Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/94R0OM6lDSWHbZz-MknPaVqUb9Y.roa
File:                     94R0OM6lDSWHbZz-MknPaVqUb9Y.roa (raw, json)
Hash identifier:          eGbfXFLMJUndWTuA2l+x+HwJNGlyprGul5bAFnwUWB8=
Subject key identifier:   F7:84:74:38:CE:A5:0D:25:87:6D:9C:FE:32:49:CF:69:5A:94:6F:D6
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       0190E8BD650301E6480E3AE8E5D4B5B63B0F
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/94R0OM6lDSWHbZz-MknPaVqUb9Y.roa
Signing time:             Thu 25 Jul 2024 07:14:04 +0000
ROA not before:           Thu 25 Jul 2024 07:14:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215155
IP address blocks:        185.143.73.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 25 Sep 2024 16:17:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:e8:bd:65:03:01:e6:48:0e:3a:e8:e5:d4:b5:b6:3b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Jul 25 07:14:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f7847438cea50d25876d9cfe3249cf695a946fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:41:0c:09:03:e2:24:8f:f6:2c:c7:e5:53:
                    8d:e4:ab:5e:bb:85:89:05:e0:ab:87:59:3e:18:3c:
                    39:c6:8f:df:84:a6:d0:21:7e:13:e6:57:cf:1c:da:
                    1d:80:d2:9d:95:61:49:c6:90:8d:3d:9e:22:6b:ff:
                    0a:d7:49:0d:2e:91:74:7a:ae:e5:27:b0:28:25:f1:
                    46:e9:3e:c7:5b:ad:83:6a:06:77:06:c2:a3:38:5e:
                    47:75:44:ca:58:e2:1c:d9:50:78:cb:35:b1:20:34:
                    a5:53:d8:fe:5a:99:18:68:97:30:df:3b:0b:b2:fe:
                    fe:64:c9:97:62:51:0f:f9:ed:59:30:44:e8:d5:6c:
                    07:06:77:c5:ec:95:77:5f:6c:f9:2e:86:6d:00:a5:
                    55:8c:48:62:de:f1:ae:d0:5f:6f:5f:e5:0f:29:97:
                    94:a5:a0:c5:55:74:1d:bc:14:2c:f3:dd:cb:70:8e:
                    1b:9b:ac:0c:9b:40:d1:1d:58:b0:b7:4f:04:0c:74:
                    a3:59:05:c7:77:87:a2:df:d5:50:f6:bc:88:98:46:
                    c4:8e:0c:d1:7a:9d:c2:01:47:9b:5e:5c:71:de:19:
                    d3:ce:d4:7a:04:c2:f3:ee:a7:78:aa:09:88:46:5b:
                    c0:15:d7:08:3a:d6:21:90:db:ec:63:ac:a1:73:99:
                    ed:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:84:74:38:CE:A5:0D:25:87:6D:9C:FE:32:49:CF:69:5A:94:6F:D6
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/94R0OM6lDSWHbZz-MknPaVqUb9Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.143.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:ad:14:78:e5:da:0a:6c:fc:e1:80:d1:ab:dc:97:9d:23:04:
         d1:5f:45:8b:cb:33:57:30:0f:16:70:01:ee:a5:4e:d5:b4:15:
         61:1e:23:2b:56:e6:df:94:1b:9f:31:bb:8d:02:f6:a9:b4:38:
         9b:8f:4b:d6:e0:6f:8c:89:45:b1:90:49:03:70:ee:cd:f4:d1:
         e8:22:c2:e8:c0:e5:d7:c2:91:9e:b0:ca:b6:e6:ba:94:e8:1e:
         6d:d3:ee:2a:25:67:99:50:d4:fd:1e:ec:b2:45:5a:41:41:a3:
         dc:13:b9:b0:bc:ef:33:ff:cc:e9:1f:76:fc:d3:95:4c:db:b9:
         01:c4:78:23:ec:58:4a:b1:12:16:d2:b2:4e:d4:12:60:11:98:
         46:ed:73:6c:0e:8d:15:f9:5b:67:5a:50:27:49:b5:1f:e3:bc:
         92:b1:6b:60:b6:b2:7a:64:0f:f9:e6:62:92:28:c8:6f:61:5f:
         9e:c7:40:cd:b2:d6:ea:77:4b:4e:6a:f2:07:53:57:51:3d:90:
         66:a2:a9:12:cd:b4:c5:1e:0a:31:cf:1b:56:13:2f:5b:ea:be:
         d7:64:3b:dc:19:94:d9:a2:35:04:05:5e:d2:9a:2b:fd:af:c0:
         cd:83:e4:c8:6e:04:a1:46:ae:12:9f:3f:a4:94:11:c1:06:30:
         fb:bd:b8:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDovWUDAeZIDjro5dS1tjsPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjQwNzI1MDcxNDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzg0NzQzOGNlYTUwZDI1ODc2ZDljZmUzMjQ5Y2Y2OTVhOTQ2ZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri1BDAkD4iSP9izH5VON5Kteu4WJ
BeCrh1k+GDw5xo/fhKbQIX4T5lfPHNodgNKdlWFJxpCNPZ4ia/8K10kNLpF0eq7l
J7AoJfFG6T7HW62DagZ3BsKjOF5HdUTKWOIc2VB4yzWxIDSlU9j+WpkYaJcw3zsL
sv7+ZMmXYlEP+e1ZMETo1WwHBnfF7JV3X2z5LoZtAKVVjEhi3vGu0F9vX+UPKZeU
paDFVXQdvBQs893LcI4bm6wMm0DRHViwt08EDHSjWQXHd4ei39VQ9ryImEbEjgzR
ep3CAUebXlxx3hnTztR6BMLz7qd4qgmIRlvAFdcIOtYhkNvsY6yhc5nt/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPeEdDjOpQ0lh22c/jJJz2lalG/WMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvOTRSME9NNmxEU1dIYlp6LU1rblBhVnFVYjlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY9JMA0G
CSqGSIb3DQEBCwUAA4IBAQASrRR45doKbPzhgNGr3JedIwTRX0WLyzNXMA8WcAHu
pU7VtBVhHiMrVubflBufMbuNAvaptDibj0vW4G+MiUWxkEkDcO7N9NHoIsLowOXX
wpGesMq25rqU6B5t0+4qJWeZUNT9HuyyRVpBQaPcE7mwvO8z/8zpH3b805VM27kB
xHgj7FhKsRIW0rJO1BJgEZhG7XNsDo0V+VtnWlAnSbUf47ySsWtgtrJ6ZA/55mKS
KMhvYV+ex0DNstbqd0tOavIHU1dRPZBmoqkSzbTFHgoxzxtWEy9b6r7XZDvcGZTZ
ojUEBV7Smiv9r8DNg+TIbgShRq4Snz+klBHBBjD7vbh0
-----END CERTIFICATE-----
Generated at Wed Sep 25 19:06:12 2024 by rpki-client on console-ams.rpki-client.org