Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/53O4-CfB67dibQsysiGwLs57SxQ.roa
File:                     53O4-CfB67dibQsysiGwLs57SxQ.roa (raw, json)
Hash identifier:          WxEWtZmHFwUiPVzeuvNl7SiFQga85LNb8V3SbJPkrDw=
Subject key identifier:   E7:73:B8:F8:27:C1:EB:B7:62:6D:0B:32:B2:21:B0:2E:CE:7B:4B:14
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       018E0E3951B070158D5D996D4E5183DBC9BC
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/53O4-CfB67dibQsysiGwLs57SxQ.roa
Signing time:             Tue 05 Mar 2024 10:47:01 +0000
ROA not before:           Tue 05 Mar 2024 10:47:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208287
IP address blocks:        46.38.130.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 06 Mar 2024 06:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:0e:39:51:b0:70:15:8d:5d:99:6d:4e:51:83:db:c9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Mar  5 10:47:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e773b8f827c1ebb7626d0b32b221b02ece7b4b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:69:39:91:92:61:a5:7a:71:2b:c3:fc:a3:44:
                    7e:d9:2b:73:75:17:9e:cc:43:9b:ee:e9:cb:f8:c7:
                    28:f3:ab:83:82:85:3a:e0:af:1a:74:54:9f:be:bb:
                    14:01:8f:41:2c:59:b3:f8:87:7e:49:51:fb:f1:64:
                    ae:61:a2:df:ca:b0:74:74:e2:78:aa:f4:9d:ec:ef:
                    d0:b9:fb:b1:d9:74:27:4b:76:5b:11:28:28:2b:f2:
                    67:9d:bd:bd:7d:c8:dd:76:5b:23:58:2a:7f:98:ea:
                    66:05:1a:ca:88:4b:fa:6c:e8:85:75:0c:69:83:15:
                    a4:f3:83:61:08:90:93:7a:a3:a7:db:9e:8a:39:b7:
                    ca:e1:53:c9:bd:b7:64:ec:19:b8:0c:c0:02:cb:1f:
                    ef:69:3d:55:98:2b:81:dc:b5:51:9e:9e:10:23:49:
                    29:f7:89:4c:0c:0b:ef:e7:e2:69:d8:d5:ab:a5:6d:
                    a8:63:d4:3d:ee:56:22:b0:0f:a6:51:57:6b:a4:59:
                    3a:fb:96:07:95:87:dd:c9:08:a1:70:59:3a:76:da:
                    5f:f5:24:af:a0:93:9f:b7:f1:22:5b:16:89:03:6e:
                    d0:2d:c5:0e:41:c5:94:45:98:c2:00:20:09:96:28:
                    02:66:85:63:c8:d2:9e:37:29:56:8c:3c:bb:37:10:
                    14:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:73:B8:F8:27:C1:EB:B7:62:6D:0B:32:B2:21:B0:2E:CE:7B:4B:14
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/53O4-CfB67dibQsysiGwLs57SxQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.38.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:18:4c:27:f0:c4:bf:d8:b6:7d:0e:83:76:8a:24:d9:ce:36:
         45:a6:60:be:86:a7:c2:64:38:39:a7:ee:91:1b:66:5d:17:bb:
         fb:5e:b7:bc:8a:d5:63:57:19:36:fd:dd:6f:fe:e8:37:0d:5b:
         25:a1:3b:b1:6a:f4:e6:1a:0d:e5:d4:7c:c3:cf:13:bb:ba:d4:
         c2:3a:c6:ee:84:c9:97:49:74:ce:c6:89:07:e8:40:54:c1:28:
         76:ef:ea:a1:bc:25:62:6f:0c:cc:48:8c:e3:fa:31:ed:14:94:
         6e:ac:f1:de:3b:da:8d:3d:b6:14:34:ac:b6:67:2a:26:86:fe:
         50:66:10:37:cc:f3:02:e9:c6:86:94:c0:49:13:74:bb:dd:e9:
         f9:c0:31:67:45:28:b2:da:bf:96:26:fb:e5:f9:91:70:2b:3d:
         c8:0c:36:fa:52:3a:18:1d:ba:94:64:28:e5:d9:af:f0:45:a2:
         40:17:04:fa:2f:b6:a2:73:75:c1:46:45:12:c4:cd:3b:03:32:
         bb:1d:c1:29:f2:f5:cd:d2:ee:ee:17:c3:ec:d1:e2:9d:de:dd:
         80:57:41:fd:65:cc:ab:67:bf:c0:7b:11:9a:4f:4a:45:44:bd:
         68:51:12:f1:97:9f:4f:a9:5f:1f:f3:89:19:33:94:37:5f:8b:
         dd:44:79:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:24 2024 by rpki-client on console-fra.rpki-client.org