Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Zpm3655B4bStbp-C9DjIOCmii_s.roa
File:                     Zpm3655B4bStbp-C9DjIOCmii_s.roa (raw, json)
Hash identifier:          H06VVWoxNS5kCczk1DUlHnfi5nRajwY3OWtAVhpBmnU=
Subject key identifier:   66:99:B7:EB:9E:41:E1:B4:AD:6E:9F:82:F4:38:C8:38:29:A2:8B:FB
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       018945BB053BFF43783AD588B2B685AD2DE2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Zpm3655B4bStbp-C9DjIOCmii_s.roa
Signing time:             Tue 11 Jul 2023 16:13:51 +0000
ROA not before:           Tue 11 Jul 2023 16:13:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57043
IP address blocks:        163.5.187.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 28 Jul 2023 09:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:45:bb:05:3b:ff:43:78:3a:d5:88:b2:b6:85:ad:2d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Jul 11 16:13:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6699b7eb9e41e1b4ad6e9f82f438c83829a28bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6b:fb:e0:48:3b:d1:83:3c:5b:c2:a8:ec:fe:
                    7c:c6:f8:b0:94:79:18:b9:a3:41:b5:6e:36:ce:e2:
                    a9:d5:86:b2:a8:03:b0:6b:98:66:a4:49:b6:b1:cd:
                    76:ee:9f:8c:12:ed:8b:45:23:6f:a3:03:16:8c:9e:
                    0c:f6:3f:40:af:43:73:47:b1:7c:e2:b4:8d:a2:8a:
                    d4:16:d7:82:d0:10:55:4f:b9:df:87:ce:5d:fe:3e:
                    d6:2b:0e:00:b0:00:ea:07:ed:ce:e9:a0:e4:67:ad:
                    bb:4f:e5:81:9c:bd:77:94:b2:08:35:5e:81:a4:de:
                    d5:3a:f0:12:23:25:a1:e2:ce:f4:f9:f8:22:57:1a:
                    ed:cf:60:63:2e:82:43:da:3e:0e:d5:29:ba:0f:d8:
                    49:3d:64:0d:49:58:93:03:2e:24:6f:33:87:db:00:
                    ca:9f:32:92:6c:17:9a:7b:fa:3e:d9:be:85:f3:a6:
                    5b:a8:bb:6b:56:88:52:ec:61:e0:85:a7:73:4d:44:
                    f4:ca:f9:cc:47:2b:5b:42:66:44:d1:bb:48:28:3e:
                    29:cd:96:99:97:20:a9:b9:a8:93:eb:8f:d7:ff:62:
                    c5:06:a7:de:8d:9e:9d:d7:ab:21:10:48:28:08:e1:
                    51:f3:09:cc:e7:52:9a:6b:40:1a:90:af:71:03:b4:
                    27:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:99:B7:EB:9E:41:E1:B4:AD:6E:9F:82:F4:38:C8:38:29:A2:8B:FB
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Zpm3655B4bStbp-C9DjIOCmii_s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:de:69:15:89:93:b2:40:89:6d:96:2e:c8:57:6f:b6:07:b4:
         ba:42:fd:5c:bb:cb:8c:64:4a:36:ad:3f:b2:63:4a:12:a1:3f:
         ec:c8:ce:97:aa:0e:bd:69:97:7c:c0:91:b4:09:00:78:66:ed:
         6e:2c:71:64:7f:9b:bb:b9:a0:5b:a0:e4:9f:ac:ec:03:54:0e:
         97:74:fb:43:e2:f3:a7:a3:cc:03:42:c2:90:6e:76:a5:f9:89:
         9e:8f:db:e1:f7:33:e0:5c:fc:e4:ff:c6:47:b2:1c:4c:b1:c6:
         80:4c:d2:9c:5f:c7:af:c3:3a:b0:16:9a:39:c0:05:94:73:67:
         89:af:3e:e3:23:53:d3:8d:26:f1:17:1a:c8:30:76:bb:23:15:
         bd:d5:aa:12:4c:0a:e2:54:7e:59:f7:cf:44:73:f5:a2:9c:cf:
         52:ab:a7:c5:63:bd:f6:3e:3f:64:ac:ba:80:d2:b7:2c:10:54:
         ac:8c:c3:bc:5a:03:c1:ff:58:40:b8:89:aa:0c:62:e2:ad:89:
         2d:2b:1d:63:f6:31:67:db:8c:d5:cc:b6:34:af:be:89:7c:38:
         ba:89:b8:77:5a:f2:7d:22:d8:fa:c5:f5:07:57:a0:3d:1f:bf:
         f3:a2:61:e3:00:b7:0b:41:25:b8:84:7c:31:13:b3:a1:e5:65:
         45:3d:36:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:33 2024 by rpki-client on console-ams.rpki-client.org