Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/EbiGwDVOss531D0lSYz4rvbGWZs.roa
File:                     EbiGwDVOss531D0lSYz4rvbGWZs.roa (raw, json)
Hash identifier:          LOcNIJPguVt/2XDRRR4OjGiOdmsYyFPo1SOS1Ts5JcE=
Subject key identifier:   11:B8:86:C0:35:4E:B2:CE:77:D4:3D:25:49:8C:F8:AE:F6:C6:59:9B
Certificate issuer:       /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial:       01858724EBE51B80F52646B51AF885D389B3
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/EbiGwDVOss531D0lSYz4rvbGWZs.roa
Signing time:             Fri 06 Jan 2023 12:53:41 +0000
ROA not before:           Fri 06 Jan 2023 12:53:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202335
IP address blocks:        103.75.69.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 17 Jan 2023 15:34:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:87:24:eb:e5:1b:80:f5:26:46:b5:1a:f8:85:d3:89:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
        Validity
            Not Before: Jan  6 12:53:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11b886c0354eb2ce77d43d25498cf8aef6c6599b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b4:70:4b:45:fb:dd:16:79:b2:3f:01:1c:21:
                    00:00:96:81:48:a9:0b:c9:53:3b:ff:45:aa:46:a8:
                    f4:f8:28:2f:74:3d:a7:de:ee:b6:78:11:7c:ef:58:
                    e7:a5:01:67:16:14:4a:68:d3:5c:98:9a:78:de:7c:
                    67:08:7a:5d:83:72:87:47:e3:ca:8b:fb:95:28:71:
                    9b:02:7d:d2:54:db:c9:9e:bc:13:8e:64:24:35:2e:
                    9f:01:42:61:ed:38:53:ec:5d:70:bb:1d:a5:5a:45:
                    aa:7e:13:21:1e:fd:e8:9e:ea:59:c0:88:64:2c:e7:
                    79:a3:60:5b:55:cf:cb:94:e3:fe:d7:32:08:a7:58:
                    7f:51:bf:0c:72:a3:81:a5:11:8a:d4:6e:c4:07:d6:
                    da:30:78:61:ba:b2:5b:e3:47:d7:05:0b:ad:04:8f:
                    30:8e:75:19:3d:45:a8:a1:6d:51:01:ea:d7:c8:87:
                    de:1e:16:b5:e8:05:a1:4c:4b:56:fd:26:8a:13:e5:
                    5a:c3:1d:96:09:52:f7:b7:46:d4:a6:b9:f5:a4:23:
                    22:d0:66:5c:f8:6b:ac:18:28:0e:b4:16:10:7c:89:
                    72:f5:97:ed:b2:28:c1:17:18:1d:14:5f:37:6c:b4:
                    b6:c3:c2:37:a2:e0:fb:33:49:51:3f:9a:51:95:2e:
                    94:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B8:86:C0:35:4E:B2:CE:77:D4:3D:25:49:8C:F8:AE:F6:C6:59:9B
            X509v3 Authority Key Identifier:
                keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/EbiGwDVOss531D0lSYz4rvbGWZs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:c0:1f:49:bb:13:21:2b:cf:e6:2b:26:f7:3f:0c:75:a6:5b:
         b7:38:93:0a:3c:82:c7:b0:bc:9f:70:f1:2a:95:d5:50:a3:4e:
         9d:32:3a:85:e7:98:4a:1d:43:e9:cc:e0:1a:8a:04:07:14:74:
         5e:6c:26:d8:f1:94:c8:f1:20:99:7d:32:a0:b0:14:a8:db:55:
         54:bf:a9:14:93:cc:6d:e7:0f:07:96:58:7a:d2:54:e9:6c:df:
         e5:06:63:1e:05:b5:43:a4:98:c2:c0:7c:c4:c3:a5:37:65:94:
         73:a4:cb:49:96:eb:94:62:0a:db:0e:cf:30:52:7b:db:e0:44:
         a5:94:c1:8d:56:cc:d5:b9:d8:ea:b0:1a:ba:c3:e6:21:76:5a:
         c8:6a:c9:66:f0:0e:c6:d0:ce:00:7d:87:00:6c:e0:f0:2f:a3:
         4b:68:51:71:e7:6c:c6:ac:5a:39:89:4f:26:3c:eb:18:3c:38:
         16:ea:4d:ae:1b:0d:b7:9d:23:f8:ba:5b:30:3b:4a:b0:a3:a4:
         71:e3:25:5a:55:34:d1:6b:be:ab:b8:18:76:7b:2b:c6:b2:e6:
         d1:e3:9f:33:b9:7e:ae:a4:f7:bc:3e:8a:a0:fa:7f:2e:81:53:
         0b:ec:89:e8:38:e3:4f:ae:52:68:06:fb:db:f8:9d:be:40:31:
         98:2d:3f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:37 2024 by rpki-client on console-ams.rpki-client.org