Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/cQ9bcm_KU_ZijVc4Q-PgLHycUGY.roa
File:                     cQ9bcm_KU_ZijVc4Q-PgLHycUGY.roa (raw, json)
Hash identifier:          +acnGWxqLT7kN7dBpWcuelMzTn4FoGAcZSdVVQglcG8=
Subject key identifier:   71:0F:5B:72:6F:CA:53:F6:62:8D:57:38:43:E3:E0:2C:7C:9C:50:66
Certificate issuer:       /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial:       0187A0622E1840B68160A6965420FF13E6CF
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/cQ9bcm_KU_ZijVc4Q-PgLHycUGY.roa
Signing time:             Thu 20 Apr 2023 20:36:41 +0000
ROA not before:           Thu 20 Apr 2023 20:36:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49999
IP address blocks:        87.248.137.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 20 May 2023 06:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:a0:62:2e:18:40:b6:81:60:a6:96:54:20:ff:13:e6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
        Validity
            Not Before: Apr 20 20:36:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=710f5b726fca53f6628d573843e3e02c7c9c5066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b8:dd:08:d3:07:79:fb:15:dc:dd:af:9e:d2:
                    9c:29:b6:e8:ee:c5:fd:65:5b:ab:6e:a0:fe:e7:3d:
                    c8:38:7a:57:05:73:3b:4d:d3:38:f6:d1:2b:8c:f9:
                    f1:9a:c0:76:1d:2f:db:8f:fe:83:5c:1d:b7:5b:a2:
                    92:52:b8:0a:62:ce:99:f4:10:1a:7b:35:fd:e1:4a:
                    1a:d8:cf:87:88:45:9b:94:a6:6d:7e:25:55:1a:d1:
                    f9:b4:b1:e5:9f:87:37:f1:fe:43:28:71:eb:cb:17:
                    5a:5e:1f:f4:4e:c6:01:31:ee:a7:71:f9:90:af:3a:
                    8f:8f:4c:09:3b:ee:27:da:e7:6f:4e:69:f1:59:9f:
                    0d:31:8f:ba:ee:f4:1c:2d:49:62:43:4b:07:eb:1d:
                    eb:8d:44:48:77:f8:dc:43:cb:df:51:56:7f:1c:d0:
                    f3:39:f1:ad:2b:e4:57:99:9c:a5:43:47:20:ab:b5:
                    f2:ab:d6:50:9d:62:3c:1e:95:3f:8a:35:40:db:85:
                    a8:e7:8d:7f:66:6b:12:e3:0c:eb:ae:7b:c1:3a:7f:
                    af:24:94:43:79:87:42:be:20:6e:14:bc:44:03:07:
                    cf:c3:10:58:e3:66:73:40:db:d4:4a:af:38:18:d5:
                    99:14:c9:88:ab:93:09:1c:e0:e2:8e:d2:89:1b:89:
                    16:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0F:5B:72:6F:CA:53:F6:62:8D:57:38:43:E3:E0:2C:7C:9C:50:66
            X509v3 Authority Key Identifier:
                keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/cQ9bcm_KU_ZijVc4Q-PgLHycUGY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.248.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:fc:37:73:64:28:ac:5f:c8:37:37:67:6c:c6:50:00:33:ee:
         c4:db:c9:6f:84:df:b7:9e:bf:08:7c:cb:02:52:15:a6:b9:2f:
         26:3f:34:3d:3e:a6:72:f0:95:b3:d4:73:0a:87:06:d8:e9:9c:
         ef:ca:b7:fd:46:65:a9:7f:e1:06:b5:e2:e0:fd:aa:65:f4:55:
         c5:76:c3:77:e1:b6:71:29:6a:49:41:d8:fb:b5:14:0f:26:78:
         77:b6:a5:8d:66:2f:34:38:fd:dd:4a:30:60:0a:bb:8d:06:93:
         97:7c:bb:38:4d:b5:72:cb:3a:ca:cb:d9:b7:f7:ed:f6:ec:71:
         14:38:79:50:5b:fb:3d:04:d9:74:80:6d:df:40:d9:db:9c:20:
         c2:fc:24:fc:2f:b0:5b:9c:62:b1:04:21:f0:1c:7e:aa:40:20:
         ad:e6:2f:2b:f9:07:85:b5:d5:23:f1:b1:41:c9:36:e1:54:4c:
         d4:ee:2f:91:c3:5d:5e:f1:0c:23:5a:86:18:6f:f9:3b:d1:39:
         5a:fe:51:65:4d:21:6c:14:89:38:41:d9:ae:6d:2e:0b:3e:1d:
         24:e6:de:4d:cf:17:8d:b3:ad:e2:65:fb:34:64:79:a6:95:7f:
         49:73:e7:f7:58:bf:f0:1c:42:fd:45:bc:46:ed:1a:69:ab:ab:
         77:d3:b1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:35 2024 by rpki-client on console-fra.rpki-client.org