Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/e7HoC04urCD13Bu03342zkbO_NU.roa
File:                     e7HoC04urCD13Bu03342zkbO_NU.roa (raw, json)
Hash identifier:          0JISI8aQ1yl2Zg5UIaocGH4ZX8K4+0CBLeQkWNhERAg=
Subject key identifier:   7B:B1:E8:0B:4E:2E:AC:20:F5:DC:1B:B4:DF:7E:36:CE:46:CE:FC:D5
Certificate issuer:       /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial:       018AFB579EA0BF06E649B11C6636116ED3C3
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/e7HoC04urCD13Bu03342zkbO_NU.roa
Signing time:             Wed 04 Oct 2023 15:38:57 +0000
ROA not before:           Wed 04 Oct 2023 15:38:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211432
IP address blocks:        185.180.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 14 Oct 2023 14:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:fb:57:9e:a0:bf:06:e6:49:b1:1c:66:36:11:6e:d3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
        Validity
            Not Before: Oct  4 15:38:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7bb1e80b4e2eac20f5dc1bb4df7e36ce46cefcd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f0:a2:64:c7:b5:85:5a:17:29:ef:4b:12:9a:
                    e5:38:55:8b:23:8d:e6:dd:38:1b:63:b3:9f:48:5c:
                    9d:34:ba:b3:af:a0:a2:23:67:9e:75:4f:cf:53:0f:
                    a5:dc:0b:c5:81:85:3e:df:6a:c4:bc:1e:4a:3a:14:
                    43:91:40:8d:e8:95:7b:87:95:8b:15:7b:3f:46:3e:
                    94:ed:de:39:b0:64:32:eb:39:14:31:3a:1c:ec:86:
                    c3:0e:80:15:84:fa:48:e9:d3:48:6f:9a:58:97:c9:
                    c7:c5:fd:11:c3:53:80:7f:b6:d3:6f:43:12:24:88:
                    24:47:ca:a3:64:ec:e8:b7:00:fe:16:27:0d:56:9d:
                    e2:63:a4:40:fa:ed:88:75:1d:7b:87:2a:45:43:2c:
                    5c:c7:4b:3d:bd:90:e4:fb:1d:17:6f:f4:62:0c:ef:
                    07:63:f3:44:ab:f5:af:1b:01:f8:c8:c1:9f:3a:4e:
                    01:f8:03:56:cc:61:55:e6:8d:c9:c6:bc:dd:bf:86:
                    a2:41:09:3f:64:03:1f:14:7e:da:e1:a2:a1:58:62:
                    86:37:1e:2d:08:90:97:e2:f3:0f:45:1a:b2:39:39:
                    f9:34:2c:90:8b:8a:87:8d:a9:8b:cb:ca:0e:95:d6:
                    c3:b5:b5:94:7c:d9:d9:63:4a:7a:e9:5f:0e:ee:ed:
                    cd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B1:E8:0B:4E:2E:AC:20:F5:DC:1B:B4:DF:7E:36:CE:46:CE:FC:D5
            X509v3 Authority Key Identifier:
                keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/e7HoC04urCD13Bu03342zkbO_NU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.180.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:fd:30:35:73:3d:e0:ed:c7:d4:e5:1f:2d:80:75:0b:2a:33:
         55:00:8b:d6:c3:b1:b0:81:2c:3a:f1:23:7a:a2:e5:0e:ff:35:
         78:71:50:ca:1a:2b:41:7b:7c:bb:cc:7e:2c:bb:1f:fb:25:c2:
         ea:85:8d:97:a3:fc:ef:6c:ee:41:0c:7d:5d:89:2b:88:58:8e:
         0c:40:fa:d1:d6:2a:22:52:c9:33:05:93:55:59:6c:4c:47:f3:
         98:92:59:98:17:5f:4b:44:3e:4f:88:8a:f6:31:e9:6b:99:0d:
         b4:65:7f:64:a6:00:45:6d:8f:53:db:a7:7e:f6:0d:9d:b0:14:
         eb:15:2c:3b:3b:49:99:51:08:53:fa:13:70:08:f3:13:4d:e7:
         e6:f3:a8:c3:e6:6c:04:55:58:a2:e0:7c:ca:b8:07:0e:bd:a7:
         1b:dd:f1:f0:38:7f:45:d8:37:65:b6:76:34:7a:a9:88:fe:c9:
         83:86:bf:29:2c:4d:f0:5a:a1:c3:d6:fc:07:1e:23:f4:9e:b6:
         b5:02:ea:a3:ec:df:f4:4a:f7:6f:ae:92:a2:bb:11:28:dd:a1:
         8c:88:00:ea:8e:68:5f:23:56:5b:31:47:95:3c:74:83:8a:7c:
         f1:11:85:36:1f:ec:60:30:6d:bd:72:b8:8c:a8:27:d2:34:38:
         01:41:6a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:44 2024 by rpki-client on console-ams.rpki-client.org