Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/p4MO_360IdumbDD4QxeHpXoX3Kk.roa
File:                     p4MO_360IdumbDD4QxeHpXoX3Kk.roa (raw, json)
Hash identifier:          21ta5F4MnHIyR9g5tF0eISuupSXh2py1LTjSsul5daA=
Subject key identifier:   A7:83:0E:FF:7E:B4:21:DB:A6:6C:30:F8:43:17:87:A5:7A:17:DC:A9
Certificate issuer:       /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial:       0189678A6F1699CFC7E258761297441B0C54
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/p4MO_360IdumbDD4QxeHpXoX3Kk.roa
Signing time:             Tue 18 Jul 2023 05:47:52 +0000
ROA not before:           Tue 18 Jul 2023 05:47:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57827
IP address blocks:        176.108.176.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Tue 18 Jul 2023 06:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:67:8a:6f:16:99:cf:c7:e2:58:76:12:97:44:1b:0c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
        Validity
            Not Before: Jul 18 05:47:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a7830eff7eb421dba66c30f8431787a57a17dca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6a:8c:5e:21:8f:35:03:df:27:e4:7e:51:25:
                    1c:a3:64:18:a1:16:82:4e:ea:a3:71:4d:85:9d:07:
                    06:26:8a:a1:e7:87:e3:09:75:ce:36:cc:3a:6b:b9:
                    6f:02:83:34:c1:33:19:53:09:c4:5c:6c:34:f5:be:
                    e5:4b:a4:22:b3:bf:a3:fd:81:eb:92:73:00:7e:93:
                    d4:18:e2:53:fb:23:09:61:11:80:ca:08:7f:5d:10:
                    02:c3:eb:76:84:68:c6:96:37:52:e8:ce:99:16:c0:
                    8b:10:6f:2b:b1:a4:30:f7:a5:b0:5d:34:5c:69:db:
                    6d:29:c6:a5:fe:9b:db:18:23:41:9a:09:12:38:7d:
                    46:dc:43:26:1e:ad:1d:59:b5:28:b4:17:d3:89:e7:
                    54:87:42:be:b4:4e:3e:5f:51:d5:1d:6e:a2:19:65:
                    54:f0:55:4c:ae:5a:eb:fb:0e:14:5d:b5:d1:1e:e9:
                    92:9e:64:bc:ca:ad:91:ca:ad:26:0e:74:6b:02:4c:
                    6d:12:36:73:9b:23:ef:51:9c:0e:e7:58:a4:4a:7d:
                    ee:a1:5e:a1:ca:79:1a:25:61:af:52:72:15:1e:be:
                    3d:a1:b4:fc:2a:a4:7f:39:78:9b:0e:ac:62:62:bc:
                    d0:1a:f6:78:ce:36:6c:b6:cf:34:8a:41:36:32:9a:
                    fa:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:83:0E:FF:7E:B4:21:DB:A6:6C:30:F8:43:17:87:A5:7A:17:DC:A9
            X509v3 Authority Key Identifier:
                keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/p4MO_360IdumbDD4QxeHpXoX3Kk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.108.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:23:9b:bc:94:e4:ec:c3:00:06:f5:6a:2a:ba:70:ef:99:fa:
         00:7d:7d:25:fe:28:95:92:42:1d:2f:9b:83:f2:56:83:2a:91:
         70:ed:c7:8d:a2:6e:3b:80:f4:6d:be:10:8e:72:2f:b4:af:7e:
         a4:8a:95:86:5e:9d:d8:b5:6d:36:6c:c6:1f:32:03:43:e2:b5:
         df:2c:8a:1b:fc:95:e8:71:f0:43:7e:87:0e:8e:67:dd:01:0f:
         d7:10:6d:92:06:d2:21:1b:06:51:28:b2:53:49:6d:5d:f2:d8:
         5b:c4:a7:07:bf:7f:9a:89:dd:b8:0e:f7:f6:e1:1d:d6:0b:be:
         7d:e3:31:49:46:5a:7c:11:a9:7c:99:a1:40:d6:03:aa:91:92:
         0a:d2:ae:77:f8:82:5b:4d:da:63:db:50:99:59:ab:4e:ab:d5:
         db:25:e5:74:dd:a6:d2:ee:d7:44:de:5f:b5:77:d3:2f:9d:de:
         53:80:dd:1e:d3:ff:c6:92:b8:55:2d:a4:1d:17:f9:e2:42:0b:
         fd:51:cc:73:96:e1:7d:68:89:20:69:8e:94:03:be:00:ba:ce:
         1a:2a:dd:ad:82:88:0b:d6:7b:c3:22:d5:97:fb:40:eb:34:e6:
         1f:53:07:b3:62:66:35:10:27:67:41:0d:06:49:89:83:b3:c7:
         b5:e1:41:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:25 2024 by rpki-client on console-fra.rpki-client.org