Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/e6Xe5J97DweXVi61wMxdUsmNjf8.roa
File:                     e6Xe5J97DweXVi61wMxdUsmNjf8.roa (raw, json)
Hash identifier:          0WerpdDIMi32Vcy6txrVIPHy/mXBOFBjKyBc02OHYYo=
Subject key identifier:   7B:A5:DE:E4:9F:7B:0F:07:97:56:2E:B5:C0:CC:5D:52:C9:8D:8D:FF
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       018EE2C6DCABBDF424B75E8867A841E6B1AB
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/e6Xe5J97DweXVi61wMxdUsmNjf8.roa
Signing time:             Mon 15 Apr 2024 17:21:07 +0000
ROA not before:           Mon 15 Apr 2024 17:21:07 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48753
IP address blocks:        217.156.67.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 07 May 2024 06:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:e2:c6:dc:ab:bd:f4:24:b7:5e:88:67:a8:41:e6:b1:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Apr 15 17:21:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7ba5dee49f7b0f0797562eb5c0cc5d52c98d8dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d9:7f:3f:60:2a:d6:25:20:47:73:31:99:b0:
                    f6:e5:01:f7:86:67:29:39:99:2d:bf:e8:6d:5f:ca:
                    44:83:a3:db:07:da:ae:c4:ef:34:b3:d9:6c:34:bf:
                    77:a0:84:7a:a0:e5:13:e9:07:cc:9a:65:77:55:24:
                    35:df:3b:1f:0e:be:91:4b:be:40:2d:df:7f:1c:25:
                    22:0e:93:8f:f1:e2:22:fd:f7:a7:85:95:e3:dd:9b:
                    a3:c4:22:c1:cb:b6:92:3c:5a:88:5a:2b:d1:5c:00:
                    1d:11:b3:23:b8:8a:54:35:3e:d4:36:ce:02:2c:d2:
                    21:30:db:18:16:a3:89:91:83:19:b6:e2:b9:10:61:
                    72:1b:87:a3:e4:fb:43:2b:25:5b:0a:8f:f3:c7:c8:
                    a3:25:de:99:04:bc:0d:2d:d2:ad:58:bc:d9:35:03:
                    22:7f:46:81:f4:bd:da:68:a4:8f:55:de:b5:91:64:
                    95:06:f8:7f:3a:c7:88:13:d4:cf:44:66:f2:a8:25:
                    a4:b3:6b:c3:cb:08:db:d6:11:a1:4f:e6:c0:1c:f0:
                    47:ad:d6:07:04:75:7f:ec:84:bd:58:d4:22:22:ef:
                    15:9b:1e:4f:2b:49:0a:20:86:34:3e:93:b5:04:b1:
                    33:83:a3:47:1d:21:fa:51:78:b9:76:35:50:48:ce:
                    25:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A5:DE:E4:9F:7B:0F:07:97:56:2E:B5:C0:CC:5D:52:C9:8D:8D:FF
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/e6Xe5J97DweXVi61wMxdUsmNjf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.156.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:87:a2:a8:0a:e5:f4:04:2b:a5:4b:7d:f1:ee:63:ea:de:08:
         b5:80:29:a7:f5:b7:1c:1b:f0:ea:a0:f3:5a:ba:e1:59:79:53:
         99:49:15:cf:fa:91:1f:01:44:74:03:9f:6e:32:c6:69:af:c3:
         2f:9b:ac:fe:fe:ca:32:94:a3:bb:10:64:e0:1d:a3:fb:b4:cc:
         1b:ab:cc:6a:1e:e9:a2:57:b5:b1:28:90:ac:f4:a0:11:9e:27:
         cf:de:03:b6:af:a8:60:d3:c9:64:96:99:d4:f6:9a:d5:2e:96:
         1f:30:89:59:34:dd:99:56:7d:34:b5:94:da:9d:a8:9a:50:8a:
         d8:1b:68:a7:0e:08:4e:19:0b:bd:ba:b9:96:fe:a8:bf:0b:70:
         b6:99:7d:b5:54:6b:19:eb:ea:43:e4:2a:4a:81:cb:ec:6f:1d:
         24:9c:7c:9e:b8:2f:c9:20:af:c2:7d:2f:95:0a:64:82:9f:32:
         82:1a:17:96:1d:76:d5:b7:ce:81:5b:b9:f0:81:bb:9b:4a:45:
         2c:00:2c:be:25:4e:e3:da:c7:0b:49:45:05:95:14:f5:cb:c4:
         81:2b:45:6c:2a:23:31:17:47:40:a3:8e:1d:a4:f8:ca:83:5c:
         a2:55:93:81:f9:14:ea:c2:36:c1:86:9f:50:fa:9e:4f:fe:80:
         5c:a1:c6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 08:35:27 2024 by rpki-client on console-ams.rpki-client.org