Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/da64Ds1_zF6EGBgaer3ieHy8Kx4.roa
File:                     da64Ds1_zF6EGBgaer3ieHy8Kx4.roa (raw, json)
Hash identifier:          vUlvZPdVdPBuOOnjYsMQRDz2zWc6kTmvKwcd0RfN10g=
Subject key identifier:   75:AE:B8:0E:CD:7F:CC:5E:84:18:18:1A:7A:BD:E2:78:7C:BC:2B:1E
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       01918342DD029F8953A02D69AB2D90CD9125
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/da64Ds1_zF6EGBgaer3ieHy8Kx4.roa
Signing time:             Sat 24 Aug 2024 07:21:22 +0000
ROA not before:           Sat 24 Aug 2024 07:21:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     6762
IP address blocks:        213.176.74.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:83:42:dd:02:9f:89:53:a0:2d:69:ab:2d:90:cd:91:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Aug 24 07:21:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=75aeb80ecd7fcc5e8418181a7abde2787cbc2b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:df:b8:ca:a9:bf:92:86:7b:1b:45:bd:4f:6c:
                    b4:9b:6f:0f:35:f3:16:77:50:65:09:80:54:67:2a:
                    74:8e:c6:a4:fc:21:f5:5a:b3:03:8f:a1:0f:cf:d8:
                    8b:92:d2:65:3f:d3:60:c3:14:82:4d:98:f9:9e:f6:
                    b6:06:1c:d4:2a:20:0a:fe:3e:35:05:89:11:60:60:
                    cc:26:e3:9b:be:e3:12:1d:5a:f4:13:b9:59:78:bd:
                    a4:88:eb:88:d0:89:4c:24:ce:99:76:c0:57:c7:a1:
                    91:b4:d1:ac:1e:5a:aa:02:18:4f:11:6c:d9:78:6c:
                    3e:cb:9a:b0:2e:f1:06:c6:c2:0b:d3:78:5d:ca:6c:
                    bd:4c:96:48:fa:d4:93:67:cd:2f:a0:4c:46:26:fa:
                    05:b2:c8:ad:61:b0:25:13:ab:e0:44:9d:11:ab:d7:
                    e2:22:1d:6e:1b:5e:40:b8:ad:56:58:23:38:7c:d6:
                    fd:44:cf:d9:39:7e:80:d0:e8:e4:01:1a:73:2d:38:
                    6e:8e:6f:76:5f:50:aa:83:c3:ec:99:bb:9c:5f:44:
                    a0:db:51:3c:cc:81:ff:87:c5:41:84:f7:8e:35:e9:
                    7e:21:5d:3a:cc:3e:29:f6:ba:2f:2c:4e:f6:e4:3a:
                    ab:e3:1f:74:ee:28:2a:13:97:22:31:23:7a:01:75:
                    49:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AE:B8:0E:CD:7F:CC:5E:84:18:18:1A:7A:BD:E2:78:7C:BC:2B:1E
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/da64Ds1_zF6EGBgaer3ieHy8Kx4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.176.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:ac:88:22:88:05:35:40:ca:71:ed:9d:92:d5:97:05:43:ac:
         f3:df:1c:3c:08:94:b2:9a:78:bd:46:c0:66:71:73:1c:ca:32:
         d1:eb:c5:4e:40:17:8a:74:02:68:a8:dd:e6:24:df:51:52:ee:
         f7:ae:b0:fe:40:91:0e:0f:3c:51:50:6d:d6:04:ba:ad:97:ef:
         b8:3b:46:72:50:3c:f9:6e:2b:e3:d2:6b:3d:92:bc:ce:74:bc:
         3f:c5:20:5e:a4:84:db:12:e9:97:26:69:6a:e3:21:30:74:fd:
         6d:20:7a:bb:09:a4:66:4c:47:1b:41:cc:ce:ab:32:94:0f:74:
         af:6c:db:08:d4:13:b4:f5:df:22:72:35:4c:cd:e2:7c:1a:f1:
         f2:31:ee:3f:81:31:f3:8c:7d:6a:76:17:4c:80:d5:9e:3e:09:
         51:27:ff:a4:15:15:95:6f:4a:e7:7e:5f:7f:b2:a2:e6:b4:3f:
         ee:c6:a6:ae:13:18:18:99:1f:57:66:91:47:a7:34:b9:1c:0d:
         b3:78:77:d9:31:d3:e7:7a:f6:d9:db:b7:15:ee:e4:36:22:41:
         0e:f4:c9:19:7a:dd:54:15:b3:6b:15:ff:82:fe:b3:c9:c6:0e:
         c9:8b:ea:e1:7b:08:5c:d5:bb:fe:9d:52:5f:80:76:fa:34:b2:
         32:55:35:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 06:17:24 2024 by rpki-client on console-ams.rpki-client.org