Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/yr5SkEQkaKoDSZU9uzDzqO9LK5Q.roa
File:                     yr5SkEQkaKoDSZU9uzDzqO9LK5Q.roa (raw, json)
Hash identifier:          KlO4sVTikfy/8+Lf/KFVkyY2paQwp0moTEUyiKCrSNg=
Subject key identifier:   CA:BE:52:90:44:24:68:AA:03:49:95:3D:BB:30:F3:A8:EF:4B:2B:94
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       01856F15043385560780877BB6201D2E6EED
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/yr5SkEQkaKoDSZU9uzDzqO9LK5Q.roa
Signing time:             Sun 01 Jan 2023 20:45:26 +0000
ROA not before:           Sun 01 Jan 2023 20:45:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59590
IP address blocks:        81.181.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:15:04:33:85:56:07:80:87:7b:b6:20:1d:2e:6e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:45:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cabe5290442468aa0349953dbb30f3a8ef4b2b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:85:ed:25:cf:66:5d:58:3d:aa:75:a8:3f:22:
                    28:9d:c2:39:de:c7:54:d3:0b:70:10:86:01:71:52:
                    f9:4c:15:a1:97:4d:8b:75:db:42:06:16:fc:2f:a8:
                    b4:65:3c:27:8d:99:1c:9b:f1:65:c1:ba:e3:46:0d:
                    0a:7b:30:71:d7:44:bc:ba:87:d0:00:0e:47:69:38:
                    4a:d7:47:18:4e:68:7b:d2:26:f0:11:57:85:a3:77:
                    5d:65:b1:61:73:da:16:e9:7f:5f:a2:c6:35:87:30:
                    62:b4:45:ca:bc:6d:1d:72:b2:98:c4:c9:e9:33:87:
                    40:d7:58:97:0d:5f:41:43:ae:84:5a:c3:45:4c:ae:
                    c0:1e:55:f8:cb:2d:6e:38:78:58:b8:64:ef:32:50:
                    82:24:1f:70:81:ea:ac:5b:2b:4f:31:19:77:10:88:
                    ac:84:2b:6a:c3:48:03:be:e9:c4:de:27:51:85:78:
                    c5:ee:b4:7d:35:06:c9:0f:a9:f8:2d:2f:9f:3e:02:
                    62:33:f2:ca:39:1f:4f:42:9d:4d:c5:2a:52:e4:1e:
                    60:47:d0:40:95:dd:a1:9c:42:ac:2f:d8:f1:96:d4:
                    e3:63:88:2f:92:13:ab:50:cf:4b:39:d6:9a:48:79:
                    8d:d7:88:e7:f0:48:a2:c1:ce:63:80:67:c9:41:bd:
                    84:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BE:52:90:44:24:68:AA:03:49:95:3D:BB:30:F3:A8:EF:4B:2B:94
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/yr5SkEQkaKoDSZU9uzDzqO9LK5Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.181.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:1b:5b:6e:a0:8c:2d:4a:ba:ba:81:20:67:06:c1:5e:31:e7:
         ba:e2:75:ee:bc:21:dd:d2:0d:52:bc:1c:4f:9b:47:1d:0c:a9:
         75:41:ec:f0:88:15:4f:ce:c1:bd:2d:ef:f6:01:e2:a7:4d:68:
         25:57:a3:f9:ef:23:9d:45:74:b8:0d:01:6d:75:0d:4e:bd:30:
         09:f6:e4:0f:e6:36:be:f2:76:2d:f2:f6:62:85:f4:48:b8:5f:
         c9:9d:59:28:69:15:11:a1:11:ca:78:8a:8e:54:a5:93:bf:f9:
         77:2b:e3:ca:d0:e7:49:b4:39:23:97:87:06:d2:d7:f6:8b:32:
         a6:61:c0:58:01:7c:cb:b2:0a:7f:0a:de:f8:17:d6:d9:ae:83:
         6d:1c:c6:3c:3d:62:41:07:ce:e9:ba:5b:71:dd:ca:04:31:b0:
         4c:a4:f5:db:34:75:c1:c8:42:a4:2f:45:e0:9c:b7:db:a0:3a:
         0c:38:63:65:22:f4:6f:cf:70:98:3b:53:f2:60:a6:3b:76:7c:
         7c:ad:b6:c6:f6:fc:03:78:7b:4e:50:23:ac:b2:7b:06:8d:52:
         d6:68:38:23:c3:f6:0b:18:62:95:e0:7b:fd:9f:07:32:89:3d:
         c7:e8:5c:f7:f9:47:8f:ac:51:c7:76:c6:1c:69:6a:d6:fa:36:
         b5:19:cd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org