Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7xW5PNbNBw0WOgwfRi6mY0ugwNw.roa
File:                     7xW5PNbNBw0WOgwfRi6mY0ugwNw.roa (raw, json)
Hash identifier:          oNm9BaxMm6DuVf2im5fJEb5mfHXGm+mjk9uZsTaKBmo=
Subject key identifier:   EF:15:B9:3C:D6:CD:07:0D:16:3A:0C:1F:46:2E:A6:63:4B:A0:C0:DC
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       018B6A4FCB12154043AA3FE455DC55190512
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7xW5PNbNBw0WOgwfRi6mY0ugwNw.roa
Signing time:             Thu 26 Oct 2023 04:48:16 +0000
ROA not before:           Thu 26 Oct 2023 04:48:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39737
IP address blocks:        81.181.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:6a:4f:cb:12:15:40:43:aa:3f:e4:55:dc:55:19:05:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Oct 26 04:48:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ef15b93cd6cd070d163a0c1f462ea6634ba0c0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d5:20:92:83:5b:3c:f1:be:32:de:3c:ee:2b:
                    e0:1b:fa:80:80:2e:2f:af:09:86:cc:ec:ad:32:90:
                    f8:b0:f3:f2:d4:05:50:78:9a:a9:ee:42:1a:6f:6a:
                    ac:1c:64:b8:3f:ef:c8:17:07:af:0b:73:d1:04:82:
                    84:11:32:10:1b:04:6a:ce:93:a8:87:14:b9:5a:a0:
                    40:75:ef:c8:0b:3b:c5:8d:a0:e2:8d:07:22:62:33:
                    e9:44:3f:4b:6f:cf:04:25:f1:d2:b0:83:6a:72:8e:
                    ea:84:56:f8:32:ce:d7:51:ae:7b:ab:5b:53:0e:ad:
                    52:92:95:5e:1f:23:49:e7:56:e5:c0:01:4b:a0:ae:
                    4d:d2:40:09:b4:83:72:4f:34:bf:ec:09:05:15:e7:
                    8f:45:d7:73:1f:e2:a5:a1:12:a1:72:d3:ea:4c:15:
                    b5:a5:16:36:f9:ed:68:ef:8c:6d:2d:9e:29:0e:b7:
                    b8:38:a0:2f:54:e5:49:24:19:a7:11:bb:91:00:f8:
                    e0:ae:95:c2:1b:cc:12:5a:57:a1:e4:f6:06:c4:fd:
                    c1:53:76:ae:90:c0:4c:68:bd:db:29:cb:77:d9:70:
                    a1:a5:9b:14:d8:49:49:fa:78:c9:53:29:5d:e4:45:
                    a5:66:cc:7a:35:5a:e9:80:bc:85:8b:bf:0e:61:e2:
                    bd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:15:B9:3C:D6:CD:07:0D:16:3A:0C:1F:46:2E:A6:63:4B:A0:C0:DC
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7xW5PNbNBw0WOgwfRi6mY0ugwNw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.181.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:01:61:88:1f:af:e4:37:bd:1e:96:ee:ba:d9:f8:b4:e9:38:
         91:cc:11:db:26:92:35:79:86:6b:9a:60:76:e4:ce:71:ca:2e:
         d8:a1:2c:d8:32:0b:08:d2:f2:cc:32:76:7d:12:06:88:59:1a:
         39:0a:41:b3:d4:52:7a:40:c6:40:f1:f0:ff:ec:72:ee:43:36:
         01:6d:c9:f7:89:62:6a:03:fd:b5:19:15:77:85:e1:22:cd:01:
         d3:59:6f:97:49:7c:f0:f1:67:9d:67:80:12:0e:cb:5b:dc:15:
         dd:9c:90:9c:5e:12:b3:97:ab:80:5f:a4:ff:16:86:44:66:10:
         3c:23:fe:81:cf:08:db:7a:81:04:8d:9c:70:14:2b:b1:cb:04:
         72:78:cb:dc:73:b0:4c:df:6a:32:2b:3a:6e:d1:73:66:da:9b:
         e4:70:94:09:6f:e6:68:15:e1:7e:ca:f5:f1:bf:31:68:ff:06:
         d3:09:38:6d:da:4b:30:0a:c8:7d:09:cc:de:90:9c:c8:7c:c2:
         e3:e3:e0:9d:12:6e:8f:6c:4c:62:74:71:eb:d8:69:bc:df:6b:
         05:32:6b:3d:00:3b:ce:04:97:d3:1c:a2:c7:77:fc:fd:c0:fc:
         88:87:95:45:3d:56:f2:85:e7:ad:da:62:a2:0a:c1:2b:22:1b:
         b0:b5:f1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org