Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/YvQ23G2VAe3koxvVIkpQyXU_lT4.roa
File:                     YvQ23G2VAe3koxvVIkpQyXU_lT4.roa (raw, json)
Hash identifier:          iVgRoJbj57QamFYf+hJyqHsj6TDyPidvOrZz0jgAUFI=
Subject key identifier:   62:F4:36:DC:6D:95:01:ED:E4:A3:1B:D5:22:4A:50:C9:75:3F:95:3E
Certificate issuer:       /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial:       0191942F22EF0E193C871221EA013418C57B
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/YvQ23G2VAe3koxvVIkpQyXU_lT4.roa
Signing time:             Tue 27 Aug 2024 14:13:22 +0000
ROA not before:           Tue 27 Aug 2024 14:13:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     64487
IP address blocks:        5.178.110.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 18 Oct 2024 14:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:94:2f:22:ef:0e:19:3c:87:12:21:ea:01:34:18:c5:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
        Validity
            Not Before: Aug 27 14:13:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=62f436dc6d9501ede4a31bd5224a50c9753f953e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5d:b9:dc:dc:7f:67:9a:ca:3c:e3:09:d0:48:
                    2a:d5:bc:70:a9:2b:68:23:7c:a3:f0:06:09:35:34:
                    57:bf:80:c9:51:f4:96:86:9f:ef:c7:2f:4c:d8:98:
                    25:de:59:50:3a:24:4a:5c:e6:f6:e5:45:80:11:d1:
                    97:b2:e8:60:cd:d5:9a:31:15:92:49:8e:97:74:0f:
                    b8:1d:a7:63:0c:10:ad:d1:bb:c2:79:11:de:7c:f8:
                    74:d5:d1:25:6f:b6:01:2d:f2:9e:4d:09:53:41:55:
                    1b:1d:a0:d3:12:c6:2b:ce:28:50:9d:f0:3a:91:0b:
                    44:42:fa:63:04:e7:2e:77:50:b0:b4:95:67:78:85:
                    c0:e7:7b:5f:22:1f:51:3c:9b:53:f1:68:af:95:5d:
                    95:a7:9d:c2:a2:a9:14:8f:90:bc:69:3b:d5:b9:f3:
                    98:8c:c7:fd:40:f7:ed:cc:d0:26:d9:98:2b:27:1a:
                    ff:c9:4d:5b:84:fd:88:ca:4e:54:6e:96:bd:0f:f9:
                    79:98:03:75:37:97:2d:2b:f0:9f:a0:8b:6a:e5:e1:
                    62:0b:4b:8b:c4:88:25:26:00:8f:cf:d2:ca:c4:a4:
                    81:45:3a:6c:cd:87:ff:6c:66:ee:41:b7:fc:69:27:
                    1d:df:1e:51:e0:3e:47:0c:27:40:32:9f:a0:c8:79:
                    a8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F4:36:DC:6D:95:01:ED:E4:A3:1B:D5:22:4A:50:C9:75:3F:95:3E
            X509v3 Authority Key Identifier:
                keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/YvQ23G2VAe3koxvVIkpQyXU_lT4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.178.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:f6:dc:74:e1:8f:90:49:18:6b:e7:09:7f:94:65:5f:6e:28:
         10:c8:37:c0:a8:a5:de:9c:ae:44:08:ee:73:ec:de:cc:6c:ab:
         77:5b:38:be:03:72:91:93:06:70:08:b1:15:63:d9:31:f3:e0:
         14:e3:10:7b:c6:a1:ec:ca:2b:8c:e1:23:2f:8e:74:ee:04:7b:
         66:89:07:2c:c8:c1:6e:cb:85:7d:c2:a1:cb:92:45:7f:54:65:
         09:84:01:be:7e:3c:65:40:42:aa:6f:b7:2d:7d:d2:f6:88:af:
         53:2c:ef:62:e7:ec:7f:67:64:a1:10:28:fc:7b:47:50:01:5a:
         23:ab:f5:e6:fa:26:66:6c:7c:24:30:90:cf:d8:c8:b1:b8:0a:
         d7:9a:9f:89:45:04:34:71:c1:96:44:fa:a7:e5:81:68:a7:61:
         08:6e:f8:49:ea:c5:ba:92:cb:69:78:a4:08:02:3a:18:4a:f2:
         46:35:6f:54:32:b5:d9:f7:91:16:8a:e5:43:9c:8e:5e:a0:23:
         ac:fc:9e:61:14:ef:82:7e:56:23:ce:f8:59:62:2f:8a:c6:17:
         0e:dc:b6:e8:46:3c:07:71:0c:6e:da:91:5e:64:bc:2f:41:25:
         a1:48:3f:1f:87:21:05:73:c8:df:51:6f:81:4d:eb:05:c6:d6:
         00:a9:97:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 19:03:24 2024 by rpki-client on console-ams.rpki-client.org