Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/7MulK7Fd1uFfPSP3-LrfgXZ2mkM.roa
File:                     7MulK7Fd1uFfPSP3-LrfgXZ2mkM.roa (raw, json)
Hash identifier:          wOLPxa2t83LKxCib/235jDhm1delHZPSUFC0QvTihNo=
Subject key identifier:   EC:CB:A5:2B:B1:5D:D6:E1:5F:3D:23:F7:F8:BA:DF:81:76:76:9A:43
Certificate issuer:       /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial:       018DE62EE109DA32E3D6D46BE6542E2DEDB5
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/7MulK7Fd1uFfPSP3-LrfgXZ2mkM.roa
Signing time:             Mon 26 Feb 2024 16:10:48 +0000
ROA not before:           Mon 26 Feb 2024 16:10:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     43260
IP address blocks:        5.178.98.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Mar 2024 18:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:e6:2e:e1:09:da:32:e3:d6:d4:6b:e6:54:2e:2d:ed:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
        Validity
            Not Before: Feb 26 16:10:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=eccba52bb15dd6e15f3d23f7f8badf8176769a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6e:ec:e4:35:24:bf:dc:30:99:6f:0b:c1:07:
                    a4:b8:a1:34:1f:91:9f:4e:8f:a2:0f:f0:09:a7:26:
                    54:46:40:a8:2f:8b:9f:cd:ee:ec:74:11:3a:dc:db:
                    37:b6:12:cb:f9:2e:fa:ab:82:3c:9f:94:b7:3d:a7:
                    a9:e9:96:4f:b4:c2:a8:4f:29:5c:19:27:ea:08:9d:
                    34:fc:52:e1:09:ed:ea:ef:bc:e6:5b:e0:91:2f:d4:
                    82:94:86:87:67:e8:a5:3a:c1:7b:7d:2a:bf:b1:b4:
                    01:dc:9f:19:0f:2d:ed:3e:ed:c0:3c:71:d7:d8:41:
                    f9:c2:00:b1:49:be:6a:47:f7:ce:e5:d0:52:08:60:
                    b2:60:73:d7:05:80:60:dd:66:da:4b:ed:d7:8a:d3:
                    c5:fb:e2:f3:36:3d:a9:2f:99:86:82:f0:64:9f:ff:
                    7d:b8:1a:70:16:ca:c2:33:e0:45:c8:22:b2:8d:d5:
                    fa:58:aa:ac:b4:10:6f:4c:c5:48:8b:d9:bb:20:b7:
                    e6:a6:fb:5e:bf:8f:c8:79:ad:ec:68:7f:61:32:4b:
                    87:2c:9f:f1:3c:38:52:bf:ed:58:c1:87:da:31:2b:
                    d9:c1:37:90:26:7a:c9:38:2e:9d:42:1d:1e:6c:24:
                    95:c0:c6:0f:c2:3c:97:d4:f6:1b:c0:90:33:41:3b:
                    47:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CB:A5:2B:B1:5D:D6:E1:5F:3D:23:F7:F8:BA:DF:81:76:76:9A:43
            X509v3 Authority Key Identifier:
                keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/7MulK7Fd1uFfPSP3-LrfgXZ2mkM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.178.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:77:f5:a0:fc:ad:b3:56:60:38:a8:f5:1f:fd:91:8c:a8:ca:
         e2:93:b5:92:4e:be:cf:5f:ef:70:cc:45:4e:71:d0:c1:72:1c:
         37:dd:20:54:ad:69:b5:f1:1b:e6:e7:e9:c2:b3:af:c5:ba:7b:
         d4:a8:9d:13:c7:c7:5b:db:7c:11:b7:53:28:de:34:21:c8:78:
         42:b8:ec:af:d0:72:29:c8:7b:ea:94:cc:84:9a:b8:71:e1:a8:
         1b:c1:12:c2:1d:90:53:24:95:fe:67:c6:60:2a:76:25:71:ca:
         3e:35:e3:56:77:7d:71:47:70:90:8a:d5:62:c7:8a:27:75:76:
         db:65:42:b6:34:ce:c7:ff:14:12:89:98:71:d5:5e:d6:44:ba:
         35:33:3e:bd:5c:db:64:25:6c:06:88:b1:f3:6e:b0:5a:09:f3:
         e5:54:b4:7b:f1:e7:78:fb:da:8f:94:7a:9b:39:02:73:cb:47:
         97:d2:cc:07:b6:97:cf:c2:e4:b1:b2:47:9a:08:a7:bf:92:df:
         58:8c:db:90:ef:77:a0:87:20:86:4d:02:ef:ff:38:be:5b:61:
         66:a7:62:9b:dd:61:5a:72:43:db:5b:bb:75:3d:60:93:48:49:
         03:40:f3:42:9d:29:10:15:27:ac:43:a9:a3:4b:a4:bc:75:cb:
         76:f7:d8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:14 2024 by rpki-client on console-ams.rpki-client.org