Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/AwgolefuKyE_pgfewntO7kTHgmc.roa
File:                     AwgolefuKyE_pgfewntO7kTHgmc.roa (raw, json)
Hash identifier:          XP2Tx+Z7ilXt+DDLyPIRR/TI16VIfta0W/siT5FwqSk=
Subject key identifier:   03:08:28:95:E7:EE:2B:21:3F:A6:07:DE:C2:7B:4E:EE:44:C7:82:67
Certificate issuer:       /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial:       01856F6FFF6A72F49A0866B1094C0AAF3C7F
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/AwgolefuKyE_pgfewntO7kTHgmc.roa
Signing time:             Sun 01 Jan 2023 22:24:48 +0000
ROA not before:           Sun 01 Jan 2023 22:24:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197595
IP address blocks:        193.178.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:6f:ff:6a:72:f4:9a:08:66:b1:09:4c:0a:af:3c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
        Validity
            Not Before: Jan  1 22:24:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=03082895e7ee2b213fa607dec27b4eee44c78267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b8:4a:f9:a0:9a:21:09:96:19:cd:c5:e9:ff:
                    4f:46:89:08:ca:92:49:fc:42:12:a9:3b:d4:05:de:
                    54:db:b1:68:0d:4c:f6:e3:1a:fb:80:b1:31:a7:d0:
                    6a:98:09:e1:a1:64:33:93:a2:61:a7:f5:75:25:1f:
                    88:ee:37:fc:42:98:ed:99:cb:9b:1d:1b:db:d5:1d:
                    3a:cd:f8:b6:4f:53:45:fc:07:dc:bc:80:85:b0:fc:
                    f1:b1:47:0c:c3:3f:08:d9:a2:91:cd:7b:28:92:e4:
                    26:a2:ee:95:4d:2d:d4:12:07:b2:5f:f6:77:a9:06:
                    d2:c7:52:50:f9:79:b2:79:ee:db:ab:1e:53:33:13:
                    ae:a4:fc:79:1a:07:7f:e6:e2:81:fc:de:91:0f:a3:
                    c7:d8:9d:41:ca:82:fc:7b:fb:18:24:bb:f6:08:22:
                    6e:34:df:f8:7d:db:5b:f2:75:b4:d1:15:9f:c3:0e:
                    aa:51:66:73:a8:20:69:d8:ce:6a:ec:91:8b:6c:9c:
                    59:62:72:54:2e:a1:74:cf:27:b6:12:f4:86:ce:e5:
                    f9:bf:f3:2c:9d:61:b2:1c:73:88:f1:ad:a3:3d:f1:
                    ff:42:fa:d5:24:21:0c:95:bf:48:b0:0e:6d:54:2f:
                    5d:b2:b6:4e:db:eb:53:4e:2d:fc:55:32:84:e8:2c:
                    7b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:08:28:95:E7:EE:2B:21:3F:A6:07:DE:C2:7B:4E:EE:44:C7:82:67
            X509v3 Authority Key Identifier:
                keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/AwgolefuKyE_pgfewntO7kTHgmc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:9e:bb:b4:8b:87:7e:f2:34:5f:f6:3a:06:bf:cc:2f:77:23:
         dc:f3:52:90:20:59:2a:98:bd:23:eb:2b:1b:64:eb:1c:32:11:
         0d:b6:28:cf:3d:1a:3f:1d:d3:ea:f7:80:98:98:5d:ea:69:d9:
         93:ce:53:6a:30:9a:e8:01:6d:22:ae:4b:99:97:0a:e5:ad:97:
         55:7e:17:12:01:8d:7a:8f:73:26:70:3a:cc:60:b0:c9:ce:69:
         ef:dc:9a:d7:5d:fe:72:50:53:bf:cd:3d:41:8f:37:f9:84:96:
         c7:c1:1c:11:64:34:f8:41:a0:3d:17:22:55:5a:0f:04:15:16:
         4b:4a:85:c8:38:44:08:24:8c:26:22:21:2a:99:e5:f7:9e:ad:
         3a:d6:c2:02:49:c7:cc:78:f8:0d:92:0e:8f:69:45:c9:e3:36:
         29:57:65:69:fa:3d:31:c8:81:f0:b8:89:bd:0e:80:81:6f:92:
         24:ee:0d:7f:b8:59:00:a7:20:a6:72:04:d4:29:b7:5f:42:48:
         3a:2a:8d:22:7a:8f:94:dd:cf:a6:01:4f:f3:f5:0e:cd:74:9a:
         53:97:dd:e5:33:9a:76:db:23:1d:bb:a0:be:5e:58:1e:07:e4:
         0e:35:7d:e1:8e:0c:48:c9:87:41:d6:78:15:cd:55:59:79:fc:
         8a:6e:03:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:05 2024 by rpki-client on console-ams.rpki-client.org