Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/eLL-YpnQWKhg5lWvtq2ikeZ6Ngo.roa
File:                     eLL-YpnQWKhg5lWvtq2ikeZ6Ngo.roa (raw, json)
Hash identifier:          tuyGFqGopYUbHxwVjB8L+zEGlEWURPt5sJnZF7ZYZ6I=
Subject key identifier:   78:B2:FE:62:99:D0:58:A8:60:E6:55:AF:B6:AD:A2:91:E6:7A:36:0A
Certificate issuer:       /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial:       0187AFD36CB91466191C23AA1EB23624A49C
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/eLL-YpnQWKhg5lWvtq2ikeZ6Ngo.roa
Signing time:             Sun 23 Apr 2023 20:34:41 +0000
ROA not before:           Sun 23 Apr 2023 20:34:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212219
IP address blocks:        5.178.100.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Jun 2023 08:42:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:af:d3:6c:b9:14:66:19:1c:23:aa:1e:b2:36:24:a4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
        Validity
            Not Before: Apr 23 20:34:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78b2fe6299d058a860e655afb6ada291e67a360a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:63:24:07:c5:85:20:c3:80:b7:b0:40:d3:dd:
                    6c:d3:17:04:a1:d1:49:8c:67:5b:07:c9:ea:09:ea:
                    45:e8:06:af:af:7e:7c:5a:6d:02:2a:34:9a:7b:b3:
                    c9:aa:9b:73:14:4a:27:ac:96:09:2a:b3:2d:93:64:
                    9b:29:75:28:fe:e2:ad:b9:07:1e:ba:ff:6e:b3:b0:
                    4e:e9:0b:50:8f:8f:bd:ce:f1:d3:fa:78:cf:f2:f7:
                    2c:d8:52:6e:4e:0b:f2:4a:ed:55:d9:19:f9:ef:df:
                    cb:c8:68:8c:e3:f2:5a:97:66:0d:b4:79:36:57:16:
                    b7:e9:dc:da:ef:45:d2:fd:7e:4a:44:76:49:b7:56:
                    37:97:42:69:9c:65:08:eb:0e:93:ba:0e:2f:69:82:
                    5c:15:3c:28:e7:d6:5d:fa:16:cf:6c:59:ec:72:c3:
                    0c:c2:94:7d:62:c2:a0:7b:a0:fe:ef:a7:73:ad:7b:
                    33:d5:a4:89:ac:b1:bd:4a:6c:53:35:8a:8a:27:c1:
                    5a:90:0b:df:2c:2c:bf:73:45:35:79:fe:33:ee:52:
                    a7:91:ee:4a:1e:b4:7f:d1:c9:db:f6:df:1c:0a:c4:
                    ff:2e:55:50:11:4b:c5:c6:8a:12:5e:14:b7:2a:28:
                    09:c7:4e:40:03:89:c9:32:4e:43:5b:51:bd:da:0f:
                    62:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B2:FE:62:99:D0:58:A8:60:E6:55:AF:B6:AD:A2:91:E6:7A:36:0A
            X509v3 Authority Key Identifier:
                keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/eLL-YpnQWKhg5lWvtq2ikeZ6Ngo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.178.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:f7:ab:2f:d0:92:9e:a1:a8:d5:85:87:05:f1:3d:fe:c5:11:
         b3:62:2d:40:0f:6f:4a:f6:35:8c:c2:cb:dd:53:db:85:a3:88:
         71:7c:92:ee:0a:ee:2f:5a:65:66:ae:d9:3b:49:ca:eb:26:7f:
         6b:dd:86:7c:b8:e7:31:56:03:7c:fa:ad:5d:3d:d6:a6:11:d1:
         ae:f7:1e:47:57:ea:91:14:52:76:bb:4c:1a:a3:ec:fd:73:83:
         f5:5e:37:0c:df:cf:63:d1:c2:6a:35:e6:ee:27:ca:d1:4d:67:
         8a:e6:ff:7c:e3:bd:8e:3d:83:af:bb:ef:ff:e2:9b:98:1f:16:
         9d:a2:91:82:b6:20:37:78:e3:3b:fc:d7:68:db:0c:83:8f:91:
         cd:1e:d9:6a:f6:8c:5d:20:1f:f7:a5:ec:1e:96:03:f9:a9:e0:
         5d:35:fc:ee:07:3a:2b:2c:82:7b:0a:dd:60:cc:60:9f:76:3a:
         e5:56:63:0a:18:36:35:ca:18:eb:90:85:f4:03:1c:37:24:40:
         92:e2:e0:65:8a:83:60:80:81:f5:cf:fc:41:8f:c8:02:c7:ee:
         5f:0b:f5:8a:c8:36:93:bb:de:ef:ae:66:ef:e9:09:f8:da:90:
         44:d2:20:8d:53:83:3a:f3:6c:16:0e:ac:22:69:31:f8:fc:ea:
         23:1a:9b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:15 2024 by rpki-client on console-ams.rpki-client.org