Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/W1x12ZT27PYPi3GWARgSPToa5e4.roa
File:                     W1x12ZT27PYPi3GWARgSPToa5e4.roa (raw, json)
Hash identifier:          9fgej0KvCIk45oOUNwZmsKK/CHiu4aB0wD06h/lVW/o=
Subject key identifier:   5B:5C:75:D9:94:F6:EC:F6:0F:8B:71:96:01:18:12:3D:3A:1A:E5:EE
Certificate issuer:       /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial:       0186E40F354A8E0E3C9C3070A26940D7CE8B
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/W1x12ZT27PYPi3GWARgSPToa5e4.roa
Signing time:             Wed 15 Mar 2023 06:57:27 +0000
ROA not before:           Wed 15 Mar 2023 06:57:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3320
IP address blocks:        185.103.7.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 11 Jul 2023 12:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e4:0f:35:4a:8e:0e:3c:9c:30:70:a2:69:40:d7:ce:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
        Validity
            Not Before: Mar 15 06:57:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5b5c75d994f6ecf60f8b71960118123d3a1ae5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:64:b9:b0:bc:fe:b9:16:cb:56:ea:05:4f:bb:
                    42:dc:05:42:97:48:1c:60:52:96:ed:0f:b5:54:d5:
                    db:ad:cd:d8:b8:2c:69:17:36:47:15:ca:fd:64:61:
                    98:28:d5:95:b8:27:5d:04:4b:2d:72:f7:d3:21:92:
                    ca:28:44:a6:71:17:6f:c7:40:01:44:43:50:4e:c2:
                    7d:25:6b:53:a1:03:ff:39:c2:d5:13:06:c0:87:3e:
                    9b:72:87:d8:30:09:a3:ac:8e:a9:dd:44:2a:53:1a:
                    ef:58:2b:0c:6e:fd:f6:7d:c7:59:a2:a5:39:f2:05:
                    74:cd:bc:87:77:73:50:5c:2d:ef:9d:2e:1f:21:0f:
                    76:a2:92:97:00:5d:e3:30:5b:f1:2f:20:2f:90:19:
                    4b:ae:24:f1:8f:4a:4d:fa:fe:fc:e5:a7:4c:b8:a0:
                    13:73:63:0f:72:2d:e1:d5:3b:2f:64:13:52:ca:95:
                    5d:ba:7b:cc:4b:8b:f3:d4:c4:51:d4:a9:82:11:47:
                    5c:ab:b7:75:08:fd:66:a2:cb:fa:ed:e6:78:fa:59:
                    ba:69:a7:f8:42:99:ce:05:35:5e:5b:5d:76:c9:a4:
                    9f:7d:54:b7:64:01:45:01:b5:fa:89:d9:45:97:f2:
                    bc:20:8b:ec:7a:1a:5e:85:f2:0c:87:2e:59:1a:75:
                    06:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5C:75:D9:94:F6:EC:F6:0F:8B:71:96:01:18:12:3D:3A:1A:E5:EE
            X509v3 Authority Key Identifier:
                keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/W1x12ZT27PYPi3GWARgSPToa5e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.103.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:13:3f:ff:09:08:5c:9c:57:18:31:70:fb:f1:a4:41:7e:34:
         b8:a0:5e:cd:dc:6c:49:44:fe:77:6b:5b:4c:f1:35:33:14:8e:
         22:20:5e:fc:68:42:39:ec:23:f7:63:45:e4:69:65:af:85:32:
         06:cd:1e:7b:58:bf:0e:2d:11:fd:f6:cc:48:5a:08:50:e9:b1:
         a0:45:4a:0c:78:fb:4c:6e:30:88:18:b8:d4:19:ec:32:24:8d:
         84:23:23:86:1e:75:7b:62:f6:4b:94:b3:14:a2:4f:4d:7d:ac:
         72:a8:c3:a4:c6:f3:96:6f:d1:a7:89:38:a7:0c:8e:46:ac:7d:
         45:f7:10:bb:e0:ec:c4:1f:fb:0a:a2:53:64:a4:1f:94:25:88:
         85:17:88:3b:51:aa:0e:ee:ec:ba:0b:1b:88:11:78:43:48:4e:
         43:f4:8d:b5:c9:09:80:0c:d6:5c:f3:b5:be:64:d4:f7:f8:27:
         e6:3b:c9:54:54:a2:95:df:f8:b0:2f:42:99:19:95:3b:42:6e:
         2c:bf:ff:a5:24:b5:b6:22:b4:d2:45:48:f2:96:75:ad:be:ad:
         ac:b4:9b:f8:73:cb:ee:c5:15:1a:b5:a2:01:f2:bf:dc:37:fa:
         03:13:d3:d5:90:26:d9:2e:2d:aa:c0:7d:ae:47:29:2d:ab:9a:
         44:55:78:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:39 2024 by rpki-client on console-ams.rpki-client.org