Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/THEsL_kIjJJ3YAWVwv4shEUTCb8.roa
File:                     THEsL_kIjJJ3YAWVwv4shEUTCb8.roa (raw, json)
Hash identifier:          dSIgyJvzH0xT2x6SoQDk9ejElxUrR0wi9/5AMKRPgzs=
Subject key identifier:   4C:71:2C:2F:F9:08:8C:92:77:60:05:95:C2:FE:2C:84:45:13:09:BF
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       01881ED054656908D7469249F60101457B5A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/THEsL_kIjJJ3YAWVwv4shEUTCb8.roa
Signing time:             Mon 15 May 2023 09:49:09 +0000
ROA not before:           Mon 15 May 2023 09:49:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206092
IP address blocks:        163.5.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:1e:d0:54:65:69:08:d7:46:92:49:f6:01:01:45:7b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: May 15 09:49:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4c712c2ff9088c9277600595c2fe2c84451309bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:84:36:a7:50:93:01:23:47:c3:96:d6:52:04:
                    e8:9b:57:90:17:70:73:83:97:f4:73:b2:c2:08:dc:
                    91:24:b2:02:a1:4b:60:c3:e4:e0:1f:08:91:19:45:
                    5f:6b:36:97:5f:44:30:15:ea:22:01:73:c4:0f:13:
                    83:5e:ad:00:df:6c:cb:4a:41:b8:7c:e7:c5:07:7d:
                    3f:16:4d:5d:19:af:16:f2:23:e4:7f:3f:c7:d4:99:
                    a8:4d:ff:30:6e:2e:89:b8:81:65:5d:3e:c4:80:39:
                    53:7b:fb:bb:97:5f:53:04:80:13:94:df:08:50:91:
                    21:27:59:90:11:db:84:d9:43:67:dc:f1:8d:47:58:
                    aa:2d:93:33:86:5f:61:98:95:95:e7:53:b6:c8:14:
                    24:ce:7c:99:02:b2:82:28:f0:7c:28:ed:b9:ac:58:
                    5d:4a:74:11:22:be:95:3e:a8:4b:0b:52:d3:f9:2b:
                    a0:42:4e:9b:3f:96:e3:29:60:a9:29:7e:5c:73:d5:
                    ad:6a:2f:5f:f9:78:6b:9d:ff:71:ad:90:01:b3:d4:
                    12:e8:21:dc:01:ab:8c:8a:96:a3:d5:58:dc:c0:9e:
                    8a:03:13:37:6e:e8:32:53:78:de:40:5c:f4:07:37:
                    9c:27:80:9d:82:24:2e:45:8c:b7:77:57:2b:a0:ca:
                    22:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:71:2C:2F:F9:08:8C:92:77:60:05:95:C2:FE:2C:84:45:13:09:BF
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/THEsL_kIjJJ3YAWVwv4shEUTCb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:1d:0f:bc:12:18:e0:2d:02:4c:e6:d1:0e:bc:7a:cf:b4:39:
         44:68:4b:68:62:53:d4:57:47:91:30:cd:8f:0c:d6:3a:6f:91:
         5c:9a:56:be:d3:a5:3e:24:52:c0:c0:2f:fe:48:aa:58:64:25:
         4c:e7:8e:8a:ad:9a:3f:b6:b9:59:ec:85:23:4a:a8:8c:fa:90:
         da:ac:8e:98:d2:d0:32:2d:f0:09:70:51:85:08:47:34:b6:26:
         35:ec:68:47:a0:f8:c9:1e:c9:30:ca:62:37:2d:1f:41:90:38:
         0d:a1:c2:d7:4f:e4:4b:61:85:90:e6:3e:8a:f8:c6:24:72:b8:
         dd:b6:d1:6d:d3:10:9b:1a:f1:ad:8f:2a:bc:eb:32:6b:48:16:
         30:4f:9e:59:7a:bb:c6:7d:53:ce:fa:11:6b:c7:11:a1:a8:e9:
         bb:41:d2:69:27:04:b2:bb:2e:f3:02:e4:20:c2:5a:18:6a:f0:
         29:5f:27:7b:35:21:6a:82:00:fe:59:8e:3e:1a:35:2d:9f:c6:
         d2:1e:c1:e3:53:50:56:40:b0:f9:ac:17:db:5b:a8:03:3b:99:
         09:fb:a4:22:9d:0f:ae:c2:7e:86:b9:84:d2:30:ad:a3:b3:4c:
         f2:c8:92:5a:ec:ac:fb:50:1d:61:18:7e:e6:f9:a1:ed:bf:54:
         2b:c2:ed:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:32 2024 by rpki-client on console-ams.rpki-client.org