Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/je2y5ZVyYgSjTLv7poT18rV0VSg.roa
File:                     je2y5ZVyYgSjTLv7poT18rV0VSg.roa (raw, json)
Hash identifier:          kG7o0vBZntp2Pys9mBrgePC46rB8k/z0Nq+5/qEB55U=
Subject key identifier:   8D:ED:B2:E5:95:72:62:04:A3:4C:BB:FB:A6:84:F5:F2:B5:74:55:28
Certificate issuer:       /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial:       0186D63B902132DEC6F595C703397C16D335
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/je2y5ZVyYgSjTLv7poT18rV0VSg.roa
Signing time:             Sun 12 Mar 2023 14:31:13 +0000
ROA not before:           Sun 12 Mar 2023 14:31:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     393427
IP address blocks:        185.103.7.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 11 Jul 2023 12:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:d6:3b:90:21:32:de:c6:f5:95:c7:03:39:7c:16:d3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
        Validity
            Not Before: Mar 12 14:31:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8dedb2e595726204a34cbbfba684f5f2b5745528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a7:e9:54:b6:28:4d:cd:f5:d4:6d:e0:d2:d2:
                    df:77:a5:df:f2:3f:ff:73:19:f3:fe:87:ea:af:94:
                    b3:38:92:16:d0:15:07:91:17:e5:33:64:39:7e:a6:
                    b5:20:84:11:4b:04:26:35:ce:ac:8f:dc:11:8e:11:
                    61:73:7b:0a:3b:2e:3d:3d:8c:0d:6c:b6:33:aa:37:
                    96:ee:15:02:ea:1d:ac:ae:e6:89:03:0a:ef:6b:a9:
                    f7:ac:9a:74:1f:c4:e5:12:b9:bd:cf:e0:d0:b3:70:
                    c6:b7:48:af:21:8d:cc:db:54:8b:1f:05:6e:cd:2f:
                    2d:35:5f:3e:48:cd:d8:10:30:18:db:cb:16:1c:c8:
                    31:ef:a6:5f:4e:d0:b0:c2:ef:a1:8f:ba:08:13:ce:
                    ac:24:2e:1b:8b:e2:cf:16:2b:0b:a5:81:c3:65:b2:
                    a5:9b:d2:63:d1:f2:1c:37:68:da:c1:2b:8e:82:38:
                    83:42:5c:b0:9b:f2:2a:fc:e9:55:dc:0e:26:e1:3b:
                    91:1c:85:31:a1:bc:8a:21:17:7f:41:2f:ed:2e:08:
                    d9:ca:44:d8:da:2a:1e:72:1c:a5:97:92:0a:f9:e2:
                    29:ad:3e:05:c2:ee:96:b2:50:b3:06:47:e9:64:04:
                    4f:14:23:81:73:d9:64:a1:ec:21:eb:55:db:ef:1b:
                    cc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:ED:B2:E5:95:72:62:04:A3:4C:BB:FB:A6:84:F5:F2:B5:74:55:28
            X509v3 Authority Key Identifier:
                keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/je2y5ZVyYgSjTLv7poT18rV0VSg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.103.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:f6:b4:06:32:83:15:04:f5:d4:8e:1e:b7:75:9b:ee:a8:28:
         cf:f0:f4:0e:a2:d5:33:33:22:37:17:ff:a2:86:65:61:4e:aa:
         0e:8b:7c:1e:0f:e3:c1:57:ae:23:48:27:44:39:b7:0d:36:bc:
         2f:ac:95:d4:2b:09:15:21:0c:15:48:66:a0:74:e0:5d:4f:ca:
         14:4c:7c:f7:42:01:d2:31:43:33:91:1d:46:4f:2c:43:93:1c:
         1c:9b:40:76:d1:8c:5b:8e:84:9d:70:98:48:16:dc:fd:15:58:
         99:92:a2:94:25:83:ae:6c:2e:89:d5:8d:fc:5a:d3:70:d9:d3:
         d2:b1:42:a8:60:ac:59:f9:b2:63:ad:02:dc:ce:70:e8:f7:fa:
         09:08:bf:60:d0:60:09:d8:45:2c:a7:2f:27:21:80:c7:06:c9:
         8b:7c:51:76:9b:26:55:4c:73:d6:e9:f3:31:2b:ea:ea:b6:8f:
         6e:aa:06:43:33:1e:b2:83:3f:15:03:51:ad:ef:46:fb:ea:53:
         47:ea:f5:b6:6a:20:77:b5:76:15:12:8c:b1:56:b5:48:0b:bb:
         2e:30:f6:b0:80:66:19:3d:d4:03:39:87:d0:1d:18:95:3a:9b:
         58:79:01:d1:46:28:60:46:a8:05:70:5f:94:78:97:c2:8f:13:
         b1:de:c8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:39 2024 by rpki-client on console-ams.rpki-client.org