Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/evG3_NuRgsD9Acj_WVJgrNP5EvY.roa
File:                     evG3_NuRgsD9Acj_WVJgrNP5EvY.roa (raw, json)
Hash identifier:          0xwIbz4tcuIguTn6wKWFzEL8P2QN7JwMOSGiFWIuz9g=
Subject key identifier:   7A:F1:B7:FC:DB:91:82:C0:FD:01:C8:FF:59:52:60:AC:D3:F9:12:F6
Certificate issuer:       /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial:       018B3CB3034AA0B0B12387D9EEEFF4CEFF90
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/evG3_NuRgsD9Acj_WVJgrNP5EvY.roa
Signing time:             Tue 17 Oct 2023 08:14:06 +0000
ROA not before:           Tue 17 Oct 2023 08:14:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     13335
IP address blocks:        5.178.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Dec 2023 15:57:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:3c:b3:03:4a:a0:b0:b1:23:87:d9:ee:ef:f4:ce:ff:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
        Validity
            Not Before: Oct 17 08:14:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7af1b7fcdb9182c0fd01c8ff595260acd3f912f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:24:e9:ab:6e:92:70:81:00:dd:70:19:7f:
                    7a:4b:47:22:6b:be:48:e1:ef:81:4e:1e:ec:33:9b:
                    9d:51:28:53:f8:d2:75:24:df:e5:52:ab:a8:88:da:
                    61:11:7d:73:b3:32:95:55:46:62:46:e4:30:52:aa:
                    e2:dc:e3:ba:65:a2:1a:9c:88:9c:7f:a2:1c:a3:96:
                    e2:1a:6b:a6:c2:f0:46:c1:99:ae:51:e0:55:fe:44:
                    95:a6:8d:c1:43:6d:0c:d8:0c:0a:e8:9c:14:f7:23:
                    24:75:19:70:7c:b6:16:1d:b4:b2:9d:f9:d2:52:7e:
                    29:40:b4:83:f6:a3:e0:ac:9f:17:e7:44:9b:7c:e6:
                    63:e3:7c:e9:31:9b:03:b8:91:1d:13:cd:40:f9:eb:
                    3c:2b:16:b0:07:99:c3:9d:37:1a:bf:dc:0d:4d:15:
                    d8:a2:1c:4c:5c:a0:ac:17:63:e8:33:00:ae:5a:d9:
                    83:32:1c:b7:69:8d:f0:13:52:75:93:29:5f:af:67:
                    57:04:bb:8a:43:5e:83:26:ae:34:66:82:79:41:e5:
                    93:9b:99:b2:85:1d:39:fb:27:1a:54:0f:51:92:90:
                    63:98:f9:68:0e:54:96:ed:8e:02:c8:bc:01:51:c4:
                    a8:65:45:db:f4:03:19:ff:e0:e1:9c:b3:36:bf:3a:
                    ae:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F1:B7:FC:DB:91:82:C0:FD:01:C8:FF:59:52:60:AC:D3:F9:12:F6
            X509v3 Authority Key Identifier:
                keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/evG3_NuRgsD9Acj_WVJgrNP5EvY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.178.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:2f:aa:35:eb:ff:41:68:8e:12:ee:87:52:0e:d1:62:0b:1a:
         1c:25:c9:78:60:ed:07:1e:b8:6f:e8:8f:73:c6:01:79:f7:9b:
         e4:47:bd:5a:0f:1f:dd:05:28:9f:b7:7e:48:f0:16:c4:1f:ed:
         fd:e1:d1:9c:7f:d6:fb:19:d7:9d:e1:06:6b:c3:f8:b4:d8:5f:
         c2:c3:c3:7d:7a:8c:1d:1f:7e:67:5d:b3:87:bb:dc:3c:87:ed:
         6d:4a:20:37:47:ec:3d:53:49:f2:6f:8e:f2:4d:2e:09:f6:4d:
         7c:71:ab:96:31:33:74:05:1d:2d:45:09:d5:f4:3e:ea:4e:e4:
         1f:66:58:69:48:15:fa:44:1a:b1:31:a5:82:7b:b7:51:e2:fe:
         94:38:b5:21:a8:7d:fb:1c:33:fe:ad:1e:68:0b:ce:b9:c4:c7:
         0d:f8:a3:56:5a:69:69:7d:0f:51:8d:17:16:b0:e9:d5:f4:eb:
         db:51:3f:71:98:3e:02:0d:bc:82:77:4e:1c:f8:b0:ff:04:86:
         3e:63:9c:8e:2b:29:ed:57:34:d3:9e:b4:50:40:98:cb:b9:6a:
         66:3c:f0:a0:5e:2f:d7:80:6e:eb:64:ae:eb:ee:94:f9:52:0e:
         ac:03:fe:b9:1b:46:00:9d:16:71:15:a6:ab:8a:de:98:d6:c5:
         bc:09:a3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:33 2024 by rpki-client on console-fra.rpki-client.org