Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/CgY3cvgsfdyQSl_3AQ0BJYVJtpg.roa
File:                     CgY3cvgsfdyQSl_3AQ0BJYVJtpg.roa (raw, json)
Hash identifier:          7sxqVqCOU0rqBfpMv2U2OY3kTP8Qqjfo6tjUJg51xts=
Subject key identifier:   0A:06:37:72:F8:2C:7D:DC:90:4A:5F:F7:01:0D:01:25:85:49:B6:98
Certificate issuer:       /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial:       018815EE27DFFC86599BD2DF258CCF460B08
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/CgY3cvgsfdyQSl_3AQ0BJYVJtpg.roa
Signing time:             Sat 13 May 2023 16:25:09 +0000
ROA not before:           Sat 13 May 2023 16:25:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207279
IP address blocks:        5.178.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 25 Jun 2023 17:14:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:15:ee:27:df:fc:86:59:9b:d2:df:25:8c:cf:46:0b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
        Validity
            Not Before: May 13 16:25:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0a063772f82c7ddc904a5ff7010d01258549b698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dc:db:90:c9:da:f1:fe:03:d6:a9:e1:35:5b:
                    8d:e5:79:f3:ae:cf:48:f7:b9:3e:37:93:53:85:3a:
                    0c:70:00:59:65:2a:88:e6:f7:6d:05:6c:ab:d2:f8:
                    51:2e:2d:3d:d5:29:03:ce:3e:ea:c7:dd:8b:c1:0d:
                    c9:16:8e:45:5b:28:0d:5b:a9:e9:91:fd:2e:60:8a:
                    18:a9:1a:d6:4f:d7:98:d6:63:87:27:6d:c9:75:42:
                    e7:0a:2a:a2:d8:61:81:c6:39:97:62:3b:ac:fc:bc:
                    a1:83:05:09:e9:a0:37:39:04:fb:66:74:73:ac:f1:
                    f2:b6:f5:86:e6:65:7a:6a:84:dd:f0:af:5f:1a:62:
                    18:99:6a:5d:e8:09:c5:d4:ec:b0:18:e1:ca:7e:63:
                    15:ab:03:d5:13:af:52:41:b6:36:57:8f:31:e6:64:
                    c1:d0:0f:58:45:a6:ad:21:a0:4f:c5:b5:52:4e:7a:
                    19:07:23:e8:7f:e8:bf:7f:36:ae:9f:db:58:e8:6d:
                    2a:48:af:37:c2:45:f7:9c:4a:ef:f6:fe:98:76:10:
                    4b:29:9f:8b:62:b6:75:3d:aa:4e:5e:f7:07:33:1f:
                    d5:8d:77:15:97:f5:05:de:65:54:19:6c:49:a7:41:
                    9c:eb:d9:fd:4f:73:f6:e3:34:f8:d0:90:c7:b2:73:
                    b6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:06:37:72:F8:2C:7D:DC:90:4A:5F:F7:01:0D:01:25:85:49:B6:98
            X509v3 Authority Key Identifier:
                keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/CgY3cvgsfdyQSl_3AQ0BJYVJtpg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.178.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:5e:16:95:da:00:49:d3:ce:d2:00:ec:8c:e4:2e:d5:f5:6b:
         28:25:00:15:00:d9:12:cc:67:33:2b:95:26:ec:bb:a6:f4:18:
         19:bb:7d:19:42:bd:b7:02:e9:7d:46:ed:cb:33:fd:80:23:3b:
         4f:b8:90:43:b4:c8:4a:28:a3:06:80:0e:9b:91:07:6f:66:51:
         27:2f:6b:8a:22:38:3b:7f:00:83:ee:56:9f:c1:c7:31:e2:43:
         e7:4e:50:50:8e:29:32:88:a7:6a:f9:d9:0d:7f:24:d4:0d:5d:
         0f:7e:1c:8d:b1:78:83:b1:5d:e6:ec:04:8d:64:c6:24:9e:7d:
         84:37:ab:7a:88:ad:72:5c:06:10:47:0e:05:ac:54:a5:35:b0:
         6a:5f:e4:fb:65:76:bc:51:d8:11:2c:55:ca:0e:f3:9e:c0:e0:
         2c:d9:01:cc:c2:3b:b7:15:76:47:2f:54:0d:d1:52:a4:c9:9a:
         92:c5:1a:c5:e1:69:0c:72:48:3e:79:11:f2:65:7a:35:2f:5f:
         96:95:d6:96:a6:6d:cd:6c:b9:1d:71:0c:28:06:9a:60:1b:2b:
         75:77:c6:d9:56:df:93:ad:d6:85:8a:f1:e9:9b:13:a6:e4:c3:
         5b:1a:d6:0a:0e:16:0b:d5:c1:18:87:74:dd:e4:d8:11:1a:96:
         e1:56:78:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:33 2024 by rpki-client on console-fra.rpki-client.org