Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ramr2CpaI5JgQlj1SMT0f1hawnk.roa
File:                     ramr2CpaI5JgQlj1SMT0f1hawnk.roa (raw, json)
Hash identifier:          CCiHqtx3ByWcHo0GjE2xP+JwXbVXXHcN0aPDL61ncz4=
Subject key identifier:   AD:A9:AB:D8:2A:5A:23:92:60:42:58:F5:48:C4:F4:7F:58:5A:C2:79
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       01914A9ABA675E9FE0937FAB2C32CB81E199
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ramr2CpaI5JgQlj1SMT0f1hawnk.roa
Signing time:             Tue 13 Aug 2024 07:18:59 +0000
ROA not before:           Tue 13 Aug 2024 07:18:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     22781
IP address blocks:        163.5.179.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 19 Aug 2024 20:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:4a:9a:ba:67:5e:9f:e0:93:7f:ab:2c:32:cb:81:e1:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Aug 13 07:18:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ada9abd82a5a2392604258f548c4f47f585ac279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:84:ec:d0:ab:65:c4:3b:c9:5b:ef:26:fd:63:
                    0e:a4:88:67:f2:19:b3:9d:a7:0f:91:9c:3e:88:7c:
                    7d:20:d9:06:d9:d1:ad:a2:31:cf:05:3a:40:2a:e2:
                    8a:61:7d:d9:4a:aa:05:bb:a5:1f:63:31:58:3a:40:
                    d4:81:2e:93:2f:fa:c5:4b:ee:c4:b7:75:c7:c6:70:
                    e4:d1:de:55:b5:a1:83:c6:45:26:19:2f:72:85:cd:
                    89:4b:da:1e:72:47:6f:4a:5b:00:d1:92:94:61:03:
                    93:77:92:d8:b2:bf:9a:16:f0:f3:7a:9e:9c:01:12:
                    77:ac:f2:4a:f8:7f:49:3c:c5:c5:bb:3a:f6:58:86:
                    d0:af:6c:7a:b5:9a:33:f1:65:a8:4b:7f:ce:a2:59:
                    e4:83:03:b5:01:d4:46:1b:ee:f0:5b:0d:73:01:f6:
                    e1:12:7f:8c:b7:14:a0:1d:bd:0e:e0:e8:b2:1e:f4:
                    79:d3:9e:84:de:14:15:2c:28:88:cf:7b:31:5f:3a:
                    3d:82:c3:e7:42:71:8a:07:d0:b5:61:35:dd:1a:17:
                    91:53:34:44:1f:b6:9a:13:da:4c:9f:fe:43:d4:f4:
                    c3:18:da:55:e9:83:49:12:b8:a0:5a:c4:ac:f8:c4:
                    1b:e0:1b:9b:ed:9d:90:b0:73:b5:da:1a:44:cf:da:
                    e3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A9:AB:D8:2A:5A:23:92:60:42:58:F5:48:C4:F4:7F:58:5A:C2:79
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ramr2CpaI5JgQlj1SMT0f1hawnk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:97:96:77:e6:44:a7:44:0f:3e:23:38:ea:71:b9:b9:32:95:
         ac:cf:23:e6:87:89:1b:0f:f5:f1:1b:03:eb:05:d1:76:ca:bc:
         61:22:f1:b1:ef:c6:22:7f:0f:6a:8c:56:6d:a7:c7:97:d6:07:
         bc:aa:4a:80:6c:42:9e:97:00:1f:6d:27:bb:9d:00:98:fc:a2:
         c4:4c:c6:4a:77:22:67:e4:53:7f:92:70:be:87:ec:8c:e5:32:
         ba:be:af:3d:c0:a3:ac:96:83:57:57:ae:8e:8e:18:52:a4:03:
         a2:97:dc:37:30:69:0a:7f:e5:1a:2d:96:67:9e:44:70:98:38:
         2d:d7:f0:18:67:4b:db:e9:90:61:5a:7c:a5:83:78:8a:bb:65:
         80:3d:15:74:fc:4a:a4:25:10:bd:23:91:dd:64:1c:c0:5a:55:
         b3:b2:71:44:78:78:3e:22:32:b9:20:c9:87:29:a0:6e:1e:68:
         f3:0b:72:d5:e0:9b:ff:46:94:96:57:bb:24:fd:69:56:2d:61:
         4e:b0:6e:8f:6c:aa:0b:fa:bf:04:4f:77:ee:f6:1e:4f:22:67:
         3e:b6:60:dc:bf:fc:f7:bb:fa:6e:0b:63:4b:0c:ba:47:ae:8f:
         1f:ab:71:9e:8f:03:28:66:33:7f:ab:7c:74:a7:6a:54:86:5d:
         39:d9:02:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 23:51:28 2024 by rpki-client on console-ams.rpki-client.org