Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/fX5pmdviWGjBDfe5N-FzKEaHFxk.roa
File:                     fX5pmdviWGjBDfe5N-FzKEaHFxk.roa (raw, json)
Hash identifier:          vWPn23zP4epQtbbXB9xgU7VWwn/i9n1Gh4AB9WVFtWY=
Subject key identifier:   7D:7E:69:99:DB:E2:58:68:C1:0D:F7:B9:37:E1:73:28:46:87:17:19
Certificate issuer:       /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial:       0192512D7DC39AFD945581CE260F83C3F0E4
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/fX5pmdviWGjBDfe5N-FzKEaHFxk.roa
Signing time:             Thu 03 Oct 2024 06:59:48 +0000
ROA not before:           Thu 03 Oct 2024 06:59:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214140
IP address blocks:        103.69.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 03 Oct 2024 09:55:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:51:2d:7d:c3:9a:fd:94:55:81:ce:26:0f:83:c3:f0:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
        Validity
            Not Before: Oct  3 06:59:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7d7e6999dbe25868c10df7b937e1732846871719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:be:3c:00:85:2d:10:a3:a3:58:96:70:6a:ca:
                    8e:6e:0d:fa:a3:15:05:c8:3c:d4:32:ba:71:c8:bf:
                    a7:3d:b8:07:ae:d9:84:04:21:4e:a4:f8:a3:30:88:
                    26:d2:b8:c8:e6:a5:7d:de:d9:31:8b:96:6d:6d:fe:
                    df:fa:9e:a4:00:7b:e8:80:02:41:35:a6:a5:f5:1e:
                    ba:34:a2:4c:32:d6:c6:82:b5:2e:51:9c:64:62:3c:
                    b6:9e:9f:3b:1a:8f:21:b4:39:a0:82:14:1e:e5:fc:
                    79:fa:ea:37:27:f6:60:99:57:d3:ff:81:ef:d0:49:
                    13:9b:18:90:3b:41:f9:40:42:96:69:cb:e7:46:9c:
                    6d:a9:e5:2a:d1:6d:3c:c2:20:02:fc:51:26:28:37:
                    37:f9:74:79:91:8d:fe:d2:aa:44:38:85:64:dd:9f:
                    90:c2:93:76:40:16:17:74:93:9b:f4:ba:50:36:9f:
                    01:35:90:41:a8:ae:89:ed:11:96:77:97:20:2b:3d:
                    8c:8a:00:8a:a8:9b:5c:f6:4b:2b:85:14:5d:27:6a:
                    ae:38:b4:1d:36:07:43:95:8c:7c:3b:6d:0b:c8:40:
                    52:d2:03:4a:46:e8:ff:3b:87:8c:81:0b:1e:95:b4:
                    f4:30:3b:ce:f1:2c:7a:0b:8c:86:22:dd:84:aa:19:
                    3f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7E:69:99:DB:E2:58:68:C1:0D:F7:B9:37:E1:73:28:46:87:17:19
            X509v3 Authority Key Identifier:
                keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/fX5pmdviWGjBDfe5N-FzKEaHFxk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:a4:ab:d2:3c:90:95:41:d4:9f:b0:dc:c0:b6:f3:df:2c:4e:
         7a:cc:12:b4:93:4d:13:47:42:13:4c:c0:e2:d9:48:74:7c:16:
         49:15:3a:f3:2b:19:69:d3:e1:e1:07:a7:18:f8:95:b4:70:b7:
         aa:0b:67:07:58:9c:4f:9d:38:fe:ef:9d:58:ab:87:d5:b1:c1:
         e1:13:63:5b:32:f8:00:9f:05:bd:4e:66:4e:9f:a2:04:b9:5a:
         28:ad:a9:8f:b5:11:e6:ed:6c:2a:a7:e7:75:99:a8:98:0a:a9:
         ec:c8:15:43:85:4a:89:02:3b:fb:a8:8b:b2:dc:1c:8d:e4:1f:
         8e:10:e1:86:2b:bc:e0:ca:c8:36:b7:8b:00:90:7f:51:32:ec:
         a3:f4:85:86:ca:b6:91:1a:80:d0:09:d5:ae:36:c4:f6:54:2c:
         3a:97:d0:53:46:8b:e2:71:30:b5:cc:47:e0:7e:65:f8:51:d6:
         87:67:95:3e:b5:68:80:9b:4d:34:58:cb:cb:5c:13:48:11:c5:
         99:f7:f4:79:20:2a:17:cf:44:cf:a5:dd:8a:ef:93:7e:0c:48:
         8e:5a:a7:48:f2:bc:b9:7f:2f:42:b2:4c:11:6f:24:59:c6:fa:
         ea:bb:37:bf:d3:8d:35:de:ef:b5:ea:f3:76:0a:b5:f2:ec:4d:
         81:6f:be:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 12:20:05 2024 by rpki-client on console-ams.rpki-client.org