Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/eTxt3s6WM46mi3rNHssLL1vW2PE.roa
File:                     eTxt3s6WM46mi3rNHssLL1vW2PE.roa (raw, json)
Hash identifier:          auxcqyqLkDk36e5ePUQvixBI2gmGZbODGDImzFjtOA0=
Subject key identifier:   79:3C:6D:DE:CE:96:33:8E:A6:8B:7A:CD:1E:CB:0B:2F:5B:D6:D8:F1
Certificate issuer:       /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial:       01856EC21181D2D87197A908870059F51ED7
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/eTxt3s6WM46mi3rNHssLL1vW2PE.roa
Signing time:             Sun 01 Jan 2023 19:14:50 +0000
ROA not before:           Sun 01 Jan 2023 19:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209259
IP address blocks:        5.102.133.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:c2:11:81:d2:d8:71:97:a9:08:87:00:59:f5:1e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
        Validity
            Not Before: Jan  1 19:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=793c6ddece96338ea68b7acd1ecb0b2f5bd6d8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d1:47:cd:ee:a4:85:7b:c5:0f:d3:bb:4b:34:
                    3e:05:9c:3f:a2:d6:ef:21:fb:ea:90:a6:ec:b2:9e:
                    6f:d6:09:f9:95:c1:1f:60:e1:42:43:28:c8:55:c0:
                    71:e8:f2:61:b7:88:32:fd:bb:d9:9d:40:38:fa:27:
                    9a:d0:42:8a:86:81:a7:54:bf:23:8c:52:68:39:9f:
                    12:41:cd:d8:96:50:bd:05:c3:c7:96:1b:72:f5:cb:
                    51:35:a9:2b:06:4b:20:92:ba:07:5e:b7:12:ac:2b:
                    11:bc:1c:5a:5e:6b:19:b3:a8:a9:66:e4:6e:f5:fe:
                    46:16:9c:62:cf:d4:b1:36:6e:31:cf:21:b1:8b:d7:
                    95:82:b4:4c:9b:56:a4:ed:6e:39:23:bd:2f:12:5d:
                    0b:ec:e4:30:ff:24:c4:0e:6b:79:ef:00:9d:31:03:
                    d1:59:ed:3a:a4:fb:62:d9:6b:04:12:ba:10:30:cb:
                    c8:22:26:0b:68:15:94:eb:2f:a9:98:32:70:e8:1d:
                    0e:bd:e2:08:ed:58:6d:17:58:1e:dd:5a:26:92:57:
                    a1:05:15:17:34:ad:0a:18:2f:e5:64:ea:5c:42:5e:
                    58:fe:63:a6:9d:4d:a7:f7:91:ee:9d:98:b9:da:e6:
                    86:ce:99:e3:29:b6:f0:b9:99:aa:6e:87:19:56:62:
                    ab:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3C:6D:DE:CE:96:33:8E:A6:8B:7A:CD:1E:CB:0B:2F:5B:D6:D8:F1
            X509v3 Authority Key Identifier:
                keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/eTxt3s6WM46mi3rNHssLL1vW2PE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.102.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:bb:0f:ce:7d:64:1f:f3:39:d2:fa:c6:0a:61:a0:06:74:e2:
         4a:54:a4:38:52:7c:18:1e:7d:a6:40:13:66:08:a4:ae:7c:2a:
         04:d9:8f:92:ef:ea:65:f0:8e:05:58:5a:45:29:57:07:21:13:
         42:1c:36:bc:1f:82:ea:4d:22:c7:a9:23:50:03:5e:40:69:04:
         8a:bc:cd:3a:b7:f5:a7:d2:55:ad:78:a5:aa:8b:93:0c:61:53:
         26:7d:74:eb:06:9a:44:ca:2a:85:8c:b1:f6:48:3f:38:2d:4f:
         84:83:4a:2b:75:64:af:5a:c2:57:db:13:b3:1d:62:10:f1:17:
         94:fd:e4:81:d8:01:23:92:de:54:42:89:49:2f:19:ee:4e:cc:
         e9:4c:17:0f:00:c6:16:3b:0f:42:52:64:a3:27:1e:0f:e7:e6:
         6c:93:c0:fd:50:2b:42:49:8f:aa:4d:14:80:32:f7:11:8a:a4:
         b7:e3:06:7f:7b:c4:72:05:71:44:44:90:e0:f9:37:13:4b:fb:
         e0:37:ce:d4:03:0c:7c:d1:e7:dc:b1:5d:d4:96:24:0c:50:7e:
         b7:4e:bb:c3:b3:75:7e:ad:74:4e:0c:39:08:23:e6:9b:2b:d7:
         47:87:35:f2:44:51:36:3d:f0:e5:ad:81:b1:94:9b:d2:5b:7f:
         cb:8b:9c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:06 2024 by rpki-client on console-ams.rpki-client.org