Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/xDCCAJ5T6OuTts3fgIDxWtI13wk.roa
File:                     xDCCAJ5T6OuTts3fgIDxWtI13wk.roa (raw, json)
Hash identifier:          DrwE8zimgCoRj+lrPwZaMdlCpyGw6eUrvnCz+RAT/HQ=
Subject key identifier:   C4:30:82:00:9E:53:E8:EB:93:B6:CD:DF:80:80:F1:5A:D2:35:DF:09
Certificate issuer:       /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial:       0188FB7A030B57AB1A8F91B9E1C83086EE6E
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/xDCCAJ5T6OuTts3fgIDxWtI13wk.roa
Signing time:             Tue 27 Jun 2023 06:10:57 +0000
ROA not before:           Tue 27 Jun 2023 06:10:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198065
IP address blocks:        185.164.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:fb:7a:03:0b:57:ab:1a:8f:91:b9:e1:c8:30:86:ee:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
        Validity
            Not Before: Jun 27 06:10:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c43082009e53e8eb93b6cddf8080f15ad235df09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bb:c4:1c:b2:9a:af:61:fd:bb:a1:3d:95:41:
                    3e:7d:46:59:5c:7d:31:89:3d:b2:29:96:35:14:6c:
                    52:50:f6:2a:74:20:88:a2:3b:80:0e:ac:39:d8:17:
                    64:9f:15:83:e0:16:6a:b1:15:1b:4e:45:16:bc:31:
                    63:18:d4:42:33:8a:53:1b:2b:8c:90:63:a0:b2:d0:
                    99:e3:6f:84:31:59:ce:c8:cf:2f:bf:d3:d9:46:7f:
                    e3:3d:e9:62:69:5e:c6:30:19:83:9a:8e:37:22:8f:
                    88:1d:03:5c:d0:7f:c1:ab:eb:2a:fe:cc:f7:57:93:
                    d2:3b:a0:97:32:2d:3b:71:f1:c1:9e:65:08:fb:de:
                    34:b8:d8:5b:d5:73:97:26:a0:bb:9e:e0:60:55:6b:
                    fa:22:db:0f:05:48:a4:16:eb:d9:27:a9:5e:a1:0e:
                    2a:cd:a0:be:b3:50:05:1b:0b:88:7d:28:22:95:64:
                    1f:28:82:63:41:47:e0:bf:69:a3:61:2b:db:6e:f2:
                    d1:49:3f:21:ed:0f:30:d2:3a:38:fc:11:0e:9c:b8:
                    46:c8:06:16:83:16:19:d7:37:51:87:0b:77:12:11:
                    22:4c:29:ed:51:24:91:42:76:12:0e:44:8a:13:d2:
                    52:f5:41:64:6e:f6:3b:7c:a8:9d:5d:a3:0c:4b:07:
                    ab:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:30:82:00:9E:53:E8:EB:93:B6:CD:DF:80:80:F1:5A:D2:35:DF:09
            X509v3 Authority Key Identifier:
                keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/xDCCAJ5T6OuTts3fgIDxWtI13wk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.164.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:1a:0a:ef:65:a3:ab:fe:ee:88:64:28:4b:40:80:ff:6d:94:
         fc:7e:ed:ef:88:83:04:da:87:5d:30:05:0e:4d:8c:9a:00:27:
         fc:96:24:3c:77:c4:ea:29:c0:60:be:aa:9c:db:2c:7f:91:db:
         a9:d5:41:08:d5:a2:6c:3b:8e:04:c2:bd:67:9d:0b:99:f9:51:
         5b:b1:23:8e:2b:66:84:77:0f:a5:97:7f:3f:7c:cc:0f:8a:a1:
         b4:a5:23:68:ad:de:96:f2:36:58:1a:f9:17:5e:e1:57:2e:5e:
         4b:59:98:84:12:03:8a:8a:b7:e7:58:8d:08:4f:ab:5b:8a:ef:
         5f:12:c0:58:9b:6f:14:6c:2f:89:cc:98:07:59:82:93:ce:55:
         d3:c1:df:c6:68:80:e7:75:e5:c0:72:07:b1:c1:ac:b3:f1:2f:
         5e:92:18:b2:49:2e:6a:09:9f:3d:bd:c4:f2:ed:e4:b2:48:5f:
         0c:7d:41:8e:db:61:a0:86:5d:27:72:d8:70:31:89:04:dc:47:
         6c:11:1d:90:a7:54:a4:97:69:9e:49:09:20:bd:6e:0c:c6:99:
         f8:80:28:19:eb:b5:c9:0f:73:ac:10:02:37:62:8a:9f:22:c6:
         c8:05:e6:42:09:50:ce:f8:bd:17:5a:7e:37:41:79:fd:c4:ee:
         9e:ac:cc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:29 2024 by rpki-client on console-ams.rpki-client.org