Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/J_75wDMLeDTcJjRAZ6JbVi5Jy3w.roa
File:                     J_75wDMLeDTcJjRAZ6JbVi5Jy3w.roa (raw, json)
Hash identifier:          9QZS80wHc9Wi/QCnhsp6mSRzHGbDesWIFygyz8tnkps=
Subject key identifier:   27:FE:F9:C0:33:0B:78:34:DC:26:34:40:67:A2:5B:56:2E:49:CB:7C
Certificate issuer:       /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial:       018AC0EB3F417B1DBDC42BF1D57770E044C3
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/J_75wDMLeDTcJjRAZ6JbVi5Jy3w.roa
Signing time:             Sat 23 Sep 2023 07:22:37 +0000
ROA not before:           Sat 23 Sep 2023 07:22:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49685
IP address blocks:        194.53.72.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:c0:eb:3f:41:7b:1d:bd:c4:2b:f1:d5:77:70:e0:44:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
        Validity
            Not Before: Sep 23 07:22:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=27fef9c0330b7834dc26344067a25b562e49cb7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1a:e4:fc:1c:83:16:73:50:29:bf:0a:0c:58:
                    02:76:48:fe:0b:2d:b7:a8:c5:ba:6b:84:f7:0c:74:
                    f2:92:f8:15:97:5b:35:d0:8a:19:97:5b:74:aa:64:
                    5b:42:61:00:96:83:65:fe:f2:9b:43:cb:d4:cc:20:
                    16:08:89:31:3d:43:f4:6a:a3:5f:6e:cc:bd:8a:41:
                    74:5e:19:c6:a5:89:5b:13:d2:3e:1c:35:94:8f:7d:
                    dd:b9:8d:af:71:a5:fe:26:15:8a:66:bc:7b:e5:33:
                    4d:23:3c:35:e6:ed:5b:02:ec:93:9c:de:6e:e5:fe:
                    75:27:ed:d5:f5:9a:86:c6:66:ca:a6:a6:e7:d3:b3:
                    f7:69:6a:85:52:76:50:76:51:f6:08:80:a4:d4:44:
                    df:42:2a:da:5b:ce:80:0a:0d:73:40:25:75:44:78:
                    9e:02:3f:6a:ae:18:6a:22:6e:a7:0c:86:14:f6:d6:
                    b3:2a:78:d8:08:22:46:33:fe:c2:cc:7c:4b:c8:ca:
                    9f:e9:bd:03:91:0d:92:2a:77:22:4e:27:28:d4:86:
                    56:25:0f:75:f3:e1:ca:fa:71:e5:4b:4d:77:cc:65:
                    0d:7d:2b:0b:13:b7:12:d1:df:29:05:2f:79:a9:42:
                    2e:90:bd:7c:be:ef:13:fd:35:1e:91:37:3c:91:6f:
                    0c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FE:F9:C0:33:0B:78:34:DC:26:34:40:67:A2:5B:56:2E:49:CB:7C
            X509v3 Authority Key Identifier:
                keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/J_75wDMLeDTcJjRAZ6JbVi5Jy3w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.53.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:50:02:15:de:4f:cc:6e:ba:ec:75:01:4c:78:7b:0c:03:84:
         f8:69:70:03:e0:a1:58:11:08:80:7d:16:ee:45:af:f3:f2:be:
         a5:d7:21:84:0c:3f:07:97:66:ee:fe:8d:bc:f1:31:09:96:bf:
         ef:ea:95:30:4f:77:fa:0b:8b:d2:6c:b4:db:9e:c4:ee:49:76:
         97:52:ed:d4:5b:a7:ed:42:30:92:e3:46:4a:4d:a7:37:b6:84:
         03:04:fa:d8:e8:2d:7d:68:1e:3e:78:d0:6c:b2:cd:c0:30:89:
         60:59:82:22:f6:f5:20:68:82:9b:bf:4a:66:13:f1:5d:ef:73:
         99:4e:1a:89:35:cd:69:5a:ec:8f:3a:eb:4a:32:f6:64:f8:65:
         bf:97:05:91:92:8b:0a:6c:71:ac:ff:bc:0d:0b:82:52:8c:42:
         6e:5e:4d:6b:a3:c7:c9:cb:57:99:31:85:aa:32:f2:c0:64:c4:
         61:f1:63:a3:fd:33:31:f0:0e:45:ca:1b:d5:57:03:28:20:d3:
         73:e2:78:a8:a8:23:28:74:d7:70:51:f2:78:bf:d2:aa:a5:e4:
         72:a5:cc:1d:d2:7e:14:a9:97:30:46:b5:0b:a8:3e:0c:ef:c7:
         66:82:71:2f:20:d8:ff:bf:b8:c4:ed:87:df:10:fe:8a:07:ed:
         8b:e3:ce:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:45 2024 by rpki-client on console-fra.rpki-client.org