Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/5vIbtkCO1P2vX-b_tLmlpqGsBkQ.roa
File:                     5vIbtkCO1P2vX-b_tLmlpqGsBkQ.roa (raw, json)
Hash identifier:          eZVNnews0eb3aVbpjQwXgCDI1x0ZyjKy6d/Zb3GZVSs=
Subject key identifier:   E6:F2:1B:B6:40:8E:D4:FD:AF:5F:E6:FF:B4:B9:A5:A6:A1:AC:06:44
Certificate issuer:       /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial:       018BB5DC96D01AE19978750AAF512B140D1C
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/5vIbtkCO1P2vX-b_tLmlpqGsBkQ.roa
Signing time:             Thu 09 Nov 2023 20:53:34 +0000
ROA not before:           Thu 09 Nov 2023 20:53:34 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56582
IP address blocks:        185.23.73.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 Nov 2023 21:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b5:dc:96:d0:1a:e1:99:78:75:0a:af:51:2b:14:0d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
        Validity
            Not Before: Nov  9 20:53:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e6f21bb6408ed4fdaf5fe6ffb4b9a5a6a1ac0644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f7:e5:91:fb:fa:45:cb:8f:6e:4c:f8:6a:9f:
                    c9:77:05:cb:8a:5d:fa:35:71:c4:1e:35:90:08:45:
                    94:74:39:91:de:8d:55:b7:cf:ae:12:e1:db:a6:37:
                    67:72:33:fa:80:5d:af:85:d0:d0:99:15:20:99:97:
                    e2:0b:9d:aa:a2:71:cb:26:83:49:07:86:9d:da:c0:
                    9a:b7:df:1d:06:82:2d:9f:aa:f8:4a:db:a3:27:e3:
                    f7:c4:62:41:cf:3b:99:27:22:45:b5:05:13:f1:18:
                    ce:a0:88:a4:7f:8f:60:82:1a:22:57:d2:60:de:e3:
                    f3:fe:46:ba:18:57:35:c5:00:7b:4a:cb:f8:b8:60:
                    55:0b:c4:32:56:e8:e6:ad:a8:97:05:6d:a0:52:66:
                    f3:ff:ed:fd:a1:aa:0e:af:e8:a8:f2:ac:b6:fd:22:
                    d8:bb:cd:8b:91:9a:ac:80:62:21:3f:19:71:a5:c7:
                    24:46:8b:80:ee:b3:b6:e7:42:70:0c:74:2d:3f:85:
                    7a:a7:9b:09:03:a8:2a:7d:0b:83:89:e7:61:8c:0c:
                    fb:4a:c2:29:a0:bd:32:c6:33:9b:c0:1f:a5:7e:76:
                    11:68:95:ae:da:6f:fa:b2:65:b9:f0:3f:c8:31:bb:
                    98:1a:14:10:77:8b:3a:66:1d:a1:84:22:a4:5c:a9:
                    29:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F2:1B:B6:40:8E:D4:FD:AF:5F:E6:FF:B4:B9:A5:A6:A1:AC:06:44
            X509v3 Authority Key Identifier:
                keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/5vIbtkCO1P2vX-b_tLmlpqGsBkQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.23.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:03:3f:89:79:95:c6:34:b5:28:cc:04:83:ec:53:72:3a:b3:
         f4:aa:c9:87:7d:6f:20:2b:df:29:a4:b4:e1:d6:5f:fb:9a:d4:
         73:ec:23:31:60:f5:00:4f:c2:50:3a:94:ac:92:40:32:37:9d:
         09:b0:37:c8:89:fa:07:f3:2c:3d:cd:52:ec:7c:72:2d:a6:d4:
         c3:7a:92:f1:43:ab:15:b2:06:20:a0:e3:b4:b0:5d:9d:33:48:
         29:ab:63:40:e9:f5:24:db:0b:82:03:e0:a7:2c:7d:84:31:8c:
         cb:89:2f:0f:23:0b:4e:23:41:4c:9e:2e:d0:50:ea:22:5a:51:
         de:18:08:58:7b:e0:5d:d4:6b:d9:b0:9a:4b:b8:37:82:b7:3a:
         f0:fe:9c:a0:09:65:14:16:1a:01:e5:fa:cb:91:10:f0:05:74:
         59:53:6c:b0:13:e4:a1:15:0f:32:f6:76:a7:7f:e2:c4:8f:6b:
         16:9c:a8:97:b5:30:05:d5:ba:7b:7a:a0:f0:16:4c:b8:0c:02:
         22:f5:19:2c:39:c1:43:ef:e8:63:5b:eb:58:77:bb:61:3b:31:
         a9:80:1a:9b:d0:b0:8e:c8:9c:6d:bd:29:c7:10:c2:f0:04:a0:
         45:11:08:ac:24:e1:75:18:39:59:a1:99:0e:bc:15:28:b5:87:
         b1:43:ba:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:43 2024 by rpki-client on console-fra.rpki-client.org