Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/N0l7ra3NhM3eyZIWxTyVtv6NWbQ.roa
File:                     N0l7ra3NhM3eyZIWxTyVtv6NWbQ.roa (raw, json)
Hash identifier:          eOtlpEjRu+szIpyIambXCxXytvIIdq6HNnuopfoTWD0=
Subject key identifier:   37:49:7B:AD:AD:CD:84:CD:DE:C9:92:16:C5:3C:95:B6:FE:8D:59:B4
Certificate issuer:       /CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Certificate serial:       018570397CCE4D35A1AC0B354ED57E754DDF
Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/N0l7ra3NhM3eyZIWxTyVtv6NWbQ.roa
Signing time:             Mon 02 Jan 2023 02:04:53 +0000
ROA not before:           Mon 02 Jan 2023 02:04:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35405
IP address blocks:        87.236.64.0/24 maxlen: 24
                          87.236.70.0/24 maxlen: 24
                          87.236.65.0/24 maxlen: 24
                          87.236.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:39:7c:ce:4d:35:a1:ac:0b:35:4e:d5:7e:75:4d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9
        Validity
            Not Before: Jan  2 02:04:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=37497badadcd84cddec99216c53c95b6fe8d59b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:96:7b:7b:70:80:9c:53:42:2f:00:5d:1b:21:
                    ba:67:24:a9:30:d4:c0:35:57:f1:c0:52:42:0b:74:
                    7a:52:b5:a3:5c:bb:ba:9c:37:f2:83:24:a4:db:6c:
                    24:b1:9b:52:1a:36:71:32:ed:96:7f:73:01:2d:1a:
                    0b:f8:09:05:87:3d:a3:c0:d6:74:3d:b8:c3:c3:76:
                    b5:26:13:4e:e1:8b:df:50:84:47:5a:86:88:fe:a7:
                    d9:db:e4:4c:29:7b:06:b5:3a:6f:cc:39:b1:b0:0e:
                    85:db:c6:f9:83:8f:f7:08:56:93:e9:e8:bc:89:f9:
                    29:33:44:b8:9b:70:1b:ba:b4:26:ad:a3:48:65:cc:
                    f1:52:ec:4d:71:fc:27:8f:52:18:9b:cc:9e:9b:56:
                    e1:bd:ba:be:f0:2b:94:6f:d7:b0:a3:cd:92:60:e8:
                    01:e8:a6:29:34:7c:5f:5a:28:54:ae:07:21:44:e8:
                    73:d4:4f:cf:8e:07:2c:7b:1c:1e:6d:99:13:0d:3c:
                    bb:3b:12:15:5f:f8:73:c0:8a:53:71:d5:7d:6f:7c:
                    e3:f6:84:9f:03:19:2b:f6:17:db:fe:27:e1:81:1f:
                    95:86:c6:e7:2a:0b:be:a7:e8:68:53:02:69:c2:81:
                    46:20:20:cb:55:e7:89:ab:5e:85:26:3e:0b:e6:c5:
                    96:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:49:7B:AD:AD:CD:84:CD:DE:C9:92:16:C5:3C:95:B6:FE:8D:59:B4
            X509v3 Authority Key Identifier:
                keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/N0l7ra3NhM3eyZIWxTyVtv6NWbQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.236.64.0/23
                  87.236.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:fc:98:e0:c7:10:ec:bb:22:83:d7:38:a2:af:3f:7d:63:54:
         f2:16:ec:b8:59:18:10:27:4b:f1:e3:62:81:8f:a4:1b:2b:25:
         fb:42:9e:c7:15:f3:5e:76:e7:ae:94:85:c3:d6:66:20:1c:89:
         5a:24:5c:ac:95:3b:1f:33:97:38:75:56:0b:73:5a:6f:d9:7b:
         54:45:e9:f9:68:f3:00:0d:d4:6b:bd:f4:2c:db:2a:82:db:b6:
         95:48:ac:b3:fb:8a:9c:ce:58:b5:81:6a:33:08:0a:a8:06:99:
         eb:75:2f:12:4e:24:d0:8b:f3:05:f7:2e:1c:22:46:13:a5:7b:
         66:b7:14:ff:06:5d:25:ca:e5:0d:74:82:6b:6d:04:28:9e:ea:
         02:e8:c3:a3:36:27:35:22:9e:7e:32:61:53:48:35:86:68:1c:
         ee:44:c3:09:f2:2c:8f:61:a4:50:41:99:5a:04:7b:f2:b9:3e:
         f5:42:c5:37:08:7e:f6:6a:dd:da:bd:03:69:2f:3d:4e:a6:c7:
         be:36:81:32:89:a3:5b:16:ce:e1:70:9c:cf:5f:8c:cf:0c:35:
         8e:8b:a2:b6:4b:dc:67:5a:d3:ae:aa:74:a9:b6:90:35:3e:7b:
         5d:f8:4d:0d:4a:09:c9:27:f4:9b:81:af:76:d8:2b:12:29:f1:
         ac:e9:19:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:23 2024 by rpki-client on console-fra.rpki-client.org