Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/TlmrGpYcF8QKPT5jHELOZFlF7Eg.roa
File:                     TlmrGpYcF8QKPT5jHELOZFlF7Eg.roa (raw, json)
Hash identifier:          Zfq9Uc3NpAFH5m3/yeQhkTDjpRlWRlI5nJhwWuW8EAg=
Subject key identifier:   4E:59:AB:1A:96:1C:17:C4:0A:3D:3E:63:1C:42:CE:64:59:45:EC:48
Certificate issuer:       /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial:       0191526D004C582193BCFDE9E5E37E79CA89
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/TlmrGpYcF8QKPT5jHELOZFlF7Eg.roa
Signing time:             Wed 14 Aug 2024 19:46:00 +0000
ROA not before:           Wed 14 Aug 2024 19:46:00 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58061
IP address blocks:        5.182.117.0/24 maxlen: 24
                          31.222.230.0/24 maxlen: 24
                          37.72.128.0/24 maxlen: 24
                          45.129.197.0/24 maxlen: 24
                          62.204.52.0/24 maxlen: 24
                          77.83.193.0/24 maxlen: 24
                          78.142.238.0/24 maxlen: 24
                          91.212.103.0/24 maxlen: 24
                          91.242.234.0/24 maxlen: 24
                          130.255.172.0/24 maxlen: 24
                          130.255.175.0/24 maxlen: 24
                          146.19.129.0/24 maxlen: 24
                          185.253.4.0/24 maxlen: 24
                          193.17.88.0/24 maxlen: 24
                          193.201.10.0/24 maxlen: 24
                          194.69.164.0/24 maxlen: 24
                          195.64.127.0/24 maxlen: 24
                          195.96.159.0/24 maxlen: 24
                          212.107.26.0/24 maxlen: 24
                          213.109.153.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 21 Aug 2024 18:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:52:6d:00:4c:58:21:93:bc:fd:e9:e5:e3:7e:79:ca:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
        Validity
            Not Before: Aug 14 19:46:00 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4e59ab1a961c17c40a3d3e631c42ce645945ec48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3a:58:c7:88:ea:05:ea:c6:0b:47:98:40:00:
                    05:ac:29:e9:6f:77:22:24:cf:8a:11:55:e5:7f:c3:
                    e7:e2:e5:2d:8b:c5:48:4f:fc:ee:04:cb:76:87:9b:
                    eb:2b:bc:60:6d:f0:4a:e8:d5:2b:3e:9a:ef:ae:1b:
                    5b:02:4e:25:c8:a9:fe:ce:bc:8c:c8:0a:5a:54:54:
                    08:a5:6f:8e:db:d2:e8:00:55:b1:b5:7e:4e:08:32:
                    28:b8:43:67:66:b2:c5:a2:fa:ee:3f:07:d1:a5:16:
                    a7:7d:60:3c:64:29:c6:51:97:78:0e:88:14:99:ad:
                    76:88:79:5d:2b:52:71:eb:3e:13:a4:67:4a:79:c4:
                    0f:7f:d2:62:62:48:2b:b3:2c:55:65:b6:b0:21:af:
                    58:52:c4:bb:03:f2:51:9e:ac:fc:4f:b1:33:53:5a:
                    6d:84:98:a7:2e:94:8d:f6:78:24:02:64:9f:8d:bc:
                    5b:4a:01:da:f7:0f:bf:9d:51:71:6e:4e:94:51:09:
                    96:62:da:a0:3d:6e:ca:be:6e:11:43:65:dd:e5:bb:
                    dd:fa:7d:fe:0c:ec:d6:b5:9c:a1:ac:17:84:6f:8d:
                    cd:c8:1b:c9:7e:b3:02:f0:7a:46:24:1b:a8:a9:d7:
                    f5:58:33:0e:cb:e3:ed:cd:bd:5d:d2:a1:36:df:6a:
                    eb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:59:AB:1A:96:1C:17:C4:0A:3D:3E:63:1C:42:CE:64:59:45:EC:48
            X509v3 Authority Key Identifier:
                keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/TlmrGpYcF8QKPT5jHELOZFlF7Eg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.117.0/24
                  31.222.230.0/24
                  37.72.128.0/24
                  45.129.197.0/24
                  62.204.52.0/24
                  77.83.193.0/24
                  78.142.238.0/24
                  91.212.103.0/24
                  91.242.234.0/24
                  130.255.172.0/24
                  130.255.175.0/24
                  146.19.129.0/24
                  185.253.4.0/24
                  193.17.88.0/24
                  193.201.10.0/24
                  194.69.164.0/24
                  195.64.127.0/24
                  195.96.159.0/24
                  212.107.26.0/24
                  213.109.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:7e:4e:39:55:d5:ae:04:aa:af:23:07:a2:27:d3:01:f1:4f:
         d0:a3:50:3c:00:21:b4:1a:5a:aa:5b:8c:e9:cb:a7:66:77:94:
         4f:25:60:1a:40:dd:b7:d9:7d:d9:06:b8:b3:fb:86:d3:5e:aa:
         21:cb:95:43:eb:ad:04:0a:ef:52:2c:5e:12:24:50:fd:7f:00:
         9e:16:60:36:76:ba:ee:bc:a6:18:09:1e:2e:af:db:3b:94:11:
         d9:71:c5:f9:5f:52:3d:05:95:4d:f4:06:1c:ad:81:52:eb:11:
         71:6b:fb:c1:15:88:37:aa:43:fd:05:61:0f:e0:7b:0b:cc:b9:
         bb:f4:24:ff:cb:c3:41:e4:02:78:f0:25:40:55:0c:64:d2:a1:
         2f:37:3e:ca:fb:c1:e8:0e:3b:35:6c:ee:53:c3:97:98:fe:b9:
         0b:ce:34:c0:0a:c7:d5:74:31:0a:de:b7:a4:47:c7:68:be:e0:
         6a:55:2e:46:58:cc:0c:0e:bf:a8:bc:9e:42:09:af:ca:f8:20:
         d3:ad:dc:da:9d:c1:86:7b:57:1d:87:9a:d6:3c:49:38:57:13:
         ed:51:5a:b1:9d:ab:58:8a:66:cb:07:8e:3b:5a:22:b1:2b:48:
         d3:0a:7f:ce:56:9b:c6:b4:40:fb:b6:ba:f2:66:63:6f:64:eb:
         be:e3:3d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 22:37:05 2024 by rpki-client on console-fra.rpki-client.org