:a2:90:3d:
                    f3:29:42:4d:13:26:0d:8d:4f:14:b2:e0:27:7a:ba:
                    8a:3d:e6:14:ea:6d:e9:fa:0b:e8:61:ad:a0:5b:57:
                    d8:17:4d:6b:11:4b:97:d6:4c:f2:3b:d1:5a:ac:cd:
                    05:a8:84:7f:0a:59:4e:57:31:ee:e4:4a:04:ad:2a:
                    e2:d5:44:ec:29:85:75:37:aa:6d:6b:d3:80:40:e4:
                    b0:a7:db:da:c0:72:da:53:5b:c9:62:a2:05:4b:df:
                    eb:d7:07:b5:dd:b4:df:ad:db:db:55:6b:32:7d:ef:
                    93:e6:e3:cf:2b:69:48:c4:b8:ab:65:0a:a1:0e:b1:
                    51:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:62:C4:67:55:86:58:8D:B2:50:E1:FF:F4:DE:90:73:76:5A:CD:1A
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JGLEZ1WGWI2yUOH_9N6Qc3ZazRo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:5e:90:8d:57:a6:4b:1e:56:d5:fe:97:1e:9a:b4:8d:30:20:
         5c:5e:2a:d9:0f:cf:f2:44:7a:bb:3f:c6:d1:80:3c:48:c0:3a:
         e4:10:ba:3f:9b:64:81:df:49:9c:11:01:bc:26:10:0a:7f:65:
         00:b5:ce:1c:8e:e4:03:24:a8:17:ab:e6:34:67:c4:f5:26:5d:
         89:8d:3c:28:56:2e:90:30:39:6e:c1:8d:83:25:15:26:a7:0e:
         ef:a0:b2:78:c8:3d:7c:d6:a3:1c:9e:1f:cb:7b:e5:79:ba:d3:
         69:2f:81:95:44:c1:14:3d:2d:9f:26:94:bf:f4:e5:1b:e7:c2:
         63:54:8b:56:ae:08:fe:a1:d3:a2:44:23:04:8b:f1:ce:fa:d0:
         6c:8c:17:ea:55:5d:dd:38:12:18:d3:d9:f2:a8:66:75:f5:6a:
         77:87:e1:e5:33:81:4c:22:c6:85:d0:8e:c6:9e:d1:c9:51:1d:
         82:04:e4:69:85:8d:56:fb:da:14:49:4d:ad:ff:c0:e2:26:03:
         ed:56:f0:44:1d:21:99:10:8a:f1:a8:30:f3:b9:51:95:71:2c:
         11:f9:bf:e7:1b:b9:4c:a7:17:80:bb:39:63:ce:26:7d:1f:27:
         aa:1e:dc:0b:4d:94:14:92:fa:9a:17:01:3c:ea:eb:58:8a:32:
         a5:cc:04:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:04 2024 by rpki-client on console-fra.rpki-client.org